Managing a Secure Network

Managing a Secure Network

1. 11.1: Network Security Testing

   • 11.1.1: Network Security Testing Techniques
     • Objectives of ST&E
       • •Uncover design, implementation, and operational flaws that could lead to the violation of the security policy. •Determine the adequacy of security mechanisms, assurances, and device properties to enforce the security policy. •Assess the degree of consistency between the system documentation and its implementation.
       • (ST&E) is performed. An ST&E is an examination of the protective measures that are placed on an operational network.
     • Types of Network Tests
       • •Penetration testing •Network scanning •Vulnerability scanning •Password cracking •Log review •Integrity checkers •Virus detection
   • 11.1.2: Network Security Testing Tools
     • •Nmap/Zenmap •SuperScan •SIEM •GFI LANguard •Tripwire •Nessus •L0phtCrack •Metasploit

2. 11.2: Developing a Comprehensive Security Policy

   • 11:2.1: Security Policy Overview
     • A security policy may include
       • •Identification and authentication policies •Password policies •Acceptable use policies •Remote access policies •Network maintenance policies •Incident handling policies
   • 4.2: Structure of a Security Policy
     • Security Policy Hierarchy
       • 1.Governing policy 2.Technical policy 2.End user policy
         • High-level treatment of the security guidelines that are important to the entire company.
         • Used by security staff members as they carry out security responsibilities for the system.
         • Covers all security topics that are important to end users.
   • 11.2.3: Standards, Guidelines, and Procedures
     • Standards
       • Standards help an IT staff maintain consistency in the operations of the network
     • Guidelines
       • Guidelines are a list of suggestions on how to do things more efficiently and securely
     • Procedures
       • Procedure documents are longer and more detailed than standards and guidelines.
   • 11.2.4: Roles and Responsibilities
     • Common Executive Titles
       • •Chief Executive Officer (CEO) •Chief Technology Officer (CTO) •Chief Information Officer (CIO) •Chief Security Officer (CSO) •Chief Information Security Officer (CISO)
   • 11.2.5: Security Awareness and Training
     • A security awareness program usually has two major components:
       • •Awareness campaigns •Training and education
         • Awareness campaigns are usually aimed at all levels of the organization, including executive positions. Security awareness efforts are designed to change behavior or reinforce good security practices.
         • Training strives to teach needed security skills to end users who may or may not be members of the IT staff.
   • 11.2.6: Responding to a Security Breach
     • Laws and codes of ethics are in place to allow organizations and individuals a means of reclaiming lost assets and preventing crimes.