security assessment case studies for implementing the nsa iam phần 3 ppt

... Chapter 3 • Determining the Organization’s Information Criticality 286 _NSA_ IAM_ 03. qxd 12/11/ 03 3:25 PM Page 102 no impact on the organization for that particular information type .The number 5, on the ... Chapter 3 • Determining the Organization’s Information Criticality 286 _NSA_ IAM_ 03. qxd 12/11/ 03 3:25 PM Page 88 Planning for the Assessment Activities The...

Ngày tải lên: 13/08/2014, 15:21

... prior to the arrival of the assessment team. www.syngress.com 38 Chapter 1 • Laying the Foundation for Your Assessment 286 _NSA_ IAM_ 01.qxd 12/15/ 03 3:15 PM Page 38 Introduction The Pre -Assessment ... with scoping the assessment. www.syngress.com 20 Chapter 1 • Laying the Foundation for Your Assessment 286 _NSA_ IAM_ 01.qxd 12/15/ 03 3:15 PM Page 20 Q: How m...

Ngày tải lên: 13/08/2014, 15:21

... drive the assessment effort. Ultimately, the majority of information is the same in either www.syngress.com Laying the Foundation for Your Assessment • Chapter 1 3 Contracting and the NSA IAM NSA ... Audience? 31 1 Who Should Attend? 31 1 Organizing the Closeout Meeting 31 2 Determining Time and Location 31 2 Time of Meeting 31 3 Day of Week 31 3 Meeting Room...

Ngày tải lên: 13/08/2014, 15:21

... roughly 35 information types .The group goes back over the list, carefully www.syngress.com Determining the Organization’s Information Criticality • Chapter 3 109 286 _NSA_ IAM_ 03. qxd 12/11/ 03 3:25 ... 12/11/ 03 3:25 PM Page 107 In the majority of assessments, the values for each block within the SCMs will be carried directly over from the OICM. Because of the top-do...

Ngày tải lên: 13/08/2014, 15:21

... significant damage to the organization. www.syngress.com The System Security Environment • Chapter 5 1 73 286 _NSA_ IAM_ 05.qxd 12/11/ 03 3:28 PM Page 1 73 Timeline of Events Here, in the last NSA IAM required ... Router 1 provided the connectivity for the T1 from the Internet. Router 2 provided the connectivity for the medical center and colleges. Router 3 prov...

Ngày tải lên: 13/08/2014, 15:21

... 245 286 _NSA_ IAM_ 07.qxd 12/12/ 03 3 :32 PM Page 245 Introduction This chapter introduces the reader to the onsite assessment phase of the IAM and associated activities. By the end of this chapter, the ... flow for the process .The customer should be presented with the assessment s ultimate objec- tives as defined by the customer during the pre -assessment phase. K...

Ngày tải lên: 13/08/2014, 15:21

... low www.syngress.com Managing the Findings • Chapter 8 2 83 286 _NSA_ IAM_ 08.qxd 12/15/ 03 5: 03 PM Page 2 83 NOTE The assessment team utilized NSA s 18 Baseline INFOSEC Classes and Categories as the high-level guide for conducting ... discourage the assessment team. Just accept it and move on. From the Trenches… 286 _NSA_ IAM_ 07.qxd 12/12/ 03 3 :32 PM Page 2 53 Int...

Ngày tải lên: 13/08/2014, 15:21

... on the “Ask the Author” form. You will also gain access to thousands of other FAQs at ITFAQnet.com. 286 _NSA_ IAM_ 08.qxd 12/15/ 03 5: 03 PM Page 30 7 286 _NSA_ IAM_ 09.qxd 12/16/ 03 12:58 PM Page 33 2 Table ... procedures. www.syngress.com Managing the Findings • Chapter 8 30 3 Continued 286 _NSA_ IAM_ 08.qxd 12/15/ 03 5: 03 PM Page 30 3 Table 8.1 A Sample of Findings from...

Ngày tải lên: 13/08/2014, 15:21

... conduct the assessment. In our case, we describe the NSA IAM as the methodology used to conduct the assessment and the basis for the assessment process. Since this is the main document, the assessment ... anal- ysis. Security Horizon utilized the National Security Agency (NSA) Information Security Assessment Methodology (IAM) to conduct the organizati...

Ngày tải lên: 13/08/2014, 15:21

... (FACTS), 31 7 final report analysis, performing, 33 6 34 5 analysis, preparing for, 33 4 33 6 case study: analyzing findings, 35 5 36 2 creating/formatting, 34 5 35 5 286 _NSA_ IAM_ Index.qxd 12/17/ 03 10 :31 AM ... 240 accountability, 97 ad hoc security, 1 73 administrative planning, 222–2 23 analysis customer’s security posture, 34 0 34 5 objectives, 33 8 34 0 preparing fo...

Ngày tải lên: 13/08/2014, 15:21