Collaboration on "top 20 controls"

I thought this article was interesting:

http://www.theregister.co.uk/2009/02...gold_standard/

Not necessarily for the 20 controls listed as these are reasonably obvious but for the fact that it took this long to have a federal agency collaboration to come up with it.

What will be interesting now is will this be expanded and fleshed out to turn into something else that an agency or organisation can (or will be required) to certify against.

***** EDIT ******
SANS actually have a good reproduction of the content in a web based form:
http://www.sans.org/cag/
You can also get a word document copy from here:
www.govexec.com/pdfs/CAG_Draft.doc