IS2ME

This site presents a useful structure for risk assessment/management and information security, specifically for medium-sized businesses (200-1000 employee size).  It is not intended as a panacea, but as a stop-gap measure for those without a mature information security architecture of their own.  A Spanish version (the original) is available at http://www.is2me.org/ .