Re: Is there any way to measure IT Security??

"Larry Marin (Irony Account)" <[email protected]> Thu, 28 Jul 2005 12:29:57 -0400

Newsgroups	gmane.comp.security.penetration,gmane.comp.security.linux,gmane.comp.security.libnet,gmane.comp.security.basics
Message-ID	<[email protected]>

You should check out NSA IAM/IEM Methodology...it works well for me.
http://www.iatrp.com/iam.cfm


Toto A Atmojo wrote:

> Dear all,
>
> Currently I’m looking for a tool, or a technique to measure IT security?
>
> The baseline for security is CIA (Confidentiality, Integrity and 
> Availability), that is every organization which want to called secure 
> must be guarantee that their system comply this matter.
>
> But the problem is, we need a tool/technique to measure how secure are 
> we. Therefore, wee need a tool/technique to measure how close that our 
> system status now to CIA.
>
> Please share your experience about this matter.
>
> If there any link about this issue, I really appreciate if you share 
> to us (You may contact me privately) .
>
> Best Regs,
>
> Toto
>