The updated booklet addresses changes in technology, risk assessments, mitigation strategies, and regulatory guidance. The discussion on risk assessment has been expanded to reflect the maturation of that process. New or revised material is included regarding authentication, monitoring programs, and software trustworthiness. Many additional topics, including malicious code prevention, wireless, remote access, and trust services have also been revised......

....