Re: Software for Tracking Security Incidents

[Steve Brukbacher <sab2 () UWM EDU>]

We're looking at customizing something like OTRS which is an open source
PHP based ticket tracking product.
http://otrs.org/

There was a product offered by Purdue called CIRDB which is no longer
being developed due to loss of funding: This seemed quite popular and
useful...
https://cirdb.cerias.purdue.edu/

There is a commercial product from a London company called QCC we are
doing a webex demo on next week called SID, but it is REALLY expensive.
They have yet to get a school on board but they have priced themselves
out of the market. Were this to change, it might be worth considering.

Their website:
http://www.qccis.com/content.php?section=secureincidentdatabase

Their Flash demo
http://www.qccis.com/sid/online_demo/Loader.swf

We're probably going to get a local programmer to customize OTRS to do
what we need it to do which is take in data from divergent sources and
turn them in to incidents and allow for easy reporting and allow for
manual tickets to be opened.


--
Steve Brukbacher, CISSP
University of Wisconsin Milwaukee
Information Security Coordinator
UWM Computer Security Web Site
www.security.uwm.edu
Phone: 414.229.2224



Brenda B Gombosky wrote:
> What is everyone using to track their incidents?  Does anyone know of a
> commercial product?
>
>
> Brenda B. Gombosky, CISSP, CHSP
> Director, Information Technology
> University of Louisville
> Miller IT Center, Room 109
> Louisville, KY 40292
> (502)852-5037
> (502)419-6689