Re: General Security audit question

[David Verty]

One place that has a plethora of information on securing networks is CERT (of course..). CERT has great recommendations that some administrators don't even bother with, but save time later on...Search around and you will find some good articles. The last one i've read was here:
http://www.cert.org/security-improvement/

Also, you may want to ask about their user policies, and how they are structured.

There are also some that are on IBM's website (I don't know where, I lost my list of links) that cover things like wardialing into a network to find an open defaulted switch.

From: "Dallas Hindle" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>
Subject: General Security audit question
Date: Tue, 7 Jan 2003 16:11:22 +1100

Hi
 
I've been asked to perform a security audit on a site (Stock Broker) and
to report on all Site, network, server and software issues that I
encounter
 
I have a pretty decent idea of what I'm looking for, but if anyone has
any links to, or templates of what you would find in a security audit
could you please let me know or send me a copy?
 
 
 
Thanks
 
Dallas

_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus