Full Disclosure mailing list archives
RE: Top 15 Reasons Why Admins Use Security Scan ners
From: Harlan Carvey <keydet89 () yahoo com>
Date: Wed, 28 Apr 2004 13:04:33 -0700 (PDT)
And you know something, Chris...that's fine. Really. I just left a position in the private sector w/ a company that was audited over a dozen times a year by various customers. Even their external auditors (ie, *not* customers) were clueless when it comes to IT or security. One audit did include a knowledgeable security professional on staff...but just one. But there's also another way to look at the original comment...security is a process. Running a vulnerability scanner isn't a process...it's a point-in-time check, a snapshot. A good IT security auditor won't focus on the fact that certain systems have vulnerabilities...he or she will focus on *why* they have the vulnerabilities.
I believe many true IT Security Auditors out there would agree that your wrong on this one.-How will I ever pass my IT Security Audits? Don't worry about it...most audits don't seem tohavean IT background, and even when they do, theydon'ttake the time to understand your businessprocesses oryour network infrastructure.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Top 15 Reasons Why Admins Use Security Scan ners Starford, Christopher D. (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Ron DuFresne (Apr 30)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Ron DuFresne (Apr 30)
- <Possible follow-ups>
- RE: Top 15 Reasons Why Admins Use Security Scan ners Stuart Fox (DSL AK) (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Frank Knobbe (Apr 28)
- Re: Top 15 Reasons Why Admins Use Security Scan ners Jeremiah Cornelius (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Vanish Pattni (DSL AK) (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)