RE: Need Help

["Jason Burzenski" <jason.burzenski () kwe com>]

Tom,

Whomever decided it would be a good idea to implement these systems should
have also considered the daily operational work involved with running them
effectively.  You may be able to bank on the individual vendors for the
proxy, ids, etc to determine the recommended administrative tasks for those
system.  You could combine this information with a risk analysis to
represent the potential loss involved with an improperly manned environment.
You may also find that there is no cost justification for some of these
devices or that other devices may prove more effective for your environment.


A decent article by Kevin Beaver on the subject of selling security to
management:
http://searchsecurity.techtarget.com/tip/1,289483,sid14_gci837832,00.html

A Guide to Risk Assessment and Safeguard Selection for Information
Technology:
http://www.cse-cst.gc.ca/en/documents/knowledge_centre/publications/manuals/
mg3e.pdf




-----Original Message-----
From: tombombadillon () Argentina com [mailto:tombombadillon () Argentina com]
Sent: Wednesday, December 11, 2002 9:48 AM
To: security-basics () securityfocus com
Subject: Need Help


Hi,

I am in the security area and ?administer? 1200 users in mainframe with
VM/ESA, VSE/ESA, CICS, AS/400,  LAN of 500 PC?s and a Wan of 600, (mix of
Window$ platforms). Now we are connecting the enterprise to internet and
we go to add f4 firewalls, 2 proxy,  2 IDS, 9 Linux, etc (with the risk
this involve)  and I am alone with other guy (but it?s technical knowledge
is lower, hi manage the papers).

What are some good arguments I can use to request for additional personal?
Management don?t understand importance of security. What can I do? This
is a nightmare.

Thanks in advance.


(*) Really the only think I have time to do is reset passwords.


______________________________________________________________________

Obtenga gratis su cuenta @Argentina.com con AntiVirus, 20mb de espacio,

acceso POP3 y SMTP en 24 ciudades                     www.Argentina.com