際際滷

際際滷Share a Scribd company logo
Building for IT security
Or what you can do with an unlimited
budget
Claus Cramon Houmann
Banque hman 2013-05-17
2
hman
Preface
 This is meant to provoke
 Including everything is impossible
 No vendor-specific products will be mentioned
Banque hman 2013-05-17
3
hman
1 Single 0-day is all you need
Banque hman 2013-05-17
4
hman
Perimeter
5
hman
Perimeter
without UTM
Banque hman 2013-05-17
6
hman
Banque hman 2013-05-17
7
hman
Banque hman 2013-05-17
8
hman
Banque hman 2013-05-17
9
hman
Banque hman 2013-05-17Internal security
functions  integrated at
all levels
10
hman
Banque hman 2013-05-17
Internal security
functions
11
hman
Banque hman 2013-05-17
Internal security
functions
12
hman
Banque hman 2013-05-17
13
hman
Banque hman 2013-05-17
14
hman
Banque hman 2013-05-17
15
hman
Banque hman 2013-05-17
16
hman
Governance/policies and controls
 Information Security policy
 Privacy policy
 Outsourcing policy
 Vendor & Audit management policy
 Data breach policy
 Security Incident response & Management policy
 Incident Management policy
 Problem Management policy
 Access control policy
 Logical access control policy
 Change Management policy
 Release Management policy
 Acceptable use of Internet policy (and similar)
 IT security guidelines and instructions
 Project Management policy
Banque hman 2013-05-17
17
hman
Governance/policies and controls
 Controls (examples of the most critical manual or automated
controls):
 User Access Controls on critical data
 Identity Management
 Privileged Account Management
 Control & Audit Superuser Access
 User Activity Monitoring
 Monitor User Activities & System Access
Banque hman 2013-05-17
18
hman
Banque hman 2013-05-17
19
hman
Security essential RolesBanque hman 2013-05-17
20
hman
Security essential RolesBanque hman 2013-05-17
21
hman
Banque hman 2013-05-17
22
hman
Compliance Banque hman 2013-05-17
23
hman
Compliance Banque hman 2013-05-17
24
hman
Banque hman 2013-05-17
25
hman
Processes Banque hman 2013-05-17
26
hman
Processes Banque hman 2013-05-17
27
hman
Processes Banque hman 2013-05-17
28
hman
Banque hman 2013-05-17
29
hman
Banque hman 2013-05-17
30
hman
About me
 Claus Cramon Houmann, 37, married to Tina and I have 3
lovely kids
 You can contact me anytime:
 Skype: Claushj0707
 Twitter: @claushoumann or @improveitlux
Banque hman 2013-05-17

More Related Content

Css 2013 claushoumann Building comprehensively for IT Security