Security Monitoring: Advanced Security Management
John Wylder · Auerbach Publications eBooks · 2003
In the evolution of an effective information security program, the first steps have to do with evaluating risks and setting policies. After that, there are numerous areas that the security professional moves into such as the implementation of an authentication scheme, e-mail protection (virus scanning, content filtering, etc.), and network protection strategies (firewalls, intrusion-detection systems, etc.). Another important part of this process involves testing the effectiveness of those steps and analyzing the results of those tests. Each of these steps produces a tremendous amount of information providing feedback that the security management team must analyze and react to over time.