Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Its Time to Take User Awareness Seriously | Main | Anti-Phishing Best Practices Report »

Don't Reinvent the Wheel

Information technology best practices are available today in information security, IT management and IT governance. Each of these support the mission of perserving messaging and Web security so they are worth considering as you formulate and adapt your security management strategies. Even if you don't follow every recommendation and procedure, there is a wealth of good ideas in three important best practices: ISO 17799, Information Technology Infrastructure Library (ITIL), and Control Objectives for Information and Related Technology (COBIT).

The ISO 17799 standard is a code of practice for information security management. COBIT focuses on processes, indicators and measures used to control IT operations thate enable proper management of IT processes. ITIL also addresses management but with an emphasis on detailed operational controls for delivering services. There is certainly overlap between these best practices but each come at the problem of controlling IT services from a different perspective.

In blog entries to follow, I look into each of these best practices and discuss the elements of each that help to address issues in messaging and Web security.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/74

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net