Ctfo MANAGEMENT SECURITY PATCH. Felicia M. Nicastro. Second Edition. CRC Press. VC#*' J Taylor & Francis Group / Boca Raton London New York

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "Ctfo MANAGEMENT SECURITY PATCH. Felicia M. Nicastro. Second Edition. CRC Press. VC#*' J Taylor & Francis Group / Boca Raton London New York"

Transcription

1 SECURITY PATCH MANAGEMENT Second Edition Felicia M. Nicastro Ctfo CRC Press VC#*' J Taylor & Francis Group / Boca Raton London New York CRC Press Is an imprint of the Taylor & Francis Croup, an Informa business AN AUERBACH BOOK

2 Contents Foreword About the Author xi xiii Chapter 1 Introduction 1 How to Use This Book 3 Background 7 Getting Started 8 Who Owns the Process? 9 People, Process, and Technology 13 Measuring Success 16 Next Steps 18 Types of Patches 19 Functionality Patches 20 Feature Patches 20 Security Patches 21 Product Vendor's Responsibility 22 Chapter 2 Vulnerability to Patch to Exploit 27 Who Exploits When, Why, and How 29 The Who 30 The When 31 The Why 33 The How 34 Tracking New Patch Releases 36 Resources for Information 37 Chapter 3 What to Patch 39 Desktops 40 V

3 VI CONTENTS Standard Build 42 User Awareness 43 Use of Tool 44 Remote Users 45 Laptops 47 Servers 48 Windows 50 UNIX and Linux 51 Network Devices 52 Chapter 4 Network and Systems Management: Information Technology Infrastructure Library 55 Network and Systems Management 56 Starting with Process 59 ITIL 60 Service Support 61 Service Desk 61 Incident Management 63 Problem Management 63 Configuration and Asset Management 64 Change Management 66 Release Management 67 Service Delivery 67 Service-Level Management 68 Financial Management for IT Services 69 Performance and Capacity Management 69 IT Service Continuity Management 70 Availability Management 70 ICT Infrastructure Management 70 Security Management 71 Assessing and Implementing IT Operations 71 Assessing the IT Operations Capabilities 72 Designing an IT Operations Solution 76 Implementing an IT Operations Solution 77 Putting the IT Operations Solution into Action 78 Outsourcing to a Service Provider 78 Chapter 5 Security Management 81 Overview 82 Security Operations 84 Preparing for Security Operations 86 Gather Requirements 86 Selecting the Tools 89 Establishing Security Operations 93 Methods of Implementation 94 Roles and Responsibilities 96 Implementing Security Operations 98

4 CONTENTS VII Incorporating Security into Operational Processes 100 Process Example 102 Next Steps 105 Chapter 6 Vulnerability Management 107 Definition of Vulnerability Management 108 Vulnerability Management Process 110 Monitor 111 Gather Data 112 Assess the Posture 113 Remediate 115 Rinse and Repeat 116 Establishing Vulnerability Management 117 Assess 118 Design 119 Implement 120 Review 121 Next Steps 121 Chapter 7 Tools 123 Process versus Tools 125 Where to Use Tnem 127 Asset Tracking 127 Patch Deployment 130 How to Determine Which One Is Best 131 Price 132 Leveraging Existing Software 133 Supported Operating Systems 134 Agent-Based versus Agentless Software Products 135 Tools Evaluated 137 Conducting Comparisons 140 Chapter 8 Testing 143 Common Issues with Testing 144 The Testing Process 145 Preinstall Activities 146 Patch Installation 148 Test Intended Purpose 149 Test Primary Uses 150 Test Secondary Uses 151 Testing Patch Back Out 152 Approving Deployment 153 Patch Ratings and How They Affect Testing 153 Prioritizing the Test Process 156 Externally Facing Hosts 158 Mission-Critical Hosts 159 Critical Users 159 Mobile Devices and Remote Users 160

5 VIII CONTENTS Clients of Critical Hosts 160 Standard User Systems 161 Internal Network Devices 162 Dynamic Prioritization 162 The Test Lab 163 Virtual Machines 165 Wrapping It Up 170 Chapter 9 Process Life Cycle 173 Roles and Responsibilities 175 Security Committee 177 Security Group 181 Operations Group 183 Network Operations Center 185 Analysis Phase of Patch Management 187 Monitoring and Discovery 187 Initial Assessment Phase 189 Impact Assessment Phase 191 Remediation Phase of Patch Management 193 Patch Course ofaction 194 Patch Security Advisory 197 Testing the Patch 201 "Critical" Vulnerabilities 202 Use of a Standard Build 203 Updating the Operational Environment 204 Distributing the Patch 205 Implementation of Patches 207 Time Frame ofdeployment 208 Exceptions to the Rule 210 Updating Remote Users 212 Tracking Patches 214 Patch Reporting 214 Chapter 10 Putting the Process in Place 217 Preparing Assessing for the Process 218 Current State 219 Determine Requirements 220 Performing the Gap Analysis 222 Designing the Process 223 Assessing Network Devices and Systems 224 Implementation Phase 226 Standard Build 227 Implement the Tool 229 Piloting the Process 231 Moving the Process into Production 233 Update Design Based on Implementation 235 Operating the Process 236 Integration into Existing Processes 237

6 CONTENTS IX Updating Standard Builds 239 Implementation of New Servers 239 Day-to-Day Tool Operations 240 Deployment of Patches 241 Maintain 242 Organizational Structure Changes 244 Operational Changes 244 Pu rchase of New or Additional Tool 245 Annual Basis 246 Patch Management Policy 246 Chapter 11 Conclusion 251 Challenges 253 Next Steps 257 Index 261

Management. ITIL Release. Dave Howard. A Hands-on Guide. CRC Press. Taylor & Francis Group. Taylor St Francis Croup, an Informa business

Management. ITIL Release. Dave Howard. A Hands-on Guide. CRC Press. Taylor & Francis Group. Taylor St Francis Croup, an Informa business ITIL Release Management A Hands-on Guide Dave Howard CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor St Francis Croup, an Informa business AN AUERBACH

More information

SOFTWARE TESTING AS A SERVICE

SOFTWARE TESTING AS A SERVICE SOFTWARE TESTING AS A SERVICE ASHFAQUE AHMED (g) CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Group, an informa business AN AUERBACH BOOK

More information

THE COMPLETE PROJECT MANAGEMENT METHODOLOGY AND TOOLKIT

THE COMPLETE PROJECT MANAGEMENT METHODOLOGY AND TOOLKIT THE COMPLETE PROJECT MANAGEMENT METHODOLOGY AND TOOLKIT GERARD M. HILL CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an informa business

More information

Development and Management

Development and Management Cloud Database Development and Management Lee Chao CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an Informa business AN AUERBACH BOOK

More information

Information Technology and Organizational Learning

Information Technology and Organizational Learning Information Technology and Organizational Learning Managing Behavioral Change through Technology and Education Second Edition Arthur M. Langer CRC Press Taylor & Francis Group Boca Raton London New York

More information

ANDROID SECURITY ATTACKS AND DEFENSES ABHISHEK DUBEY I ANMOL MISRA. ( r öc) CRC Press VV J Taylor & Francis Group ^ "^ Boca Raton London New York

ANDROID SECURITY ATTACKS AND DEFENSES ABHISHEK DUBEY I ANMOL MISRA. ( r öc) CRC Press VV J Taylor & Francis Group ^ ^ Boca Raton London New York ANDROID SECURITY ATTACKS AND DEFENSES ABHISHEK DUBEY I ANMOL MISRA ( r öc) CRC Press VV J Taylor & Francis Group ^ "^ Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an

More information

The Green and Virtual Data Center

The Green and Virtual Data Center The Green and Virtual Data Center Greg (Schulz CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an informa business Contents Preface About

More information

Lean Management System LMS:2OI2

Lean Management System LMS:2OI2 Lean Management System LMS:2OI2 A Framework for Continual Lean Improvement William A. Levinson f r oc) CRC Press \M ^ J Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the

More information

Implementing the Project Management Balanced Scorecard

Implementing the Project Management Balanced Scorecard Implementing the Project Management Balanced Scorecard Jessica Keyes CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an informa business

More information

Governance Simplified

Governance Simplified Information Security Governance Simplified From the Boardroom to the Keyboard TODD FITZGERALD, cissp; cisa, cism Foreword by Tom Peltier CRC Press Taylor & Francis Croup Boca Raton London NewYork CRC Press

More information

RESILIENT. SECURE and SOFTWARE. Requirements, Test Cases, and Testing Methods. Mark S. Merkow and Lakshmikanth Raghavan. CRC Press

RESILIENT. SECURE and SOFTWARE. Requirements, Test Cases, and Testing Methods. Mark S. Merkow and Lakshmikanth Raghavan. CRC Press SECURE and RESILIENT SOFTWARE Requirements, Test Cases, and Testing Methods Mark S. Merkow and Lakshmikanth Raghavan CRC Press Taylor & Francis Group Boca Raton London New York CRC Press Is an imprint

More information

Schneps, Leila; Colmez, Coralie. Math on Trial : How Numbers Get Used and Abused in the Courtroom. New York, NY, USA: Basic Books, 2013. p i.

Schneps, Leila; Colmez, Coralie. Math on Trial : How Numbers Get Used and Abused in the Courtroom. New York, NY, USA: Basic Books, 2013. p i. New York, NY, USA: Basic Books, 2013. p i. http://site.ebrary.com/lib/mcgill/doc?id=10665296&ppg=2 New York, NY, USA: Basic Books, 2013. p ii. http://site.ebrary.com/lib/mcgill/doc?id=10665296&ppg=3 New

More information

Introduction to Supply Chain Management Technologies

Introduction to Supply Chain Management Technologies Introduction to Supply Chain Management Technologies Second Edition David Frederick Ross CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup,

More information

Improving Business Process Performance

Improving Business Process Performance Improving Business Process Performance Gain Agility, Create Value, and Achieve Success JOSEPH RAYNUS CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor &

More information

Networking. Systems Design and. Development. CRC Press. Taylor & Francis Croup. Boca Raton London New York. CRC Press is an imprint of the

Networking. Systems Design and. Development. CRC Press. Taylor & Francis Croup. Boca Raton London New York. CRC Press is an imprint of the Networking Systems Design and Development Lee Chao CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an Informa business AN AUERBACH BOOK

More information

Advances in Network Management

Advances in Network Management Advances in Network Management Jianguo Ding UC) CRC Press >5^ J Taylor & Francis Croup ^""""^ Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Group, an informa business AN AUERBACH

More information

Security, and Intelligence

Security, and Intelligence Machine Learning Forensics for Law Enforcement, Security, and Intelligence Jesus Mena CRC Press Taylor &. Francis Group Boca Raton London NewYork CRC Press is an imprint of the Taylor & Francis Croup,

More information

SECOND EDITION THE SECURITY RISK ASSESSMENT HANDBOOK. A Complete Guide for Performing Security Risk Assessments DOUGLAS J. LANDOLL

SECOND EDITION THE SECURITY RISK ASSESSMENT HANDBOOK. A Complete Guide for Performing Security Risk Assessments DOUGLAS J. LANDOLL SECOND EDITION THE SECURITY RISK ASSESSMENT HANDBOOK A Complete Guide for Performing Security Risk Assessments DOUGLAS J. LANDOLL CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is

More information

"Charting the Course... MOC 20409 B Server Virtualization with Windows Hyper-V and System Center. Course Summary

Charting the Course... MOC 20409 B Server Virtualization with Windows Hyper-V and System Center. Course Summary Description Course Summary This five day course will provide you with the knowledge and skills required to design and implement Microsoft Server solutions using Hyper-V and System. Objectives At the end

More information

CISO's Guide to. Penetration Testing. James. S. Tiller. A Framework to Plan, Manage, and Maximize Benefits. CRC Press. Taylor & Francis Group

CISO's Guide to. Penetration Testing. James. S. Tiller. A Framework to Plan, Manage, and Maximize Benefits. CRC Press. Taylor & Francis Group CISO's Guide to Penetration Testing A Framework to Plan, Manage, and Maximize Benefits James S. Tiller CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor

More information

CHAPMAN & HALL/CRC INNOVATIONS IN SOFTWARE ENGINEERING AND SOFTWARE DEVELOPMENT. Software Test Attacks to Break Mobile and Embedded Devices

CHAPMAN & HALL/CRC INNOVATIONS IN SOFTWARE ENGINEERING AND SOFTWARE DEVELOPMENT. Software Test Attacks to Break Mobile and Embedded Devices CHAPMAN & HALL/CRC INNOVATIONS IN SOFTWARE ENGINEERING AND SOFTWARE DEVELOPMENT Software Test Attacks to Break Mobile and Embedded Devices Jon Duncan Hagar (g) CRC Press Taylor & Francis Group Boca Raton

More information

Implementation. Business-Driven IT-Wide Agile (Scrum) and Kanban (Lean) Andrew T. Pham and David K. Pham. An Action Guide for Business and IT Leaders

Implementation. Business-Driven IT-Wide Agile (Scrum) and Kanban (Lean) Andrew T. Pham and David K. Pham. An Action Guide for Business and IT Leaders Business-Driven IT-Wide Agile (Scrum) and Kanban (Lean) Implementation An Action Guide for Business and IT Leaders Andrew T. Pham and David K. Pham Foreword by Jack Bergstrand, Former CFO of the Coca-Cola

More information

Standard: Vulnerability Management and Assessment

Standard: Vulnerability Management and Assessment Standard: Vulnerability Management and Assessment Page 1 Executive Summary San Jose State University (SJSU) is highly diversified in the information that it collects and maintains on its community members.

More information

Study Guide. ScrumMaster. The. James Schiel. CRC Press. Taylor & Francis Croup, an Inform* business AN AUERBACH BOOK. CRC Press (s an imprint of the

Study Guide. ScrumMaster. The. James Schiel. CRC Press. Taylor & Francis Croup, an Inform* business AN AUERBACH BOOK. CRC Press (s an imprint of the The ScrumMaster Study Guide James Schiel CRC Press & Taylor Francis Croup Boca Raton London New York CRC Press (s an imprint of the Taylor & Francis Croup, an Inform* business AN AUERBACH BOOK Contents

More information

Customer and Business Analytic

Customer and Business Analytic Customer and Business Analytic Applied Data Mining for Business Decision Making Using R Daniel S. Putler Robert E. Krider CRC Press Taylor &. Francis Group Boca Raton London New York CRC Press is an imprint

More information

Validating Enterprise Systems: A Practical Guide

Validating Enterprise Systems: A Practical Guide Table of Contents Validating Enterprise Systems: A Practical Guide Foreword 1 Introduction The Need for Guidance on Compliant Enterprise Systems What is an Enterprise System The Need to Validate Enterprise

More information

in Business Technology Management

in Business Technology Management Best Practices in Business Technology Management Stephen J. Andriole CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an informa business

More information

Cloud Computing. Implementation, Management, and Security. John W. Rittinghouse James F. Ransome

Cloud Computing. Implementation, Management, and Security. John W. Rittinghouse James F. Ransome Cloud Computing Implementation, Management, and Security John W. Rittinghouse James F. Ransome ( r öc) CRC Press W / Taylor &. Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor

More information

The Geography of International terrorism

The Geography of International terrorism SUB Hamburg A/596060 The Geography of International terrorism An Introduction to Spaces and Places of Violent Non-State Groups Richard M. Medina and George F. Hepner CRC Press Taylor & Francis Croup Boca

More information

Engineering Design. Software. Theory and Practice. Carlos E. Otero. CRC Press. Taylor & Francis Croup. Taylor St Francis Croup, an Informa business

Engineering Design. Software. Theory and Practice. Carlos E. Otero. CRC Press. Taylor & Francis Croup. Taylor St Francis Croup, an Informa business Software Engineering Design Theory and Practice Carlos E. Otero CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor St Francis Croup, an Informa business AN

More information

Deliuery Networks. A Practical Guide to Content. Gilbert Held. Second Edition. CRC Press. Taylor & Francis Group

Deliuery Networks. A Practical Guide to Content. Gilbert Held. Second Edition. CRC Press. Taylor & Francis Group A Practical Guide to Content Deliuery Networks Second Edition Gilbert Held CRC Press Taylor & Francis Group Boca Raton London NewYork CRC Press is an imprint of the Taylor & Francis Croup, an informa business

More information

Design of Enterprise Systems

Design of Enterprise Systems Design of Enterprise Systems Theory, Architecture, and Methods Ronald E. Giachetti CRC Press Taylor &. Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Group, an

More information

Goals. Understanding security testing

Goals. Understanding security testing Getting The Most Value From Your Next Network Penetration Test Jerald Dawkins, Ph.D. True Digital Security p. o. b o x 3 5 6 2 3 t u l s a, O K 7 4 1 5 3 p. 8 6 6. 4 3 0. 2 5 9 5 f. 8 7 7. 7 2 0. 4 0 3

More information

HP Customer Support. Remote Server Management. an Outtasking Solution Outline

HP Customer Support. Remote Server Management. an Outtasking Solution Outline HP Customer Support Remote Server Management an Outtasking Solution Outline Andreas Meinert Support Solution Architect DataCenter Solution Services, HP Germany 2004 Hewlett-Packard Development Company,

More information

Data Center Storage. Hubbert Smith. Implementation, and Management »C) Cost-Effective Strategies, CRC Press J Taylor & Francis Group

Data Center Storage. Hubbert Smith. Implementation, and Management »C) Cost-Effective Strategies, CRC Press J Taylor & Francis Group Data Center Storage Cost-Effective Strategies, Implementation, and Management Hubbert Smith»C) CRC Press J Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis

More information

Management. Project. Software. Ashfaque Ahmed. A Process-Driven Approach. CRC Press. Taylor Si Francis Group Boca Raton London New York

Management. Project. Software. Ashfaque Ahmed. A Process-Driven Approach. CRC Press. Taylor Si Francis Group Boca Raton London New York Software Project Management A Process-Driven Approach Ashfaque Ahmed CRC Press Taylor Si Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor St Francis Croup, an Informa business

More information

Cloud Computing. and Scheduling. Data-Intensive Computing. Frederic Magoules, Jie Pan, and Fei Teng SILKQH. CRC Press. Taylor & Francis Group

Cloud Computing. and Scheduling. Data-Intensive Computing. Frederic Magoules, Jie Pan, and Fei Teng SILKQH. CRC Press. Taylor & Francis Group Cloud Computing Data-Intensive Computing and Scheduling Frederic Magoules, Jie Pan, and Fei Teng SILKQH CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor

More information

Warning Signs and the Red Flag System

Warning Signs and the Red Flag System Fraud Prevention and Detection Warning Signs and the Red Flag System Rodney T. Stamler Hans J. Marschdorf Mario Possamai CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint

More information

Secunia Corporate Software Inspector (Secunia CSI) ver.5.0

Secunia Corporate Software Inspector (Secunia CSI) ver.5.0 TECHNOLOGY AUDIT Secunia Corporate Software Inspector (Secunia CSI) ver.5.0 Secunia Reference Code: OI00070-107 Publication Date: December 2011 Author: Andy Kellett SUMMARY Catalyst Organizations need

More information

Get what s right for your business. Contact @lliance Technologies.

Get what s right for your business. Contact @lliance Technologies. Provisioning Looking for new technology? You need systems in line with your business goals. You also need those systems to interact seamlessly. We can help you get the right technology to the right place

More information

Supply Chain Risk. An Emerging Discipline. Gregory L. Schlegel. Robert J. Trent

Supply Chain Risk. An Emerging Discipline. Gregory L. Schlegel. Robert J. Trent Supply Chain Risk Management An Emerging Discipline Gregory L. Schlegel Robert J. Trent CRC Press Taylors.Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup,

More information

CLINICAL DATA MANAGEMENT

CLINICAL DATA MANAGEMENT J * Edition Practical Guide to CLINICAL DATA MANAGEMENT Susanne Prokscha (g) CRC Press Taylor Francis Croup London York CRC Press is an imprint of the Taylor Francis Croup, an buslness Preface Introduction

More information

IMPROVEMENT THE PRACTITIONER'S GUIDE TO DATA QUALITY DAVID LOSHIN

IMPROVEMENT THE PRACTITIONER'S GUIDE TO DATA QUALITY DAVID LOSHIN i I I I THE PRACTITIONER'S GUIDE TO DATA QUALITY IMPROVEMENT DAVID LOSHIN ELSEVIER AMSTERDAM BOSTON HEIDELBERG LONDON NEW YORK OXFORD PARIS SAN DIEGO SAN FRANCISCO SINGAPORE SYDNEY TOKYO Morgan Kaufmann

More information

Computer Security Literacy

Computer Security Literacy Computer Security Literacy Staying Safe in a Digital World Douglas Jacobson and Joseph Idziorek CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis

More information

PATCH MANAGEMENT POLICY IT-P-016

PATCH MANAGEMENT POLICY IT-P-016 IT-P-016 Date: 28 th March, 2016 Stamford International University ( STIU ) Patch Management Policy Rationale Stamford International University ( STIU ) is responsible for ensuring the confidentiality,

More information

CONTENTS. List of Tables List of Figures

CONTENTS. List of Tables List of Figures Prelims 13/3/06 9:11 pm Page iii CONTENTS List of Tables List of Figures ix xi 1 Introduction 1 1.1 The Need for Guidance on ERP System Validation 1 1.2 The Need to Validate ERP Systems 3 1.3 The ERP Implementation

More information

CREATING A THIRD EDITION DAVID MANN

CREATING A THIRD EDITION DAVID MANN CREATING A LEAN CULTURE Tools to Sustain Lean Conversions THIRD EDITION DAVID MANN CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor St Francis Group, an

More information

EFFECTIVE NON-PROFIT MANAGEMENT

EFFECTIVE NON-PROFIT MANAGEMENT American Society for Public Administration Series in Public Administration and Public Policy Advancing excellence in public service.., EFFECTIVE NON-PROFIT MANAGEMENT Context, Concepts, and Competencies

More information

RARITAN VALLEY COMMUNITY COLLEGE COURSE OUTLINE. CISY 275 UNIX and Linux Security Management

RARITAN VALLEY COMMUNITY COLLEGE COURSE OUTLINE. CISY 275 UNIX and Linux Security Management RARITAN VALLEY COMMUNITY COLLEGE COURSE OUTLINE CISY 275 UNIX and Linux Security Management I. Basic Course Information A. Course Number & Title: CISY-275 - UNIX and Linux Security Management B. Date of

More information

Requirements Engineering for Software

Requirements Engineering for Software Requirements Engineering for Software and Systems Second Edition Phillip A. Laplante CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an

More information

Networking. Cloud and Virtual. Data Storage. Greg Schulz. Your journey. effective information services. to efficient and.

Networking. Cloud and Virtual. Data Storage. Greg Schulz. Your journey. effective information services. to efficient and. Cloud and Virtual Data Storage Networking Your journey to efficient and effective information services Greg Schulz CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of

More information

Vulnerability Audit: Why a Vulnerability Scan Isn t Enough. White Paper

Vulnerability Audit: Why a Vulnerability Scan Isn t Enough. White Paper Vulnerability Audit: Why a Vulnerability Scan Isn t Enough White Paper May 10, 2005 TABLE OF CONTENTS Introduction: How Secure Are My Systems?... 3 Vulnerability: The Modern Meaning Of A Muddled Word...

More information

Oracle Embedded Programming and Application Development

Oracle Embedded Programming and Application Development Oracle Embedded Programming and Application Development Lakshman Bulusu ( r oc) CRC Press >V J Taylor &. Francis Group ^* "^^ Boca Raton London New York CRC Press is an imprint of the Taylor & Francis

More information

^H 3RD EDITION ITGOVERNANCE A MANAGER'S GUIOE TO OATA SECURITY ANO DS 7799/IS017799 ALAN CALDER STEVE WATKINS. KOGAN PAGE London and Sterling, VA

^H 3RD EDITION ITGOVERNANCE A MANAGER'S GUIOE TO OATA SECURITY ANO DS 7799/IS017799 ALAN CALDER STEVE WATKINS. KOGAN PAGE London and Sterling, VA ^H 3RD EDITION ITGOVERNANCE A MANAGER'S GUIOE TO OATA SECURITY ANO DS 7799/IS017799 ALAN CALDER STEVE WATKINS KOGAN PAGE London and Sterling, VA Contents Foreword by Nigel Turnbull How to use this book

More information

SUMMIT ASSET MANAGEMENT DATASHEET

SUMMIT ASSET MANAGEMENT DATASHEET SUMMIT ASSET MANAGEMENT DATASHEET SUMMIT, Symphony SUMMIT, the Symphony SUMMIT logo, and all other Symphony SUMMIT product, brand or service names are registered trademarks or trademarks of Symphony SUMMIT,

More information

END TO END DATA CENTRE SOLUTIONS COMPANY PROFILE

END TO END DATA CENTRE SOLUTIONS COMPANY PROFILE END TO END DATA CENTRE SOLUTIONS COMPANY PROFILE About M 2 TD M2 TD is a wholly black Owned IT Consulting Business. M 2 TD is a provider of data center consulting and managed services. In a rapidly changing

More information

THE MODERN THEORY OF THE TOYOTA PRODUCTION SYSTEM

THE MODERN THEORY OF THE TOYOTA PRODUCTION SYSTEM THE MODERN THEORY OF THE TOYOTA PRODUCTION SYSTEM A SYSTE Phillip Marksberry, PhD, PE /O\ CRC Press yc**" J Taylor & Francis Group V^_,/ Boca Raton London NewYork CRC Press is an imprint of the Taylor

More information

Mining. Practical. Data. Monte F. Hancock, Jr. Chief Scientist, Celestech, Inc. CRC Press. Taylor & Francis Group

Mining. Practical. Data. Monte F. Hancock, Jr. Chief Scientist, Celestech, Inc. CRC Press. Taylor & Francis Group Practical Data Mining Monte F. Hancock, Jr. Chief Scientist, Celestech, Inc. CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor Ei Francis Group, an Informs

More information

SOFTWARE TESTING. A Craftsmcm's Approach THIRD EDITION. Paul C. Jorgensen. Auerbach Publications. Taylor &. Francis Croup. Boca Raton New York

SOFTWARE TESTING. A Craftsmcm's Approach THIRD EDITION. Paul C. Jorgensen. Auerbach Publications. Taylor &. Francis Croup. Boca Raton New York SOFTWARE TESTING A Craftsmcm's Approach THIRD EDITION Paul C. Jorgensen A Auerbach Publications Taylor &. Francis Croup Boca Raton New York Auerbach Publications is an imprint of the Taylor & Francis Group,

More information

Network Security Policy

Network Security Policy Network Security Policy Policy Contents I. POLICY STATEMENT II. REASON FOR POLICY III. SCOPE IV. AUDIENCE V. POLICY TEXT VI. PROCEDURES VII. RELATED INFORMATION VIII. DEFINITIONS IX. FREQUENTLY ASKED QUESTIONS

More information

Why you need an Automated Asset Management Solution

Why you need an Automated Asset Management Solution solution white paper Why you need an Automated Asset Management Solution By Nicolas Renard, Support and Professional Services Manager, BMC France Table of Contents 1 OVERVIEW Automated Asset Discovery

More information

Quality Management. Theory and Application PETER D. MAUCH. Ltfi) CRC Press. \ V J Taylor & Francis Group. ^ ^ Boca Raton London New York

Quality Management. Theory and Application PETER D. MAUCH. Ltfi) CRC Press. \ V J Taylor & Francis Group. ^ ^ Boca Raton London New York Quality Management Theory and Application PETER D. MAUCH Ltfi) CRC Press \ V J Taylor & Francis Group ^ ^ Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Group, an Informa business

More information

Resources Management. Pascal Nuyttens Consultant. Stephan Pauwels Technology Specialist

Resources Management. Pascal Nuyttens Consultant. Stephan Pauwels Technology Specialist Pascal Nuyttens Consultant Stephan Pauwels Technology Specialist What is Required Today? Ensure Security and Compliance Enforce business rules and processes by policy Ensure systems are secure and locked

More information

Patent Public Advisory Committee Meeting. OCIO Update

Patent Public Advisory Committee Meeting. OCIO Update Patent Public Advisory Committee Meeting OCIO Update John B. Owens II Chief Information Officer September 27, 2012 USPTO Seal IT INFRASTRUCTURE IMPROVEMENT PORTFOLIO - ROAD MAP The Business Problem [In

More information

AL RAFEE ENTERPRISES Solutions & Expertise.

AL RAFEE ENTERPRISES Solutions & Expertise. AL RAFEE ENTERPRISES Solutions & Expertise. Virtualization Al Rafee has strategically made substantial investment in building up a large end to end portfolio of Virtualization across the entire IT infrastructure

More information

Symantec Control Compliance Suite. Overview

Symantec Control Compliance Suite. Overview Symantec Control Compliance Suite Overview Addressing IT Risk and Compliance Challenges Only 1 in 8 best performing organizations feel their Information Security teams can effectively influence business

More information

OVERVIEW. In all, this report makes recommendations in 14 areas, such as. Page iii

OVERVIEW. In all, this report makes recommendations in 14 areas, such as. Page iii The Office of the Auditor General has conducted a procedural review of the State Data Center (Data Center), a part of the Arizona Strategic Enterprise Technology (ASET) Division within the Arizona Department

More information

Improve Your Business Through Best Practice IT Management. A White Paper Prepared for Kaseya September 2007

Improve Your Business Through Best Practice IT Management. A White Paper Prepared for Kaseya September 2007 A White Paper Prepared for Kaseya September 2007 Table of Contents Executive Summary...1 Introduction...1 The Role of Best Practices in Managing IT Services...1 Profitability...1 Reliability...2 Best Practices

More information

Vulnerability Management ROI Calculator User Guide. v2.0 Monday, September 29, 2008. www.lumension.com. Copyright 2008, Lumension Security

Vulnerability Management ROI Calculator User Guide. v2.0 Monday, September 29, 2008. www.lumension.com. Copyright 2008, Lumension Security Vulnerability Management ROI Calculator User Guide v2.0 Monday, September 29, 2008 Copyright 2008, Lumension Security www.lumension.com Vulnerability Management ROI Calculator Overview The Lumension Security

More information

ITIL Incident Management Process & CRS Client Installation Training Class Outline

ITIL Incident Management Process & CRS Client Installation Training Class Outline ITIL Incident Management Process & CRS Client Installation Training Class Outline 1. Help Desk Training a. Double feature i. Information Technology Management (ITM), Operations Information Technology Infrastructure

More information

Total Protection for Compliance: Unified IT Policy Auditing

Total Protection for Compliance: Unified IT Policy Auditing Total Protection for Compliance: Unified IT Policy Auditing McAfee Total Protection for Compliance Regulations and standards are growing in number, and IT audits are increasing in complexity and cost.

More information

Open Source Data Warehousing and Business Intelligence

Open Source Data Warehousing and Business Intelligence Open Source Data Warehousing and Business Intelligence Lakshman Bulusu CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an infonna business

More information

Atrium Discovery for Storage. solution white paper

Atrium Discovery for Storage. solution white paper Atrium Discovery for Storage solution white paper EXECUTIVE SUMMARY As more IT systems are deployed that depend on storage infrastructure to provide business services, and with the adoption of technology

More information

VVC Technology & Information Resources Catalog of Services

VVC Technology & Information Resources Catalog of Services 1. Information Technology a. Accounts i. Account Management (1) Credential Management (a) Your IT Department manages system credentials on all systems excepting Financial 2000, SnowWhite, Charming and

More information

The management imperative

The management imperative Pillars of Enterprise Protection: IT Management Technical Brief: IT Management Pillars of Enterprise Protection: IT Management Contents The management challenge...............................................................................

More information

Closing the Vulnerability Gap of Third- Party Patching

Closing the Vulnerability Gap of Third- Party Patching SOLUTION BRIEF: THIRD-PARTY PATCH MANAGEMENT........................................ Closing the Vulnerability Gap of Third- Party Patching Who should read this paper IT Managers who are trying to manage

More information

Effective Methods for Software and Systems Integration

Effective Methods for Software and Systems Integration Effective Methods for Software and Systems Integration Boyd L. Summers CRC Press Taylor & Francis Group 6000 Broken Sound Parkway NW, Suite 300 Boca Raton, FL 33487-2742 CRC Press is an imprint of Taylor

More information

Virtual Desktop and Cloud Services: New Security Demand. Blerta Lufaj

Virtual Desktop and Cloud Services: New Security Demand. Blerta Lufaj Virtual Desktop and Cloud Services: New Security Demand Blerta Lufaj Master s Thesis Master of Science in Information Security 30 ECTS Department of Computer Science and Media Technology Gjøvik University

More information

Outsourcing and Information Security

Outsourcing and Information Security IBM Global Technology Services Outsourcing and Information Security Preparation is the Key However ultimately accountability cannot be outsourced February 2009 page 2 1. Introduction 3 1.1 Reason for outsourcing

More information

TOYOTA. by TOYOTA. Reflections from the Inside Leaders on the Techniques That Revolutionized the Industry. Edited by Samuel Obara and Darril Wilburn

TOYOTA. by TOYOTA. Reflections from the Inside Leaders on the Techniques That Revolutionized the Industry. Edited by Samuel Obara and Darril Wilburn TOYOTA by TOYOTA Reflections from the Inside Leaders on the Techniques That Revolutionized the Industry Edited by Samuel Obara and Darril Wilburn CRC Press Taylor & Francis Group Boca Raton London New

More information

for Research and Guiding Innovation for Positive R&D Outcomes Lory Mitchell Wingate

for Research and Guiding Innovation for Positive R&D Outcomes Lory Mitchell Wingate Project Management for Research and Development Guiding Innovation for Positive R&D Outcomes Lory Mitchell Wingate CRC Press Taylor & Francis Group BocaRaton London New York CRC Press is an imprint of

More information

Service Desk Best Practices

Service Desk Best Practices Service Desk Best Practices As an IT service provider, you understand that information can provide a powerful strategic advantage. In order to ensure the proper mechanisms are in place for information

More information

THE TOP 4 CONTROLS. www.tripwire.com/20criticalcontrols

THE TOP 4 CONTROLS. www.tripwire.com/20criticalcontrols THE TOP 4 CONTROLS www.tripwire.com/20criticalcontrols THE TOP 20 CRITICAL SECURITY CONTROLS ARE RATED IN SEVERITY BY THE NSA FROM VERY HIGH DOWN TO LOW. IN THIS MINI-GUIDE, WE RE GOING TO LOOK AT THE

More information

Index. B baselining project plans, 96 batch loaders, 82 bottom up schedules, building, 94 boundaries. See span budgets, development of, 94

Index. B baselining project plans, 96 batch loaders, 82 bottom up schedules, building, 94 boundaries. See span budgets, development of, 94 Index A accuracy of data, 193 defining, 194-197 attribute accuracy, 194 configuration item accuracy, 194-195 relationship accuracy, 195-197 during pilot programs, 144 improving, 202-205 measuring, 197-202

More information

INCIDENT RESPONSE CHECKLIST

INCIDENT RESPONSE CHECKLIST INCIDENT RESPONSE CHECKLIST The purpose of this checklist is to provide clients of Kivu Consulting, Inc. with guidance in the initial stages of an actual or possible data breach. Clients are encouraged

More information

CA Vulnerability Manager r8.3

CA Vulnerability Manager r8.3 PRODUCT BRIEF: CA VULNERABILITY MANAGER CA Vulnerability Manager r8.3 CA VULNERABILITY MANAGER PROTECTS ENTERPRISE SYSTEMS AND BUSINESS OPERATIONS BY IDENTIFYING VULNERABILITIES, LINKING THEM TO CRITICAL

More information

Devising a Server Protection Strategy with Trend Micro

Devising a Server Protection Strategy with Trend Micro Devising a Server Protection Strategy with Trend Micro A Trend Micro White Paper Trend Micro, Incorporated» A detailed account of why Gartner recognizes Trend Micro as a leader in Virtualization and Cloud

More information

Security Patch Management

Security Patch Management The knowledge behind the network. Security Patch Management By Felicia M. Nicastro Senior Network Systems Consultant International Network Services Security Patch Management March 2003 INS Whitepaper 1

More information

ITIL's IT Service Lifecycle - The Five New Silos of IT

ITIL's IT Service Lifecycle - The Five New Silos of IT The workable, practical guide to Do IT Yourself Vol. 4.01 January 1, 2008 ITIL's IT Service Lifecycle - The Five New Silos of IT By Rick Lemieux In my last article I spoke about IT s evolution from its

More information

Information and Communication Technology. Patch Management Policy

Information and Communication Technology. Patch Management Policy BELA-BELA LOCAL MUNICIPALITY - - Chris Hani Drive, Bela- Bela, Limpopo. Private Bag x 1609 - BELA-BELA 0480 - Tel: 014 736 8000 Fax: 014 736 3288 - Website: www.belabela.gov.za - - OFFICE OF THE MUNICIPAL

More information

Project Management Concepts, Methods, and Techniques

Project Management Concepts, Methods, and Techniques Project Management Concepts, Methods, and Techniques Claude H. Maley Uffi\ CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an Informa

More information

for Information Technology

for Information Technology Lean Management Principles for Information Technology Gerhard J. Plenert CRC Press Taylor & Francis Croup Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an Informs business

More information

BUSINESS ANALYSIS FDR INTELLIGENCE

BUSINESS ANALYSIS FDR INTELLIGENCE BUSINESS ANALYSIS FDR BUSINESS INTELLIGENCE BERT BRIJS CRC Press Taylor & Francis Group Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Croup, an informa business AN AUERBACH

More information

Devising a Server Protection Strategy with Trend Micro

Devising a Server Protection Strategy with Trend Micro Devising a Server Protection Strategy with Trend Micro A Trend Micro White Paper» Trend Micro s portfolio of solutions meets and exceeds Gartner s recommendations on how to devise a server protection strategy.

More information

External Supplier Control Requirements

External Supplier Control Requirements External Supplier Control s Cyber Security For Suppliers Categorised as Low Cyber Risk 1. Asset Protection and System Configuration Barclays Data and the assets or systems storing or processing it must

More information

IBM Service Management solutions White paper. Make ITIL actionable with Tivoli software.

IBM Service Management solutions White paper. Make ITIL actionable with Tivoli software. IBM Service solutions White paper Make ITIL actionable with Tivoli software. June 2008 2 Contents 2 Introduction 3 ITIL: best practices for best results 4 Support ITIL best practices with comprehensive

More information

Cisco Unified Computing Remote Management Services

Cisco Unified Computing Remote Management Services Cisco Unified Computing Remote Management Services Cisco Remote Management Services are an immediate, flexible management solution that can help you realize the full value of the Cisco Unified Computing

More information

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time. H10261, page 1 Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time. FUNCTIONAL DUTIES This is a non-career, term position

More information

Your Infrastructure. Our Responsibility.

Your Infrastructure. Our Responsibility. Know Us The SRM group is four decades old multi-million dollar business house currently operational in 15 cities worldwide. SRM group has made its presence felt in education, training, Electronics, Technology,

More information