The Best Damn IT Security Management Book Period

Chapter 21. Fine-Tuning the Evaluation

Solutions in this chapter

• Network Device Analysis

• Password-Compliance Testing

• Application-Specific Scanning

• Network Protocol Analysis

• Finalizing Your Findings List

• Mapping Findings Back to the IEM Process

  Summary

Introduction

This chapter covers the remainder of the scanning, or hands-on, portion of the IEM. As mentioned in the previous chapter, you will more than likely have a different view of the system when you’re at the console than when you’re evaluating the system from the network. The same can be said of the remaining tasks, in regard to the organization’s INFOSEC posture. By conducting network device analysis, ...