Re: Is there any way to measure IT Security??

"Larry Marin (Irony Account)" <[email protected]> Thu, 28 Jul 2005 12:29:57 -0400
Newsgroups gmane.comp.security.penetration,gmane.comp.security.linux,gmane.comp.security.libnet,gmane.comp.security.basics
Message-ID <[email protected]>
You should check out NSA IAM/IEM Methodology...it works well for me.
http://www.iatrp.com/iam.cfm


Toto A Atmojo wrote:

> Dear all,
>
> Currently I=92m looking for a tool, or a technique to measure IT securi=
ty?
>
> The baseline for security is CIA (Confidentiality, Integrity and=20
> Availability), that is every organization which want to called secure=20
> must be guarantee that their system comply this matter.
>
> But the problem is, we need a tool/technique to measure how secure are=20
> we. Therefore, wee need a tool/technique to measure how close that our=20
> system status now to CIA.
>
> Please share your experience about this matter.
>
> If there any link about this issue, I really appreciate if you share=20
> to us (You may contact me privately) .
>
> Best Regs,
>
> Toto
>