Re: Secure Server Procedure

[Brian Smith-Sweeney <bsmithsweeney () NYU EDU>]

I would suggest checking out http://www.cisecurity.com/ for these types
of standards.  You can either adopt a standards doc whole-hog, or
pick-and-choose what you think is appropriate for your purposes.

Cheers,
Brian

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Brian Smith-Sweeney      Sr. Network Security Analyst
ITS Technology Security Services, New York University
bsmithsweeney () nyu edu
http://www.nyu.edu/its/security
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Charlie D. Kutil wrote:
> We are defining some new servers that we wish to classify as Secure
> Servers.  We have a policy in place for server hardening, however we do
> not have a step based procedure or checklist. Is anyone willing to share
> their procedure for developing a Secure Server?
>
> Thank you,
> Charlie Kutil
>
> Charlie Kutil, M.P.H., CISSP
> Information Policy & Security Officer
> Office of Information Technology (OIT)
> Texas A&M Health Science Center
> Coastal Bend Health Education Center
> (O) 361-825-2805
> (C) 361-876-3781