Re: Is there any way to measure IT Security??
"Larry Marin (Irony Account)" <[email protected]> Thu, 28 Jul 2005 12:29:57 -0400
| Newsgroups | gmane.comp.security.penetration,gmane.comp.security.linux,gmane.comp.security.libnet,gmane.comp.security.basics |
|---|---|
| Message-ID | <[email protected]> |
You should check out NSA IAM/IEM Methodology...it works well for me. http://www.iatrp.com/iam.cfm Toto A Atmojo wrote: > Dear all, > > Currently I=92m looking for a tool, or a technique to measure IT securi= ty? > > The baseline for security is CIA (Confidentiality, Integrity and=20 > Availability), that is every organization which want to called secure=20 > must be guarantee that their system comply this matter. > > But the problem is, we need a tool/technique to measure how secure are=20 > we. Therefore, wee need a tool/technique to measure how close that our=20 > system status now to CIA. > > Please share your experience about this matter. > > If there any link about this issue, I really appreciate if you share=20 > to us (You may contact me privately) . > > Best Regs, > > Toto >