As promised in last week's newsletter, this week the next installment of Computer Security 101 (Lesson 3) was posted as well as an article on legislation that is passed or pending in many states that seems to outlaw firewalls and encryption. Read the article and form your own opinion.

Other new additions to the site this week include new Subjects, a new Top Picks, an updated Glossary and a new How-to.

I have added Subject areas for Certification and Disaster Recovery. Many of our visitors are interested in getting industry or vendor certification to prove their information security know-how and the Certification subject will provide articles, links and resources to help.

Disaster Recovery is an unfortunate offshoot of Network Security. However, it may not always be related to hacking or worms. You need to make sure you have a well-defined Disaster Recovery plan to handle any event including floods, fires and other disasters as well as computer intrusion. For information on how to create and manage a Disaster Recovery plan check this Subject out.

The glossary was rearranged for easier navigation. Instead of just a long list the words were grouped by letter with hyperlinks to take you directly to the letter you are looking for.

Tying in with this week's article on security auditing and logging, I wrote a How-to tutorial to help users of Windows XP Professional enable security auditing on their computers. The logging is not turned on by default so it won't help much if you don't enable it.