NCIX — National Counter-Intelligence Executive
has newsletters on information security
and more general but related topics:
http://www.ncix.gov/
NSA is the information security agency
in the U.S., and includes the National Computer
Security Center, source of the "Rainbow Series":
http://www.nsa.gov/:
Hey, so I'm biased, but Purdue's CERIAS project
has a lot of great information, tools,
pointers to other resources, etc.:
http://www.cerias.purdue.edu/
InsureTrust (formerly Network Risk Management Services)
provides services in risk assessment and managment,
and offers insurance coverage for information security
threats — the first organization providing integrated
risk assessment, management, and insurance.
InsureTrust
P. O. Box 205-1000
11770 Haynes Bridge Road
Alpharetta GA 30004
+1-888-932-7475
http://www.insuretrust.com,