Eicon Networks S92 Manual do Utilizador descarregar pdf (Página 140)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 140

Eachnetworkshouldbetestedfrom theinternal usernetworks toensurethatsafety

existsinternally,thatmaliciousattemptsfromtheinternalusersarebeingrestricted.

Eachinstalledsecurityconfigurationthatistobetestedmustfirstbereviewedto

determinetheservicepacks/patchesstatus.Thesettingsmustbecomparedwiththe

latestlistofvulnerabilitiestoseeiffurtheractionisnecessary.

Phrase3– Technical Assessmentfroman“Outsider”perspective

Inthisphrasewewillactliketheoutsidehackerswhotrytofindwaysintoour

privatenetwork. Again,eachinstalledsecurityconfigurationthatistobetestedmust

firstbereviewedtodeterminetheservicepacks/patchesstatus.Thesettingsmustbe

comparedwiththelatestlistofvulnerabilitiestoseeiffurtheractionisnecessary.

Phrase4– AdministrativeAssessmentandFaultToleranceAssessment

Inthisphrasewefocusonauditingthe“admin”aspectofthesecuritysolutionsin

place,aswellastoreviewthecurrentleveloffaulttolerance.

Phrase5–ReportPreparation

Inthisphraseweprepareareporton thefindingsandrecommendations.Thisreport

willbesubmittedto themanagement.

Phrase6–Followup

Inthisphrasewefollowuptoensure thatanyidentifiedshortcomingistobetaken

careof.

Asauditors,wedoNOTfixtheproblemsourselves.Instead,weidentifythe

problemsandgiverecommendationstotheauditee.

Coordination,StaffingandSchedule

Weneedtocompletetheauditeffectivelywithoutintroducingsignificantdisruptionto

thedailyoperations.Atthesametime,wedonotwanttoincuranextraordinary large

expenseforthispurpose.Theidealarrangementinthiscaseis:

1 2 ... 135 136 137 138 139 140 141 142 143 144 145 ... 208 209

Sem comentários

Eicon Networks S92 Manual do Utilizador Página 140