Re: General Security audit question

["David Verty" <verticalrave () hotmail com>]

One place that has a plethora of information on securing networks is CERT 
(of course..). CERT has great recommendations that some administrators don't 
even bother with, but save time later on...Search around and you will find 
some good articles. The last one i've read was here:
http://www.cert.org/security-improvement/

Also, you may want to ask about their user policies, and how they are 
structured.

There are also some that are on IBM's website (I don't know where, I lost my 
list of links) that cover things like wardialing into a network to find an 
open defaulted switch.




> From: "Dallas Hindle" <dallash () optushome com au>
> To: <security-basics () securityfocus com>,<focus-ids () securityfocus com>
> Subject: General Security audit question
> Date: Tue, 7 Jan 2003 16:11:22 +1100
>
> Hi
>  
> I've been asked to perform a security audit on a site (Stock Broker) and
> to report on all Site, network, server and software issues that I
> encounter
>  
> I have a pretty decent idea of what I'm looking for, but if anyone has
> any links to, or templates of what you would find in a security audit
> could you please let me know or send me a copy?
>  
>  
>  
> Thanks
>  
> Dallas


_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* 
http://join.msn.com/?page=features/virus