This checklist and discussion of security provisions in computer-based information systems contains more than 800 security-related issues in thirteen categories ranging from personnel policies and training to the protection of computer hardware and software. The discussions are based on authors' experience with sensitive resources and on the guidelines used by banking institutions.