RE: Security Simplification

["Nhon Yeung" <Nhon.Yeung () cranegroup com au>]

How about consolidation? ie logs, and then run a sim/sem (security incident/event management) software of some sort so 
that your admins don't have to look at 10 consoles to determine whats going on.
You can also look at reducing your user repositories, eg use AD as you're primary source for user info.. most places 
have users scattered across a few directories..

Regards
Nhon


-----Original Message-----
From: listbounce () securityfocus com
[mailto:listbounce () securityfocus com]On Behalf Of
oligarchicalrule () gmail com
Sent: Thursday, 22 February 2007 6:51 AM
To: security-basics () securityfocus com
Subject: Security Simplification


If you were told by a VP to simplify security for your organization, what you think would be a starting point?  It's 
seems vague.  We run Windows servers/desktops that are built on the same images.  We use Cisco switches/routers/etc.  
I'm not really sure where to start.

Any views expressed in this message are those of the individual sender, except where the sender specifically states 
them to be the views of Crane Group


---------------------------------------------------------------------------
This list is sponsored by: BigFix

If your IT fails, you're out of business - or worse.  Arm your
enterprise with BigFix, the single converged IT security and operations
engine. BigFix enables continuous discovery, assessment, remediation,
and enforcement for complex and distributed IT environments in real-time
from a single console.
Think what's next. Think BigFix.

http://ad.doubleclick.net/clk;82309979;15562032;o?http://www.bigfix.com/ITNext/
---------------------------------------------------------------------------