MANAGING A SECURE NETWORK

MANAGING A SECURE NETWORK

1. Network Security Testing

   • Knowledge
     • Device hardening
     • Firewalls
     • IPSs
     • Operating systems
     • Basic programming
     • Networking protocols
     • Network vulnerabilities and risk mitigation
   • Types
     • Penetration testing
     • Network scanning
     • Vulnerability scanning
     • Password cracking
     • Log review
     • Integrity checkers
     • Virus detection
   • Tools
     • Nmap/Zenmap
       • TCP/UDP port scanning
       • TCP/UDP port sweeping
       • Stealth TCP/UDP port scans/sweeps
       • Remote operating system identification
     • SuperScan
       • TCP SYN scanning
       • UDP scanning
       • Adjustable scanning speed
       • Fast hostname resolution
     • SIEM
       • Forensic analysis
       • Correlation
       • Aggregation
       • Retention
     • GFI LANguard
     • Tripwire
     • Nessus
     • L0phtCrack
     • Metasploit

2. Secure Policy

   • Include
     • Password policies
     • Identification and authentication policies
     • Acceptable use policies
     • Remote access policies
     • Network maintenance policies
     • Incident handling policies
   • Audience
     • Internal
       • Managers
       • Executives
       • Departments
       • Business units
       • Technical staff
       • Employees
     • External
       • Partners
       • Customers
       • Suppliers
       • Consultants
       • Contractors
   • Hierarchy
     • Governing policy
     • Technical policy
       • General policies
       • Telephony policy
       • Email and communications policy
       • Remote access policy
       • Network policy
       • Application policy
     • End user policy
       • Identity policy
       • Password policy
       • Antivirus policy
   • Documents
     • Standards Documents
     • Guideline Documents
     • Procedure Documents

3. Roles and Responsabilities

   • Chief Executive Officer (CEO)
   • Chief Technology Officer (CTO)
   • Chief Information Officer (CIO)
   • Chief Security Officer (CSO)
   • Chief Information Security Officer (CISO)

4. Security Awareness Program

   • Awareness campaigns
   • Security Training Course
     • 1. Identify course scope, goals, and objectives
     • 2. Identify and educate training staff
     • 3. Identify target audiences
     • 4. Motivate management and employees
     • 5. Administer the courses
     • 6. Maintain the courses
     • 7. Evaluate the course effectiveness
   • Educational Program

Imágenes y archivos del mapa