[ news_security_news ]
NetSolve Outlines New Approach To Cyber Security
SecurityProNews
Staff Writer
2004-09-01
 Insider Reports RSS Feed
In a new white paper, IT infrastructure and security management specialist NetSolve, Incorporated, outlines a new approach to cyber security designed to show enterprises how to reduce costs by using a comprehensive security management methodology.
The paper, written by Chuck Adams, chief security officer for NetSolve, former Security Consulting practice leader for Cisco Systems, Inc. and key contributor to developing the Air Force Information Warfare Center, provides a unique and comprehensive framework for implementing and measuring the impact of security efforts on technological risk over time.
"Too many companies are throwing money out the window by buying a series of security tools to shore up their infrastructures from the latest attack," said Chuck Adams. "We must stop bandaging and start proactively addressing key process and organizational weaknesses as you would any other business problem, by taking full accountability, putting a stake in the ground, and driving continuous improvement," Adams says.
The paper provides a five-step guide to addressing weaknesses, beginning with key questions and ending with implementation of a measurement method. The report also criticizes the market's obsession with hiring external parties to identify the problem where investments are better spent focusing on implementing effective solutions.
"More often than not, organizations immediately over-invest in prevention capabilities and find themselves in a frustrating position," it reads. "It is impossible to predict and prevent every potential threat. Understanding and conceding this is critical to success of the overall program. The program will be best rewarded by ensuring focus is distributed across prevention, monitoring, and response capabilities. While this seems to be the more costly approach, over time it will be more direct and substantial returns will be realized."
"Organizations are increasingly abandoning product-focused, reactive security projects in favor of proactive, process-oriented security programs to address accountability, transparency, and measurability through the enterprise," said Paul Proctor, vice president of Security and Risk Strategies at META Group, a leading provider of IT research, advisory services and consulting. "Businesses need an approach that drives towards a comprehensive view of security across the IT infrastructure."
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
