Fundamental Elements Authentication Know who or what you are dealing with; multi-factor authentication, tokens... Authorization and Access Control Access control matrices, role-based, single sign-on... Encryption Encryption algorithms, applications, key management... Integrity Open source software trojan horse worries? Has your configuration been tampered-with? Integrity is central to a solid security plan... Nonrepudiation The ability to prove that one party agreed to an electronic transaction... Privacy Privacy is as much about education as it is about technology, policies, and procedures...

Core Elements Addressing, Protocol Space, Routing Plan, Filtering, and Disablement Disablement is king. Limit allowable addresses, routes, and protocols... Configuration Management Failing to maintain a history of what was running in a system at any point is risky business... Content and Exececutable Management Keep it where it belongs. Controlling the flow of executable content (software, scripts, attachments) through your network... Directory Services Directory services control how resources are located, described, and accessed. Don't let a hacker's fingers do the walking... Diversity, Redundancy, and Isolation To prevent a hacker from doing something simple to grind your business to a halt, plan for system failure and recovery... Intrusion Detection Systems and Vulnerability Analysis Know where the soft spots are in your network and detecting malicious activity... Securing Software Reduce vulnerabilities in the software you use and develop... Securing Time Services Time has much more to do with security then you might think... Staff Management Managing employees and contractors...

Wrap-up Elements Administration and Management Watching over the enterprise... Interoperability and Standards Working together... Laws and regulations Staying out of trouble... Lockdown Keep it locked tight... Lost or Stolen Items When important things disappear... Managed/Outsourced Security Working with outside security vendors... Performance Security is value, but it also consumes resources... Physical Security Watch the door... Procurement Be discriminating... Recovery Getting back on-track... Support Interface Protecting confidential information... Testing, Integration and Staging Get it right before putting it on the network... Training Security through education

Please enter your criteria here: