Securing Business Information
Intel Press (Verlag)
978-0-9712887-4-4 (ISBN)
- Keine Verlagsinformationen verfügbar
- Artikel merken
-- Introducing the Enterprise Security Plan (ESP): a proven, six-step process for maximizing enterprise information security.
-- Practical techniques for customizing security to the needs of your enterprise.
-- Covers every phase: analysis, planning, deployment, and ongoing management.
Securing Business Information addresses one of today's most critical IT challenges: keeping enterprise data secure in a widely distributed, Internet-centric environment. Drawing upon advanced research and consulting at META Group, it introduces a comprehensive, six-part process for implementing the highest practical level of information security throughout the enterprise. The authors cover every step involved in maximizing information security. Begin by preparing the enterprise for a major security initiative, identifying appropriate roles for each staff member, and effectively marketing security within the enterprise. Learn how to organize "security domains, " assess tolerable levels of risk for each, complete baseline security analyses, derive guiding policies based on what you've learned, and implement the improvements you've identified. Coverage also includes: evaluating the enforcement of existing security policies, identifying gaps, and setting priorities for remediation. Part of the Intel Press IT Best Practices Series, focused on identifying and sharing best-practice strategies for delivering Internet-based solutions that meet key business challenges. For every IT executive, manager, administrator and professional concerned with enterprise information security.
Preface. 1. Prepare the Enterprise for Security. The Enterprise Security Charter. Building the Security Organization. Security Leadership. Security Management. Security Administration. Resource Ownership. Where Security Reports. Building Security Job Descriptions. Centralizing and Decentralizing Security Functions. Marketing the Mission within the Enterprise. Developing a Security Marketing Program. Marketing Upward. Marketing Outward. 2. Organize Security by Resource and Domains31 Identifying Resources31 Existing Sources of Resource Identification. Levels of Information Hierarchy. Complexity of Classification Schemes. External Requirements. Selecting Appropriate Security Levels. Grouping Resources into Security Domains. ESP Domain Schemes. Merging the Domain Schemes. An Example of Need-based Divisions. Documenting the Rules for Domain Designation. 3. Complete the Baseline Security Analysis. Choosing a Policy Model. Formal Security Policies. Identity-based Policies. Role-based Policies54 Researching Existing Policies. Conducting a Policy Audit. Finding Documented Policies. Finding Undocumented Policies. Creating the Functional Assessment of Security. Reducing the Scope of the Projects. 4. Complete the Requirements. Identifying Security Requirements. Selecting the Sources of Information. Collecting Information. Developing Requirements. Categories of Requirements. Determining Business Requirements. Determining Data Management Requirements. Determining Application Requirements. Determining Infrastructure Requirements. Trust Modeling. Point 1: Establishing Trust Concepts. Point 2: Applying Trust Concepts. Point 3: Achieving Trust-based Requirements. Patterns for Adaptive Infrastructure. 5. Identify Gaps and Prioritize Needs. Analyzing Gaps. Assessing Risk. Analyzing Costs and Benefits. Assessing Culture. Prioritizing Projects. 6. Selecting and Planning the Projects. Determining the Security Strategy. Shortening the List of Projects. Selecting Projects. Reordering Priorities by Duration. Determining Required Resources. Planning the Projects. Sourcing the Projects. Selecting the Security Products. Marketing the Projects. Product Packaging. Upward Marketing. Outward Marketing. What Is Next? 7. Modifying ESP. Modifying the Baseline Steps. Pass 1. Pass 2. Pass 3. Pass 4. Integrating ESP into the Ongoing Security Program. 8. Formulating a Technology Strategy. Analyzing Technology Maturation. Projecting Demand Curves. Assessing Adoption Probability. 9. Security Technologies. Enforcement Security Technologies. Identification. Authentication. Authorization. Access Control. Support Security Technologies. Auditing. Administration. Technology Integration. 10. Two Case Histories. Meet Y Company. Step 1. Prepare the Enterprise for Security. Step 2. Organize Security by Resources and Domains. Step 3. Complete the Baseline Security Analysis1 57 Step 4. Complete Requirements. Step 5. Identify Gaps and Prioritize Needs. Meet Z Company: A Federated Model. Step 1. Prepare the Enterprise for Security. Step 2. Organize Security by Resources and Domains. Step 3. Complete the Baseline Security Analysis. Step 4. Complete Requirements. Step 5. Identifying Gaps and Prioritizing Needs. 11. Security Follow-Up Projects. Y Company. Marketing Program. General Policy Revision and Domain Perimeter Repair. Security Technology Improvements and Administration Policy Changes. Considerations. Z Company. Establishing Minimum Security Criteria. Policy Structure Creation. Backbone Access Control. 12. Single-Point Administration through Role-based Authorization. Single-Point Administration through Role-based Authorization. Why Single-Point Administration Is Needed. Role-based Authorization. 13. Single Sign-On. The Security Fabric: Integrating the Tiers. SSO Terminology. Identification. Strong Authentication and Authorization Management. Product Architectures. Script-based SSO Tools. Broker-based SSO Tools. How to Succeed at SSO. Installability and Scalability. SSO Planning Projects. Evaluation Criteria for SSO Products. Checklist of questions to ask in evaluating SSO products. Appendix A: Sample Request For Proposal. Request for Proposal. Implementation of Secure Single Sign-On and Single-Point Administration. I. Overview. II. Environment. Configuration. III. Vendor Instructions. IV. Requirements. V. Implementation. VI. Contract Terms. VII. Vendor Financial Proposal. Appendix B: Further Reading. Glossary.
| Erscheint lt. Verlag | 29.2.2004 |
|---|---|
| Verlagsort | Hillsboro |
| Sprache | englisch |
| Maße | 185 x 230 mm |
| Themenwelt | Mathematik / Informatik ► Mathematik ► Finanz- / Wirtschaftsmathematik |
| ISBN-10 | 0-9712887-4-7 / 0971288747 |
| ISBN-13 | 978-0-9712887-4-4 / 9780971288744 |
| Zustand | Neuware |
| Haben Sie eine Frage zum Produkt? |
aus dem Bereich
