Security - News

Celá ?ada amerických organizací a gentur spolupracovala na vydání tohoto seznamu dvaceti nejd?ležit?jších kontrol, kterými mají procházet federální instituce USA:

Press Release Announcing the Draft Available for Public Comment

What the CAG Critics say...

Consensus Audit Guidelines Draft 1.0

• Consensus Audit Guidelines - Introduction (Draft 1.0)
• Critical Control 1: Inventory of authorized and unauthorized hardware.
• Critical Control 2: Inventory of authorized and unauthorized software; enforcement of white lists of authorized software.
• Critical Control 3: Secure configurations for hardware and software on laptops, workstations, and servers.
• Critical Control 4: Secure configurations of network devices such as firewalls, routers, and switches.
• Critical Control 5: Boundary Defense
• Critical Control 6: Maintenance, Monitoring and Analysis of Complete Audit Logs
• Critical Control 7: Application Software Security
• Critical Control 8: Controlled Use of Administrative Privileges
• Critical Control 9: Controlled Access Based On Need to Know
• Critical Control 10: Continuous Vulnerability Testing and Remediation
• Critical Control 11: Dormant Account Monitoring and Control
• Critical Control 12: Anti-Malware Defenses
• Critical Control 13: Limitation and Control of Ports, Protocols and Services
• Critical Control 14: Wireless Device Control
• Critical Control 15: Data Leakage Protection
• Critical Control 16: Secure Network Engineering
• Critical Control 17: Red Team Exercises
• Critical Control 18: Incident Response Capability
• Critical Control 19: Data Recovery Capability
• Critical Control 20: Security Skills Assessment and Appropriate Training To Fill Gaps

Viz také komentá? - US Dept of Defense lists top 20 security controls .

Autor: JP

Heuristické vyhledání souvisejících článků v archívu NEWS

• NIST: SP 800-116, 2nd Draft, A Recommendation for the Use of PIV Credentials in Physical Access Control Systems
• Deploying Network Access Quarantine Control
• Jaká je vlastn? NAC (Network Access Control)?
• Kontrolujte svoji sí? prost?ednictvím NAC (Network Access Control)
• NAC (Network Access Control) - budování úsp?šných praktik
• Vista: UAC (User Account Control) lze snadno obejít