Information Security FUNDAMENTALS phần 7 docx

... to IPS Migration AU19 57_ C006.fm Page 155 Monday, September 20, 2004 3:23 PM Copyright 2005 by CRC Press, LLC. All Rights Reserved. Chapter 7 Physical Security 7. 1 Data Center Requirements ... Network Access and Security Components Protecting networking resources is one of the areas of information security that currently receives the most focus. When thinking of security...

Ngày tải lên: 14/08/2014, 18:22

... Control List using ISO 177 99 ISO 177 99 Section Category Control Description Physical and Environmental Security Secure Areas (7. 1) Implement standards to ensure that physical security protection ... Preventive Control Information Preventive Control Data Sought Interview Subjects Information security Information security policies, standards, and procedures Information...

Ngày tải lên: 14/08/2014, 18:22

... 7. 2.1 Assets to be Protected 7. 2.2 Potential Threats 7. 2.3 Attitude toward Risk 7. 2.4 Sample Controls 7. 3 Fire Prevention and Detection 7. 3.1 Fire Prevention 7. 3.2 Fire Detection 7. 3.3 ... Fighting 7. 4 Verified Disposal of Documents 7. 4.1 Collection of Documents 7. 4.2 Document Destruction Options 7. 4.3 Choosing Services 7. 5 Agreements 7. 5.1 Duress Alarms 7. 6 Intru...

Ngày tải lên: 14/08/2014, 18:22

... still more to information security. Another phase of information security is personnel security. This can be both fun and taxing at the same time. Personnel security, like physical security, can ... of information security is the security policy (see Figure 2.1). If information security were a person, the security policy would be the central nervous system. Policies bec...

Ngày tải lên: 14/08/2014, 18:22

... plus messages on: Ⅲ Information security standards Ⅲ Information security monitoring Ⅲ Information security performance measurement Ⅲ More information security good practices Of ... on: Ⅲ Information security policies Ⅲ Information ownership Ⅲ Information classification Ⅲ Good information security practices Because employee information s...

Ngày tải lên: 14/08/2014, 18:22

... Sarbanes–Oxley ) or international standards such as British Standards 77 99 ( BS 77 99 ) or ISO 177 99 , the formal adoption of a risk analysis process will assist in proving ... template. TABLE 4.1 Sample Information Security Policy Information Security Policy Business information is an essential asset of the Company. This is true of all business in...

Ngày tải lên: 14/08/2014, 18:22

... system). TABLE 4.15 Sample Information Security Policy Information Security Policy Policy Statement Information is a company asset and is the property of the Company. Com- pany information must be protected ... confidential information. Typically, this type of information will consist of either competitive advantage or trade secret information or personal information. The la...

Ngày tải lên: 14/08/2014, 18:22

... Records 1 2 AU19 57_ book.fm Page 136 Friday, September 10, 2004 5:46 PM Copyright 2005 by CRC Press, LLC. All Rights Reserved. 3 4 5 6 7 Business Process Records 1 2 3 4 5 6 7 8 9 10 AU19 57_ book.fm Page 1 37 ... authorize indi- vidual users Information owner to define permissions on user, group, or function basis Information owners to define permissions Delete access to in...

Ngày tải lên: 14/08/2014, 18:22

... audit purposes or for purposes of follow-up. 7. 7 Sample Physical Security Policy See Table 7. 1 for a sample physical security policy. 7. 8 Summary The nature of physical security for a data center should ... 177 99. ISO 177 99 is actually “a comprehensive set of controls comprising best practices in information security. ” It is essentially, in part (extended), an international...

Ngày tải lên: 14/08/2014, 18:22

... Information security governance — The management structure, orga- nization, responsibility, and reporting processes surrounding a success- ful information security program. Information security ... connection. Security metrics — A standard of measurement used to measure and monitor information security- related information security activity. Sniffing — An attack captur...

Ngày tải lên: 14/08/2014, 18:22