Incidence Response Programme
As the reliance of businesses on their information assets continue to grow so will the number of computer/security incidents. In the protection of their informational assets, most business's will perform the following functions:
Directory:
> IT > Security
Date: 2004-02-24
|
Incidence Response Teams
A major part of any organisations IRP is the team that is responsible for handling the incidents using the process and method outlined in section 1.2.1. Whilst it is strongly recommended that every organisation should have an IRP in place, this is not necessarily the case with an incidence response team. However, each organisation should have an individual such as the corporate security officer who is responsible for the IRP of the organisation.
Directory:
> IT > Security
Date: 2004-02-24
|
What are the Benefits of an IRP?
The major benefit in an organisation for having an IRP is that of damage limitation. In the event that an incident should occur within an organisation that has an IRP in place, the damage and the ensuing financial loss that is incurred due to this incident will be minimised. Other benefits include:
Directory:
> IT > Security
Date: 2004-02-24
|
Random Numbers
Random numbers are important for computers. Aside from making games like Solitaire more interesting, the use of randomness in generating passwords and encrypting data is critical to security.
Directory:
> IT > Security
Date: 2004-02-12
|
Penetration Test : My Meanest Hack
I was requested to perform a proof of concept hack into a large organization a few weeks ago. The aim was to get an interactive session, preferably GUI, on one of the internal machines which was guarded by 2 (External and DMZ) firewalls, and an Intrusion detection system. I was allowed to use any means necessary to achieve this goal. This is extremely unusual for a penetrations test, where the rules, guidelines and penetration methods are very strict and defined. I was supposed to impersonate a hacker that would stop at nothing to gain interactive access to the internal network.
Directory:
> IT > Security
Date: 2004-02-10
|
|
