Managing a Secure Network

Managing a Secure Network

1. Network security testing

   • Testing techniques
     • Operations security
       • Planning/implementation
         • Designs
         • Risks
         • Vulnerabilities
       • Set up
       • Maintenance
       • Knowledge
         • Device hardening
         • Firewalls
         • IPSs
         • Operating systems
         • Programming
         • Network protocols
         • Network vulnerabilities
     • ST&E
       • Risk analysis
       • Contingency planning
       • Full integration
     • Types
       • Penetration testing
       • Network scanning
       • Vulnerability scanning
       • Password cracking
       • Log review
       • Virus detection
     • Security testing results
       • Mitigation actions
       • Enhace activities
       • Correction actions
   • Testing tools
     • Nmap/Zenmap
       • Discover services n' computers
     • SuperScan
       • Port scanning (TCP/UDP)
     • SIEM
       • Real-time reporting
     • GFI LANguard
       • Detects vulnerabilities
     • Tripwire
       • Validates configurations
     • Nessus
       • Vulnerability scanner
     • L0phtCrack
       • Password auditing
     • Metasploit
       • Vulnerabilities n' penetration

2. Security policy

   • Policies include
     • Identification/authentication
     • Passwords
     • Acceptable use
     • Remote access
     • Network maintenance
     • Incident handling
   • Hierarchy structure
     • Governing policy
       • Technical policies
         • General
         • Telephony
         • Email/communication
         • Remote access
         • Network
         • Application
       • End user policies
         • Identity
         • Password
         • Antivirus
   • Documents
     • Procedures
     • Standards
     • Guidelines
   • Roles n' resposabilities
     • Executive titles
       • Chief Executive Officer (CEO)
       • Chief Technology Officer (CTO)
       • Chief Information Officer (CIO)
       • Chief Security Officer (CSO)
       • Chief Information Security Officer (CISO)
   • Security Awareness Program
     • Awareness campaigns
     • Security training course
       • Scope, goals, objetives
       • Educate training staff
       • Target audiences
       • Administer courses
       • Maintain courses
       • Courses effectiveness
     • Educational program
   • Audience
     • Internal
       • Managers/executives
       • Departments/bussines units
       • Technical staff
     • External
       • Partners
       • Customers
       • Suppliers

Bilder und Dateien der Mindmap