security assessment case studies for implementing the nsa iam phần 3 ppt

... Chapter 3 • Determining the Organization’s Information Criticality286 _NSA_ IAM_ 03. qxd 12/11/ 03 3:25 PM Page 102no impact on the organization for that particular information type .The number5, on the ... Chapter 3 • Determining the Organization’s Information Criticality286 _NSA_ IAM_ 03. qxd 12/11/ 03 3:25 PM Page 88Planning for the Assessment Activities The amount of work that needs to be performed ... orapplications .The NSA IAM is a top-down approach for assessments, so we startwww.syngress.comDetermining the Organization’s Information Criticality • Chapter 3 87286 _NSA_ IAM_ 03. qxd 12/11/ 03 3:25 PM...

security assessment case studies for implementing the nsa iam phần 2 ppt

... prior to the arrival of the assessment team.www.syngress.com 38 Chapter 1 • Laying the Foundation for Your Assessment 286 _NSA_ IAM_ 01.qxd 12/15/ 03 3:15 PM Page 38 Introduction The Pre -Assessment ... withscoping the assessment. www.syngress.com20 Chapter 1 • Laying the Foundation for Your Assessment 286 _NSA_ IAM_ 01.qxd 12/15/ 03 3:15 PM Page 20Q: How many hours does it take to do an IAM assessment? A: ... directly from the integration of the organization’s mission with the IAM process and security www.syngress.com46 Chapter 2 • The Pre -Assessment VisitFigure 2.1 The IAM Timeline: The Pre-Assessment...

security assessment case studies for implementing the nsa iam phần 1 docx

... drive the assessment effort. Ultimately, the majority of information is the same in eitherwww.syngress.comLaying the Foundation for Your Assessment • Chapter 1 3 Contracting and the NSA IAM NSA ... Audience? 31 1Who Should Attend? 31 1Organizing the Closeout Meeting 31 2Determining Time and Location 31 2Time of Meeting 31 3Day of Week 31 3Meeting Room 31 3Determining Supply List for the Closeout ... Learned into the Business Process 39 0Making It Repeatable 39 2 Case Study :The University of Science 39 3Understanding the Requirements 39 3What Should We Keep? 39 3What Should We Destroy? 39 4Designating...

security assessment case studies for implementing the nsa iam phần 4 pot

... roughly 35 information types .The group goes back over the list, carefullywww.syngress.comDetermining the Organization’s Information Criticality • Chapter 3 109286 _NSA_ IAM_ 03. qxd 12/11/ 03 3:25 ... 12/11/ 03 3:25 PM Page 107In the majority of assessments, the values for each block within the SCMswill be carried directly over from the OICM. Because of the top-down nature of the NSA IAM, the ... the OICM, as we did in Chapter 3 .The assessment teamis involved in the assessment process in to facilitate the process and to providetheir extensive experience in information security for the...

security assessment case studies for implementing the nsa iam phần 5 potx

... signiﬁcant damage to the organization.www.syngress.com The System Security Environment • Chapter 5 1 73 286 _NSA_ IAM_ 05.qxd 12/11/ 03 3:28 PM Page 1 73 Timeline of EventsHere, in the last NSA IAM required ... Router 1provided the connectivity for the T1 from the Internet. Router 2 provided the connectivity for the medical center and colleges. Router 3 provided the connec-tivity for the dorm network.Translating ... up the TAP, since it can be considered the core outcome of the pre -assessment site visit .The TAP is the primary deliverable created during the pre -assessment phase .The TAP combines all the information...

security assessment case studies for implementing the nsa iam phần 6 pdf

... 245286 _NSA_ IAM_ 07.qxd 12/12/ 03 3 :32 PM Page 245IntroductionThis chapter introduces the reader to the onsite assessment phase of the IAM andassociated activities. By the end of this chapter, the ... ﬂow for the process .The customer should be presented with the assessment s ultimate objec-tives as deﬁned by the customer during the pre -assessment phase. Keeping theseobjectives in the forefront ... Weeks1-2Weeks2-8 WeeksPre -Assessment On-SitePost Assessment Pre -Assessment Visit1-5 Days286 _NSA_ IAM_ 07.qxd 12/12/ 03 3 :32 PM Page 226286 _NSA_ 06.qxd 12/15/ 03 11 :32 AM Page 218(spouse, kids,...

security assessment case studies for implementing the nsa iam phần 7 doc

... lowwww.syngress.comManaging the Findings • Chapter 8 2 83 286 _NSA_ IAM_ 08.qxd 12/15/ 03 5: 03 PM Page 2 83 NOTE The assessment team utilized NSA s 18 Baseline INFOSEC Classes andCategories as the high-level guide for conducting ... discourage the assessment team. Just accept it and move on.From the Trenches…286 _NSA_ IAM_ 07.qxd 12/12/ 03 3 :32 PM Page 2 53 IntroductionAt this point, we need to discuss what to do with the information ... feedback from the departments that the assessment wasgoing better than they expected and that they found value in the informationthat was being collected.They also said they felt that the assessment...

security assessment case studies for implementing the nsa iam phần 8 docx

... on the “Ask the Author” form. You willalso gain access to thousands of other FAQs at ITFAQnet.com.286 _NSA_ IAM_ 08.qxd 12/15/ 03 5: 03 PM Page 30 7286 _NSA_ IAM_ 09.qxd 12/16/ 03 12:58 PM Page 33 2Table ... procedures.www.syngress.comManaging the Findings • Chapter 8 30 3Continued286 _NSA_ IAM_ 08.qxd 12/15/ 03 5: 03 PM Page 30 3Table 8.1 A Sample of Findings from the SA for Medical ManagementFinding Threat ... have to map the finding to the OICM, or can you just map itto the SICM?A: As you have already learned, the impact definitions are the same for both the OICM and the SICM.Therefore, the findings...

security assessment case studies for implementing the nsa iam phần 9 pot

... conduct the assessment. In our case, we describe the NSA IAM as the methodology usedto conduct the assessment and the basis for the assessment process. Since this is the main document, the assessment ... anal-ysis. Security Horizon utilized the National Security Agency (NSA) Information Security Assessment Methodology (IAM) to conduct the organizational portionof the assessment. Security Horizon ... Chapter 11 38 3286 _NSA_ IAM_ 11.qxd 12/16/ 03 1:01 PM Page 38 3■A general description of the overall results and the level of additionalattention the customer needs to improve their security. This...

security assessment case studies for implementing the nsa iam phần 10 pot

... (FACTS), 31 7final reportanalysis, performing, 33 6 34 5analysis, preparing for, 33 4 33 6 case study: analyzing findings, 35 5 36 2creating/formatting, 34 5 35 5286 _NSA_ IAM_ Index.qxd 12/17/ 03 10 :31 AM ... 240accountability, 97ad hoc security, 1 73 administrative planning, 222–2 23 analysiscustomer’s security posture, 34 0 34 5objectives, 33 8 34 0preparing for, 33 4 33 6risk, 33 6 33 8applications, 92– 93 architectural ... Criteria, 158 for OS390, 165 for regulatory information, 127 for security configuration guides, 274whiteboards, 31 3word of mouth, 37 8, 37 9 38 0work location, 8–9writing assignments, 33 5 33 6written...

Xem thêm