Compiled by: Nancy Y. McGovern and Anne R. Kenney
Last revised: May 2002
Notable Web sites
The Canadian Treasury Board's Common Look and Feel for the Internet
Carnegie Mellon's CERT® Coordination Center
Department of Justice, A Guide to Disability Rights Laws,
August 2001 http://www.usdoj.gov/crt/ada/cguide.htm
National Cancer Institute's Web Design and Usability Guidelines
- National Library of Australia:
Australia's web resources: guidelines for creators and publishers http://www.nla.gov.au/guidelines/2000/webresources.html
- Safekeeping Project with sponsors
W3C guidelines http://www.w3.org/TR/WCAG10/
Web site examples
International Risk Management Institute IRMI http://www.irmi.com
- Healthcare Providers:
- the Risk Management Foundation: Harvard
Medical Institutions http://www.rmf.harvard.edu/
- the American Society for Healthcare
Risk Management ASHRM of the American Hospital Association http://www.ashrm.org/asp/home/home.asp
- Nonprofit Organizations:
- the Public
Risk Management Association PRIMA: Nonprofit Risk Management Center
and Public Entity Risk Institute http://www.primacentral.org/
Risk Organization http://www.nonprofitrisk.org
- Environmental Monitoring:
National Risk Management Research Laboratory NRMRL http://www.epa.gov/ORD/NRMRL
- Financial Investors:
Global Association of Risk Professionals GARP
Risk Management Association RMA http://www.rmahq.org
Bailar, Gregor, "Nasdaq Lessons Learned from Sept.
BindView Corporation, "Risk Management: The New IT
Challenge," white paper, March 2000, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=417&scid=88
Blundon, William, "Security is in the eye of the
Systems, "Policies and Profiles: The Keys to Success in Mobile
Data Services," white paper, 2001, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=16942&scid=95
Christian F., "Information Risk Management: Why Now?"
white paper, 1999.
Chapple, Mike, "SQL Server Disaster Recovery,"
Cohen, Fred, "Managing Network Security: Attack and
Defense Strategies," white paper, July 1999, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=3583&scid=88.
Computer Sciences Corporation, "Information Risk
Management Program IRMP: An Overview," white paper, April 2000, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=24732&scid=88.
Cooper, Michael D. "Design Considerations in Instrumenting
and Monitoring Web-based Information Retrieval Systems," Journal
of the American Society for Information Science, 49 10:903-919, 1998,
Davis, Philip, "The Effect of the Web on Undergraduate
Citation Behavior-a year 2000 update," forthcoming College and Research
Libraries, January 2002.
Edupage, "President Forms Cyberterrorism Panel,"
Educause, October 17, 2001.
Elsevier Science, "Information on Electronic Back
Files, Access and Archiving," http://www.elsevier.com/inca/publications/misc/ni2164.pdf.
Flecker, Dale, "Preserving Scholarly E-Journals,"
D-Lib Magazine, September 2001 Volume 7 Number 9, http://www.dlib.org/dlib/september01/flecker/09flecker.html.
Geer, Daniel, E., Jr., "Risk Management is Where
the Money Is", reprint of an address before the Digital Commerce
Society of Boston, November 3, 1998, http://www.itpapers.com/cgi/PSummaryIT.pl?paperrid=14911&scid=88.
Global Information Security Services GISS, "Information
Risk Management Program IRMP: AN Overview", April 2001, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=24732&scid=88.
Caroline R., "New Trends in Risk Assessment, white paper, 1998,
Harral, William M., "The Roles and Inter-relationships
of Risk Management and Quality Management Systems Auditing," white
paper, 1998, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=1682&scid=88.
Herman, Melanie L. and Barbara B. Oliver "Teambuilding:
Rx for Crisis Survival," 10 September 2001, http://www.nonprofitrisk.org/nwsltr/archive/nl901_1.htm.
Horgan, Daniel, "Five thoughts about Cyberterrorism,"
Kabay, M.E. "ICSA White Paper on Computer Crime Statistics,"
Kenney, Anne R., and Oya Y. Rieger, Moving Theory into
Practice: Digital Imaging for Libraries and Archives, Research Libraries
Kenney, Anne R., Nancy Y. McGovern, Peter Botticelli,
Richard Entlich, Carl Lagoze, and Sandra Payette, "Preservation Risk
Management for Web Resources: Virtual Remote Control in Cornell's Project
Prism," D-Lib Magazine, January 2002, http://www.dlib.org/dlib/january02/kenney/01kenney.html.
Kirschbaum, Dennis M., "Six Tips for Playing it Safe:
At Work, At Home, on the Web," http://www.nonprofitrisk.org/nwsltr/archive/nl101_4.htm.
Kleindorfer, Paul R. "Industrial Ecology and Risk
Kloman, H. Felix, "The Risk Management Spectrum," Risk Management Reports, 2001, http://www.riskreports.com/spectrum.html.
Kovacs, Paul and Howard Kunreuther, "Managing Catastrophic
Risk: Lessons from Canada," in Institute for Catastrophic Loss Reduction
Research Paper, http://grace.wharton.upenn.edu/risk/downloads/01-09-HK.pdf.
Kunreuther, Howard, Patricia Grossi, Nano Seeber and Andrew
Smyth, "A Framework for Evaluating the Cost-Effectiveness of Mitigation
Measures," paper presented at the Bogazici University /Columbia University
Kunreuther, Howard in Bruna de March ed. "Incentives
for Mitigation Investment and More Effective Risk Management: The Need
for Public-Private Partnerships" Special Issue on Risk and Governance,
Journal of Hazardous Materials, 2001, http://grace.wharton.upenn.edu/risk/downloads/01-13-HK.pdf.
Kunreuther, Howard coordinating author, Chris Cyr, Patricia
Grossi and Wendy Tao, "Using Cost-Benefit Analysis to Evaluate Mitigation
- Measures for Lifelines," April 2001, http://grace.wharton.upenn.edu/risk/downloads/01-14-HK.pdf.
Kunreuther, Howard and Christian Schade, "Worry and
Mental Accounting with Protective Measures," white paper, February
Lagoze, Carl, William Arms, Stoney Gan, Diane Hillmann,
Christopher Ingram, Dean Krafft, Richard Marisa, Jon Phipps, John Saylor,
Carol Terrizzi, Walter Hoehn, David Millman, James Allan, Sergio Guzman-Lara,
Tom Kalt, "Core Services in the Architecture of the National Digital
Library for Science Education (NSDL)," submitted to JCDL, 2002, http://arxiv.org/abs/cs.DL/0201025.
Lawrence, Greg, William Kehoe, Oya Y. Rieger, William
Walters, and Anne R. Kenney, Risk Management of Digital Information: A
File Format Investigation. Washington, DC: Council on Library and Information
Resources, 2000, http://www.clir.org/pubs/abstract/pub93abst.html.
Lawrence, H. Andrew, "Digital Insurance for Information
at Risk: A Strategic Overview of Digital Preservation," white paper,
Eastman Kodak Company, 2000, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=21017&scid=169.
Long, Marian H., "Business Interruption Risk Assessment:
A Multidisciplinary Approach," white paper, 1997, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=23794&scid=88.
Luh, James C., "No Bots Allowed," Special to
Interactive Week, April 12, 2001, http://www.eweek.com/article/0,3658,s=722&a=7646,00.asp.
Marvell, Simon, "Business Continuity Management in
the 21st Century," no date, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=9801&scid=88
McClure, Charles R. and J. Timothy Sprehe, Guidelines
For Electronic Records Management On State And Federal Agency Websites,
an NHPRC-funded research project conducted in 1997, http://istweb.syr.edu/~mcclure/guidelines.html.
Sprehe and Kristen Eschenfelder, Performance Measures for Federal
Agency Websites, 2000, http://fedbbs.access.gpo.gov/library/download/MEASURES/measures.doc.
McNamee, David, "Assessing Risk Assessment,"
Management Control Concepts, http://www.mc2consulting.com/riskart2.htm.
Meinel, Carolyn, "Code Red for the Web," Scientific
American, October 2001: 42-51.
Mulcahy, Ryan, compiler, "'First Alert' system sought
for Internet, Feds Discuss Data Sharing, and More," CIO Magazine,
October 25, 2001, http://184.108.40.206/online/102501_report.html.
Nonprofit Risk Organization, "Risk Assessment Tool
Offers Customized Help," http://www.nonprofitrisk.org/nwsltr/archive/nl300_1.htm.
Nonprofit Risk Organization, "Beyond the Bend in
the Road: The Nonprofit Risk Management Center Offers Predictions for
the Year Ahead," http://www.nonprofitrisk.org/nwsltr/archive/nl100_4.htm.
Nonprofit Risk Organization, "Making Net Gains: Staying
Safe While Making a Name for Your Nonprofit on the Internet," http://www.nonprofitrisk.org/nwsltr/current/nl901_3.htm.
Nonprofit Risk Organization, Full Speed Ahead: Managing
Technology Risk in the Nonprofit World, http://www.nonprofitrisk.org/pubs/full_spd.htm.
Nonprofit Risk Organization, "eNoculation,"
Nonprofit Risk Organization, Protecting Your Nonprofit
and the Board, http://www.nonprofitrisk.org/nwsltr/archive/nl199_1.htm.
Nonprofit Risk Organization, Vital Signs: Anticipating,
Preventing and Surviving a Crisis in a Nonprofit, http://www.nonprofitrisk.org/pubs/vital.htm.
OECD, Chemical Accident Risk Assessment Thesaurus CARAT,
Reduction Act, 1995, http://policyworks.gov/policydocs/16.pdf.
Paul, Brooke, "Risk-Assessment Strategies,"
CMP Media, white paper, October 30, 2000, http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=14014&scid=88.
Perrin, Jerry, "ERM and September 11," http://www.irmi.com/expert/articles/miccolis005.asp.
Rosenthal, Ira, Al Ignatowski, C. Kirchsteiger, "A
Generic Standard for the Risk Assessment Process:..", Discussion
on a proposal made by the program committee of JC-J, RC Workshop on 'Promotion
of Technical Harmonization of Risk-Based Decision Making', September 2001,
Scalet, Sarah D., "Cyberterrorism Is Everyone's War,"
CIO Magazine, October 11, 2001, http://www.cio.com/research/security/edit/a101101_cyber.html.
Scall, Eric, "Liability Trends for Nonprofit Organizations,"
Semantic Enterprise Solutions, "A Comprehensive Risk
Management Guide," June 2000. http://www.itpapers.com/cgi/PSummaryIT.pl?paperid=2348&scid=88.
Vaknin, Sam, "Bright Planet, Deep Web," http://www.trendsiters.com/article1009.html.
Sam, "Internet: A Medium or a Message? - Part 1," http://samvak.tripod.com/internet.html.
VeriSign, Inc. "Journey to the Right of the Dot:
ICANN's New Web Extensions," white paper, May 9, 2001, http://www.killermarketing.com/final_gtld_5_17.pdf.
Wood, Angus, "Integrating Risk Assessment into the
Enterprise Information Management Strategy," presented at the 6th
International Pipeline Reliability Conference, November 19-22, 1996, Houston,