Table of Contents
The Perils of Mount Must Read™: Confessions of a Cliff Note Junky. 5
Are you sure I’m in recovery?. 5
I will conquer Mount Must Read™.. 5
Compliance Farm™: Theory of Professional Practice Evolution (Non-linear) 8
What should an Information Systems Auditor eat?. 10
Touchdown! Mount Must Read™ 7, Hometown 0. 11
What I don't know can't hurt me. 12
Please don’t make me go back to high school 15
Good News, they pay people in congress to think. 15
Say "Goodbye" to statute virginity. 17
Give up the white paper crutch. 18
Can someone help me down from my horse?. 19
My Mother told me to say I’m sorry. 19
Basic principals of a well rounded diet 20
How do you keep that stunning figure?. 20
You can’t make me download! 21
The diet starts today: All right today... first thing in the morning… I mean it this time. 22
Birth records, death certificates and standards euthanasia. 23
If it makes sense, it exists. 23
A trip to the Standards Mall 24
The more you know, the less you have to say. 27
A simpler selection criteria. 28
How did I miss the Common Criteria?. 29
Honest Doc, I looked everywhere. No expiration date. 36
Open the computer bay, HAL. 37
The Classification Framework. 40
Second greatest hook of all time. 41
Process alone can’t save us. 42
Factors affecting world trade: 44
Enough about them, let’s talk about us. 46
Did you happen to notice where I left a half million auditors?. 47
A problem not owned equals a problem not solved. 48
You want me to kill them now? (But they're so cute!) 48
I don’t want a baby brother. Tell the stork to bring ideas. 50
Competition is the spice of life. 52
Get the data and proportionality. 53
Does the punishment fit the crime?. 54
Do you mind one last question?. 54
Why didn’t I write any of that?. 56
Appendix A: Database and Ontology. 58
Appendix B: Must Read's™ “Security and Risk Management” 60
Whether you're preparing for Cybersecurity certification, working with government standards, or simply starting your career in compliance, these are the NIST Federal Information Processing Standards (FIPS), Special Publication (SP), and Interagency Report (IR) topics