Security Basics mailing list archives

Re: security not a big priority?


From: "crazy frog crazy frog" <i.m.crazy.frog () gmail com>
Date: Thu, 15 Feb 2007 22:16:47 +0530

HI Francois,

Take it easy.you are assigned a new role and responsibility.everyone
come accross this situation first time.so first try to read some good
policy docs and then go for checking the various network configuration
across your organization.
Take it easy man,we are here to help you :-p
Cheers,
_CF

On 2/15/07, Francois Yang <francois.y () gmail com> wrote:
I have already done some vulnerability testings from the outside and
pointed out some things that needed to be changed.  And again, it's
gone no where.
Just more items added to my list.
And do I really want to hack into my network and break something?  I
shouldn't have to do that.  something should be done proactively.  I
already know the vulnerabilities, I just need to fix them.


On 2/15/07, Thompson,  Jeremy <jeremy.thompson () thewintergrp com> wrote:
> Attack the network from the outside and show him the importance of
> security.
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On Behalf Of Francois Yang
> Sent: Wednesday, February 14, 2007 2:33 PM
> To: security-basics () securityfocus com
> Subject: security not a big priority?
>
> So I have a problem and like to know what you guys think.
> I'm a Security Analyst at an Education institute. A community college to
> be more precise.
> So I was brought on board to address security issues and work on making
> this place a better place.  Now the problem is.
> 1. I'm in the network operation team.  no security group.
> 2. My boss doesn't seem to know much about security.
> 3. My boss doesn't seem to think highly of security since all my
> projects seems to be of low priority.
> 4. I have a long list of things that needs to be done and they are all
> waiting for the engineers to work on it. But again they have better
> things to do.
> So what am I suppose to do? look for another job? :) anyone run into
> this problem before?
> I'm at the point where I'm not sure what to do.
>
>
> Thanks.
>
>
> --
> If you think technology can solve your security problems, then you don't
> understand the problems and you don't understand the technology.
> Bruce Schneier
>
>


--
If you think technology can solve your security problems, then you
don't understand the problems and you don't understand the technology.
Bruce Schneier



--
---------------------------------------
http://www.secgeeks.com
get a blog on secgeeks :)
register here:-
http://secgeeks.com/user/register
rss feeds :-
http://secgeeks.com/node/feed
Submit you security articles,send them to secgeek () secgeeks com

http://www.newskicks.com
Submit and kick for new stories from all around the world.
---------------------------------------


Current thread: