Eicon Networks S92 Bedienungsanleitung PDF herunterladen (Seite 139)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 139

n anyvulnerabilityexistinthesecuritydevices

n whetherthesecuritypoliciesareproperly implementedandenforcedbythe

securitydevices

Networkscanningistheprimarymethodtouse,inadditiontomanualconnection

attemptsandprocedurereviewforverifyingthesecurity rulesandoperations.This

audit,however,isnotbudgetedtoperformindepthpenetration.

Infact,hiringtheexpertiseofaprofessionalpenetrationteamtoperformpenetration

testingagainstthehighriskarea(suchastheB2Cstream)isanoptionthatdeserves

furtherconsideration

36

.

Phrases

Thephrasesinvolvedinoursecurityauditinclude:

Phrase0–PlanningandPreparation

Atthisphraseweneedtogetourselvesfamiliarwiththeorganizationandthenetwork,

preparethenecessarypaperworkandtoolsanddeviseanauditplanforapproval.

Phrase1OrganizationReview

Inthisphrasewereviewtheexistingsecuritypoliciesandproceduresinplace,and

determineiftheyarebeingfollowedinthedaytodayoperation.Relevant

informationcanbecollectedthroughinterviews(withtheemployees),observations

anddocumentationreviews.Thefocusismoreonthe“human”side.

INCERTAINCIRCUMSTANCES,AREVIEWOFTHEEXISTINGSECURITY

POLICIESISNEEDED.WEWANTTOENSURETHATTHESESECURITY

POLICIESPROPERLYSATISFYTHENEEDSOFTHEENTERPRISEINAN

UPTODATEMANNER.

Phrase2– Technical Assessmentfroman“Insider”perspective

Inthisphrasewemainlyconcernwiththedefensemechanismatthedepartmental

level.

36

“HiringaPenetrationTestingTeam”,HackProofingYourEcommerceSite,ISBN:192899427X,

http://www.syngress.com/catalog/sg_main.cfm?pid=1216

1 2 ... 134 135 136 137 138 139 140 141 142 143 144 ... 208 209

Keine Kommentare

Eicon Networks S92 Bedienungsanleitung Seite 139