World Bank Technology Risk Checklist v6.1
http://www.opencsoproject.org/forum/about39.html

From the Introduction: "The World Bank Technology Risk Checklist is designed to provide Chief Information Security Officers (CISO), Chief Technology Officers (CTO), Chief Financial Officers (CFO), Directors, Risk Managers and Systems Administrators with a way of measuring and validating the level of security within a particular organization."

The checklist covers the following areas:

1. Risk Management
2. Policy Management
3. Cyber-Intelligence
4. Access Controls/Authentication
5. Firewalls
6. Active content filtering
7. Intrusion detection system (IDS)
8. Virus scanners
9. Encryption
10. Vulnerability testing
11. Systems administration
12. Incident response plan (IRP)
13. Wireless Security

(I found this in a post from Marc Menninger on cissp-forum [Thanks Marc!])  ¶ permanent link