Security (1500) – Page 62 – BestITDocuments

business

The Digital Divide

May 6, 2010

Provide for flexible secure coordinated resource sharing among dynamic collections of individuals, institutions & resources (a.k.a. virtual organizations). Increasingly complex and difficult to secure with traditional tools and methods. Landscape Emerging generations of eBusiness applications can be based on Web Services, layers of often incompatible middleware and computing platforms...

business

IT Architecture Driver Pieces

May 5, 2010

Strategic Direction Technology Standards Data Current Architecture Business Drivers Design Drivers Architectural Segments Exec Support Administrative IT Operations Business Architecture Data Architecture Applications Architecture Technology Architecture Asset Management Transitional Processes Target Architecture Strategic Direction www.bestitdocuments.com

Tags: Authentication – RBAC – SOD – IRM (342), Networking (340), Security (1500)

o-s

Big Bytes

May 5, 2010

When you start talking about lots of bytes, you get into prefixes like kilo, mega and giga, as in kilobyte, megabyte and gigabyte (also shortened to K, M and G, as in Kbytes, Mbytes and Gbytes or KB, MB and GB). The following table shows the multipliers: Name Abbr....

Tags: Authentication – RBAC – SOD – IRM (342), Networking (340), Security (1500)

security

Vulnerability Management Obstacles

May 4, 2010

Inaccurate inventory of system configurations and software patches. Complexity of integrating/managing existing tools. Inefficient/unreliable research capabilities/methods. Lack of resources and cycles. Inability to quantify metrics. Costly resources and tools. www.bestitdocuments.com

Tags: Compliances (1300), Documentation (800), Security (1500)

business

Mission of A Security Program

May 4, 2010

Prevent, detect and respond to intentional acts that could impact the ability of a company to provide essential services. Maintain public/customer confidence in a company’s ability to ensure the confidentiality, integrity and availability of information and services. Enable a company to pursue business opportunities while meeting security and privacy...

Tags: Authentication – RBAC – SOD – IRM (342), Security (1500)

sample-it-spreadsheets , security

The Typical Patch Process

May 3, 2010

Scan or poll network to determine vulnerabilities Real-time Network Defense System Change Alerts Identify “unmanaged” nodes on network Receive frequent vulnerability updates Ongoing monitoring for baseline compliance, vulnerabilities, and threats Prioritize vulnerabilities and patch deployment Standards-based interface to firewall, anti-virus and intrusion prevention systems to support rapid shielding Test...

Tags: Compliances (1300), Documentation (800), Security (1500)

compliances , security

Sample – Document Sharing Business Requirements

May 2, 2010

Integration with Existing Windows Operating Systems and MS and Third party applications. Create Folders Create libraries Collect documents Organize & manage content Organize & manage – File properties Organize & manage – metadata Organize & manage – Content types Locate & understand documents Search – Sorting grouping (Windows 200x,...

Tags: Compliances (1300), Documentation (800), Security (1500)

compliances , itil

ISO 17999, 2700x and COBIT Quick Notes

May 1, 2010

This standard contains 11 security control clauses collectively containing a total of 39 main security categories and one introductory clause introducing risk assessment and treatment. 1) Security Policy 2) Organizing Information Security 3) Asset Management 4) Human Resources Security 5) Physical and Environmental Security 6) Communications and Operations Management 7) Access Control 8) Information...

Tags: Compliances (1300), Documentation (800), Security (1500)

security

Password Synchronization Technology

May 1, 2010

Business Issues Passwords are a reality and are here to stay Increased security risks in large enterprises A need to effectively manage user identities in increasingly complex environment The larger the enterprise, the greater support that is needed Help desks are required to support more complex enterprises with the...

Tags: Compliances (1300), Documentation (800), Security (1500)

business

Reduce TCO – Consider Virtualization

April 30, 2010

Server Workstation Applications Storage VMWare IBM Virtualization ZEN MS application Virtualization (App-v) Windows 7 Remote-App Windows 7 Roaming Profiles Windows 7 folder redirection Virtualize – Pano MS System Center MS Desktop Optimization Pack for Software Assurance End User Benefits of desktop virtualization

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500), Virtual - VMWare (30)

compliances

Data Storage Spectrum

April 30, 2010

Fibre-channel iSCSI with Fibre-channel SANs Dell, EMC, HP, IBM and NetApp 10 Gig Ethernet FCoE fibre-channel over Ethernet Thin provisioning? MAID Massive Array Idle Disks – Solid state drives Tape Raid CD Flash-memory

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

business

Most significant digital data issues

April 29, 2010

Responsible stewardship: effective recognition of the issue of sustained preservation & access Scalable, extensible and evolvable solutions for building and operating digital repositories in a networked world Trustworthy, verifiable methods for overcoming format obsolescence & providing sustained access to authentic electronic records Resources for digital preservation

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

security

Defense Against SYN Flood

April 29, 2010

Increase size of connection table Add more servers Trace attack back to source Ask your ISP to filter malicious packets Add firewall Typically “SYN proxy” Partial solution was “SYN-cookies” Reply to SYN with SYN-cookie Allocate no resources until SYN-cookie is returned Egress filtering restricts spoofed IP addresses

Tags: Compliances (1300), Documentation (800), Security (1500)

compliances

Secure Data Sharing

April 28, 2010

What is it Where is it What is the Risk Strategic What Policy should be enforced How can the process be Audited Ongoing Process of Sharing Data Tactical Manage Removable Media Encrypt mobile data Provide users with relevant Policy excerpts and Audit acceptance

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

business

Data Loss Prevention (DLP)

April 28, 2010

Learn from industry analysts, product experts, and customers to gain an understanding of how DLP solutions can help secure your sensitive information no matter where it resides in your organization. How Data Loss Prevention solutions fit into an overall information risk management strategy. How to discover, monitor and control...

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

security

Sample Vulnerability Assessment results Tracking Form

April 27, 2010

Unauthorized ports discovered Host Name / description TCP / UDP OS Helpdesk -associated tickets updated or opened ...

Tags: Compliances (1300), Documentation (800), Security (1500)

business

Average Web User Statistics

April 26, 2010

Average of: 16 Sessions per Week 26 Unique sites visited 53 Page Views per Session 282 Page Views per Week 9 Hours Per Week 81 Minutes per Session 56 Seconds per Page Speed will become a major business differentiator in a connected world 70% of IT budgets are spent...

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

business

IT Challenges

April 26, 2010

48% report a quarter or more of IT projects are delivered late 75% of Internet initiatives fail due to poor planning. 75% of e-business initiatives fail due to poor planning and lack of understanding of the technology. 38% report a quarter or more of IT projects are delivered...

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

business

Backups alone are not enough

April 25, 2010

Poor policy management No Standards or procedures No indexing or search capabilities Poor segmentation Data is “clumped” on media haphazardly according to source time and place rather than according to policy Data sharing the same media cannot be truly expired Retrieval requests will bring back unrelated data Unworkable as...

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

compliances

Record Management: Sarbanes – Oxley Act

April 25, 2010

Signed into law July 30 2002 A direct result of corporate scandals, such as Enron and WorldCom Introduced legislative changes to financial and corporate regulations Intended to “deter and punish” corporate and accounting fraud and corruption, ensure justice for wrongdoers, and protect the interests of workers and shareholders” (Quote:...

Tags: Compliances (1300), Documentation (800), Security (1500)

business

Sample Telco SLA Considerations

April 24, 2010

Description Target % Dependencies Additional Comments Uptime/availability of critical Telecom systems Uptime/availability of critical Telecom systems Percentage of MAC reduction in Remedy PBX availability: Call volume: International calls: National &...

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

application

Sample Application Hosting Services

April 24, 2010

Server Administration Application Support Infrastructure Support Upgrades DB Overlays, Cloning, creation and data population Database Maintenance Patch Management Middleware Optimization and Mnagement Databased Backup Administration Database Security Administration...

Tags: Compliances (1300), Documentation (800), ITIL Application Services – SDLC – Web Services, Security (1500), Test Case - Use Case

o-s

Common DOS/Windows commands and their Linux counterparts

April 24, 2010

Copy a file copy path1filename1 path2filename2 cp path1/filename1 path2/filename2 Copy subdirectory xcopy path1. path2 /s cp -R path1 path2 Delete a file del filename rm filename Move a file move path1filename1 path2 mv path1/filename1 path2 Rename a file ren filename1 filename2 mv filename1 filename2 List a...

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

compliances , data-center-soc-noc , security

Helpdesk Research – Analysis

April 23, 2010

Executive Summary After extensive research and evaluation of each Helpdesk’s experiences with Windows Vista and, we have determined that Windows 7 will provide substantial Helpdesk savings for high volume users who switch to Windows 7. Windows 7 can be expected to reduce support costs by $483 per user per...

Tags: Compliances (1300), Documentation (800), Security (1500)

business

Help Desk Enterprise Integration

April 22, 2010

Service Desk offers true enterprise-class integration services through its unique SNMP and SMTP Listeners. These powerful network listeners watch for alerts from enterprise management platforms such as Remedy, Landesk, CA Unicenter. Tivoli or HP Openview. When relevant events occur, trouble tickets can be automatically generated at the help desk. ...

Tags: Authentication – RBAC – SOD – IRM (342), OS – Patch Management, Security (1500)

business , compliances , security

Anatomy of Audit Logging

April 22, 2010

The Information Security Forum’s (ISF) The Standard of Good Practice for Information Security (Version 4.1, January 2005) states that the objective for logging is “To ensure individual accountability and to enable incidents, such as access violations, to be investigated and resolved.” This is easy to state, but a major...

Tags: Authentication – RBAC – SOD – IRM (342), Compliances (1300), OS – Patch Management, Security (1500)

o-s , security

MS IE Advanced Settings (8.0.6001.18702)

April 21, 2010

Accessability Always expand ALT text for images Unchecked Enable Caret Browsing for new windows and tabs Unchecked Move system caret with focus / selection changes Unchecked Reset text size to medium for new windows and tabs Unchecked Reset test size to medium while zooming* Checked Reset zoom level...

Tags: Compliances (1300), Documentation (800), Security (1500)

application , business , compliances

Knowledge Lake Imaging Server

April 21, 2010

KnowledgeLake Imaging Server eliminates the costs and challenges of using paper documents, as well as the limitations it puts on your business processes. Built on Microsoft® SharePoint®, KnowledgeLake Imaging Server uses the latest technology to provide features that extend SharePoint’s enterprise content management capabilities throughout your organization. With KnowledgeLake...

Tags: Compliances (1300), Documentation (800), ITIL Application Services – SDLC – Web Services, Security (1500), Test Case - Use Case

data-center-soc-noc

Sample ERP Lines of Service

April 20, 2010

Server Administration ERP Application Support ERP Infrastructure Support ERP Upgrade Patch Management HW & Firmware Updates DNS Support Virus Protection Server OS and Non-DB Backup Administration Offsite Storage Maintanence of...

Tags: Authentication – RBAC – SOD – IRM (342), Security (1500)

data-center-soc-noc

Help Desk Change Management

April 20, 2010

Today’s distributed computing environment has made change management a nightmare for many organizations. Today’s Service Desk solution processes new hires, employee transfers, common system upgrades, and other frequently repeated tasks can be managed with ease. The ability to setup dependencies in advance to ensure that the various tasks are...

Tags: Authentication – RBAC – SOD – IRM (342), Security (1500)

compliances , security

Help Desk System Considerations

April 19, 2010

Modern day Helpdesk considerations includes the following system capabilities: · Call Management · Problem Resolution · Problem Prevention · Asset Management · Automated Crisis Management · Integrated Service Level Agreements · Change Management · Built-in Reporting · Web Support · Enterprise Integration · Customization Today’s help desk solutions offer a blend of power and ease-of-use. Help Desk gives mid-range and departmental...

Tags: Authentication – RBAC – SOD – IRM (342), Security (1500)

Type above and press enter or press close to cancel.

Tag Archives: Security (1500)