|



|
• Vulnerability Assessment
When
you are planning to launch your
e-business, security must be your
No.1 concern. But in todays
computing environments, system
security is a horrible game of
numbers. Attack tools are getting
more User friendly, more automated.
So what do the good guys have
stacked in their favour? Tools that
automate the vulnerability discovery
process. Tools that help you secure
your systems. Tools that give the
administrator the edge, or so the
marketing speaks goes. The lnternet
Scanner application, an Intergrated
part of Internet Security Systems
security management platform,
provide, comprehensive network
vulnerability assessment for
measuring online security risks.
lnternet Scanner performs scheduled
and selective probes of
communication services, operating
systems, application and routers to
uncover and report systems
vulnerabilities that mlght be open
to attack. In addition to providing
flexible risk management reports,
Internet Scanner prepares
remediation advice, trend analyses
and comprehensive data sets to
support sound, knowledge-based
policy enforcement. The System
Scanner application, an Integrated
part of Internet Securily Systems
securtty management platform.
ensures policy compliance and
detects vulnerabilities that leave
servers open to compromise. System
Scanner measures, manages and
enforces security policies across a
wide range of operating systems
through a unique, server-to-network
view of critical systems and
servers. System Scanner methodology
simplifies the creation of system
security baselines fore user
,groups, shares, services and
critical system files, and easily
fits wlth existing business
processes.
Disaster Recovery
Planning
 |
A disaster recovery plan (DRP) - sometimes referred to
as a business continuity plan (BCP) or business process
contingency plan (BPCP) - describes how an organization
is to deal with potential disasters. Just as a disaster
is an event that makes the continuation of normal
functions impossible, a disaster recovery plan consists
of the precautions taken so that the effects of a
disaster will be minimized, and the organization will be
able to either maintain or quickly resume
mission-critical functions. Typically, disaster recovery
planning involves an analysis of business processes and
continuity needs; it may also include a significant
focus on disaster prevention. Disaster recovery is
becoming an increasingly important aspect of enterprise
computing. As devices, systems, and networks become ever
more complex, there are simply more things that can go
wrong. As a consequence, recovery plans have also become
more complex., disassembling components, and
subsequently drying circuit boards in the parking lot
with a hair dryer. Current enterprise systems tend to be
too complicated for such simple and hands-on approaches,
however, and interruption of service or loss of data can
have serious financial impact, whether directly or
through loss of customer confidence. Appropriate plans
vary from one enterprise to another, depending on
variables such as the type of business, the processes
involved, and the level of security needed. Disaster
recovery planning may be developed within an
organization or purchased as a software application or a
service.
Business
Continuity planning
 |
Data
processing and business applications are no longer restricted to
mainframe computer environments. The use of distributed
platforms (including mid-range computers, client/server
technology, and local and wide area networks) for
mission-critical functions not only expands the scope of
business continuity planning but makes it more important. This
increased importance arises from the fact that non-operational
areas are finding themselves responsible for systems which are
critical or which highly impact the functioning and reputation
of the company. It is Important to determine which data systems
are considered critical or impacting. Additionally, it is
important to rank these critical and impacting systems to
indicate which systems are most crucial to the companys
functioning. This ranking will be used to determine which data
systems need to be recovered and in what order in the event of a
disruption. There are several factors to be considered ,
including but not limited to, the calendar cycle, processing
hardware, system software, applications programs and essential
human resources when determining whether systems are critical or
impacting. Based on risk analyses performed by application
administrators, the administrator shall institute controls
(e.g., proper backup plans, formalized restart procedures,
installation of an uninterruptible power supply, etc.) which
will minimize the probability that a disruption will occur and
ensure quick business resumption when a disruption does occur.
The costs of implementing these controls should be weighted
against the loss which would result if the disruption occurred
(this is referred to as risk management) and the probability of
a disruption. |