Security Standards White Papers
Synergy in Security: Why a Combined ISO 17799 and OCTAVE Approach Makes Sense
Overview Information systems today resemble museums more than medieval castles. The castle description of information security describes a perimeter-centric model of inside and outside. This doesn't apply as elnitiatives, third party support and outsourcing requires the perimeter to become porous. Like a museum, the challenge is to identify the critical assets and protect not just the perimeter of the network, but those assets as well. An ideal approach would be one that integrates the audit, risk assessment, recommendations and strategy into a single system. It would offer a non-propriety, tested methodology that could be replicated. The audit and risk assessment would also clearly define the mission critical elements; this makes the prioritization process in the recommendations and strategy deliverables straightforward. This is exactly the solution this paper outlines.
| Publisher | SISA | File Format | |
|---|---|---|---|
| Date Published | August 2005 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSSMicrosoft FDCC Webcast Series: Do It Right: Log in as Normal User
DownloadFDCC requires that the typical user run as Normal User whenever possible; without this, a managed environment is practically impossible. For organizations that have given Local Administrator rights to their...
Gartner Report: Magic Quadrant for Secure Web Gateway, 2007
Interested in what analyst firm Gartner has to say about Blue Coat Secure Web Gateway solutions? Read its "Magic Quadrant for Secure Web Gateway, 2007" report to find out....
Diffie-Hellman Key Exchange -- A Non-Mathematician's Explanation
The Diffie-Hellman algorithm is one of the most common protocols used in networking today. An understanding of its underlying protocols and processes helps a great deal when trouble-shooting a system....
Segregation of Duties in the Real World: Risk-Based SoD Management With Continuous Monitoring Lowers Compliance Costs
Segregation of duties in the real world demands top-down management that eliminates financial risk without adding overhead costs or extinguishing ERP-fueled efficiency gains of the last decade. Fortunately, auditors and...
Encryption Essential to Meet Information Security and Compliance Initiatives
California's unique notice of security breach act (frequently called "S.B. 1386") and the Gramm-Leach-Bliley Act of 1999 (also known as "The Financial Services Modernization Act") are two major laws that...
