Chapter 11 Managing a Secure Network

Chapter 11 Managing a Secure Network

1. Network Security Testing

   • Operations Security
     • Device hardening
     • IPS
     • Firewall
     • Networking protocols, such as TCP/IP
     • Network vulnerabilities and risk mitigation
   • Types of Network Tests
     • Penetration testing
     • Network scanning
     • Vulnerability scanning
     • Password cracking
     • Log review
     • Integrity checkers
     • Virus Detection
   • Testing Tools
     • Nmap/Zenmap
     • SuperScan
     • SIEM (Security Information Event Management)
     • GFI LANguard
     • Nessus
     • Tripwire
     • L0phtCrack
     • Metasploit

2. Security Policy

   • Password Policies
   • Acceptable Use Policies
   • Remote Access Policies
   • Network Maintenance Policies
   • Incident Handling Policies
   • Security Policy Hierarchy
     • Security Policy Hierarchy
     • Technical policy
     • End user policy
   • Security Policy Documents
     • Standards Documents
     • Guideline Documents
     • Procedure Documents

3. Common Executive Titles

   • Chief Executive Officer (CEO)
   • Chief Technology Officer (CTO)
   • Chief Information Officer (CIO)
   • Chief Security Officer (CSO)
   • Chief Information Security Officer (CISO)