Re: Vulnerability Scanning

[Info <info () COMPLYGUARDNETWORKS COM>]

We believe one should test often, and use neutral third party tools.

If the school accepts credit cards for payment of tuition or student
services, you will be required to to test on a regular basis using only
approved tools.

Check with your Business and Finance departments to see if they have been
contacted by your banks.

Add ional info here:
For Visa http://usa.visa.com/business/merchants/cisp_index.html
For MasterCard
https://sdp.mastercardintl.com/pdf/Standards_Applicable_To_Merchants_and_MSP
.pdf



-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU]On Behalf Of Walsh, Brian R.
(Information Services)
Sent: Monday, August 30, 2004 9:48 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Vulnerability Scanning


  How frequently and how thoroughly does everyone perform vulnerability
scanning? Do you use commercial tools (Qualys, eEye, etc.), free tools
(Nessus, etc.), or outside services? Thanks!



  Brian Walsh

  Connecticut College





**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.