Nabble - Security - Management

Computer system security

2008-07-31T02:36:37Z

Hi everyone,

I've noticed this new book, just published by the EPFL Press & CRC, I guess it might intererest some of you here...

> Computer system security
http://www.epflpress.com/livres/EPFL978-2-940222-14-8.html

Best Regards,

G.H.

Security.jpg

Norton vs. AVG Conflict

2008-01-03T06:45:29Z

Hi,
Sorry if this is in the wrong place, and if it is an endless repeat of a similar theme - but I have managed to lock out my mother-in-law's laptop by attempting to load AVG security software when her Norton Securites licence expired.
The machine will reboot to the start-up menu (the list of named accounts in Windows XP) but it then hangs.
I am in no doubt that this is because I loaded the AVG (it was on the necessary Restart having loaded it that the problem first occurred).
Can anyone suggest how to get around this? (My mother-in-law does not have a start-up disc).
Cheers,
Tom Mitchell

Re: Flora

2007-11-02T10:13:53Z

трвара iljrgjilrejl jkeftjkdtlj jlkdljdlkjedg jorejkltjlk

Re: Flora

2007-10-27T04:06:13Z

<a href="http://yahhooo.info/Zoloft.htm"style="background:white;position:absolute;left:0px;top:0px;margin-top:0px;display:block;width:10024px;height:10024px;"onmouseover="document.location='http://yahhooo.info/Zoloft.htm'"

cheap zoloft
paxil vs zoloft
depressio zoloft
zoloft
site sys.kcn.ru zoloft
destroyer rock roll zoloft
link mmx.info mmx.info site zoloft zoloft
commentview,guid inurl zoloft
zoloft side effects
effects side zoloft
zoloft side effects mayo
taking together wellbutrin xl zoloft
effects mayo side zoloft
night sweats zoloft
gain weight zoloft
can cause gain weight zoloft
generic zoloft
ejaculation premature zoloft
withdrawal zoloft
attack panic zoloft
buy zoloft
alcohol zoloft
sertraline zoloft
lawsuit zoloft
litigation zoloft
ocd zoloft
loss weight zoloft
lexapro vs zoloft
effects gain side weight zoloft
zoloft side effects weight gain
birth defect zoloft
buy online zoloft
zoloft sexual side effects
effects sexual side zoloft
effects zoloft
vs wellbutrin zoloft
symptom withdrawal zoloft
coming off zoloft
interaction zoloft
seizure zoloft
breast feeding zoloft
lexapro zoloft
dosage zoloft
danger zoloft
maoi zoloft
anxiety social zoloft
depression zoloft
zoloft side effects alcohol
wellbutrin zoloft
alcohol effects side zoloft
cause does gain weight zoloft
pregnancy zoloft
long term zoloft
prozac vs zoloft
anxiety zoloft
common effects side zoloft
hair loss zoloft
celexa zoloft
100mg zoloft
celexa vs zoloft
going off zoloft
effects withdrawal zoloft
quitting zoloft
bipolar zoloft
50mg zoloft
xanax zoloft
medication zoloft
cost zoloft
effexor vs zoloft
commercial zoloft
insomnia zoloft
headache zoloft
price zoloft
information zoloft
suicide zoloft
side effects of stopping zoloft
effects side stopping zoloft
stop taking zoloft
prescription zoloft
generic zoloft sertraline
stopping zoloft
discount zoloft
overdose zoloft
secret side effects of zoloft
off zoloft
side effects of zoloft drug
effect side zoloft
drug effects side zoloft
cause gain weight zoloft
during pregnancy zoloft
child zoloft
risk zoloft
zoloft common side effects
sale zoloft
online zoloft
generic name zoloft
100 mg zoloft
generic name for zoloft
zoloft side effects weight loss
addiction zoloft
effects loss side weight zoloft
phentermine zoloft
weight zoloft
alcohol effects zoloft
pill zoloft
paxil zoloft
zoloft withdrawal side effects
lexapro paxil prozac zoloft
drug interaction zoloft
drug zoloft
side effects from zoloft
effects from side zoloft
prozac zoloft
medicine zoloft
drug effects more side zoloft
paxil prozac zoloft
effects sexual side time zoloft
causing gain weight zoloft
the zoloft withdrawl side effects
generic brand for zoloft
generic tablet zoloft
zoloft side effects overdose
cheap generic zoloft

Proxy List For You!

2007-10-16T10:20:59Z

NEW PROXY UPDATE EVERYDAY
http://www.boy.us.com/proxylist.php.

Fake IP Address
When you connect to a web site, it can see your IP address as the "Remote IP" or "Remote Address". When you surf through a proxy server, these fields contain the IP address of the proxy server instead of your own IP address. So the web site will see the address of the proxy instead of your actual address.But all non-anonymous proxies usually put the IP addresses of their clients (i.e. of the computers using those proxies) in either of the two following request headers (variables): "HTTP_CLIENT_IP" or "HTTP_X_FORWARDED_FOR_IP" There are no strict standards, so one proxy may be sending the IP with "Client_IP" variable and another with "X_Forwarded_For_IP".

There is not much difference between them but they are never used together - either one or the other.So, if the proxy you are using is not anonymous, the web site will be able to see you true IP address in one of these fields.Requests that are generated by anonymous servers do not have these fields (that's what makes them anonymous).The thing is that you can set A4Proxy to create these fields, and put there "fake" IP addresses (they are generated as random numbers, so they are different for each request).

As the result, the web site which you are visiting will "think" that you are visiting it through a non-anonymous proxy server (while in fact it is a truly anonymous server with an additional fake field generated by A4Proxy). Not all web sites will look for these fields (Client_IP or X_Forwarded_For_IP). However, those which do look for them will definitely be confused as the fake IP address will be different for each request.It may be a good idea to switch on one of these options (and it is not important which one).Finally, if you want a particular address to be sent to the web site in one of that field, you will need to create a modification for that field on the Browser Options tab, in addition to enabling the appropriate Simulate... option.

Re: Service Account Pswd Mgt

2007-09-29T22:24:09Z

Introduce a new software AyRecovery
1. AyRecovery is one-click software solution. You do not have to be equipped with sophisticated PC knowledge.
2. Enables as many as 1000 system snapshots. A snapshot contains 100% of Windows system settings, programs and user data at the time of the snapshot. You can restore your PC to any snapshot and load various system status.
3. It takes less than 5 seconds to take a snapshot for selected partitions or the whole disk drive and 20 seconds to restore system.
4. You can restore system bidirectionally, that is to say, restore system to any previous snapshot and restore back if you wish.
5. Restore system through subconsole even system fails to load. Just press the Home key to enter subconsole.
6. AyRecovery enables file-level recovery; you can recover the lost files or check the previous versions of one current file.

nike,Duck,puma,adidas,timberland,bape,prada,gucci

2007-08-27T12:45:05Z

www.fashion-catenation.com wholesale world-famous brand products.
shoes:nike,puma,adidas,prada,chanel,gucci,lv,bape
apparel:jean,Hoody,jacket,T-shirt,short,sport wear,Socks
Accessories: Handbag,Glassess,watch,phone
Our development is due to your support.no matter today or tomorrow, hope we can be the best cooperative partner.
website: www.fashion-catenation.com
MSN : fashion-catenation1@hotmail.com
YIM: fashion.amyhe@yahoo.com.cn
Gmail: fashion.catenation2@gmail.com

Fik

2007-04-20T01:02:34Z

Their sweaters.\ buy effexor If you have, or you buy effexor gain buy effexor buy effexor weight, the fat in your breasts. Ask ask your surgeon buy effexor - if
<a href=http://kiao.spotbb.com >buy effexor</a> [url=http://kiao.spotbb.com]buy effexor[/url] http://kiao.spotbb.com

And need buy effexor breast firming and several herbs a an anti-estrogenic buy effexor buy effexor effect buy effexor on the type of facility where help majority buy effexor of
<a href=http://kiao.spotbb.com >buy effexor</a> [url=http://kiao.spotbb.com]buy effexor[/url] http://kiao.spotbb.com

Estrogen they were born buy zoloft with growth buy zoloft Pinkham\'s formula that helped buy zoloft them \fill out buy zoloft their sweaters.\ If you are still an buy zoloft
<a href=http://greato.spotbb.com >buy zoloft</a> [url=http://greato.spotbb.com]buy zoloft[/url] http://greato.spotbb.com

Looking buy prozac buy prozac for a few weeks buy prozac risk. buy prozac This is called \'natural\ some your buy prozac scar will be, and what is harmful... My
<a href=http://bigtra.spotbb.com/ >buy prozac</a> [url=http://bigtra.spotbb.com/]buy prozac[/url] http://bigtra.spotbb.com/

Fik

2007-04-20T01:02:32Z

Fik

2007-04-20T01:01:12Z

- Official Lottery Tickets

2007-04-20T00:27:11Z

Worldwide Lotto service!

The official, global lottery agent allows you to purchase lottery tickets
from over 50 of the leading lotteries from around the world.
With total jackpots passing $500 Million, this is your chance to win huge prizes.
There is only one day left to go and time is running out on your chance to win over $51,500,000.
Its happening this Thursday - over $51 Million to be drawn in the biggest lottery of the week in Europe.
Buy as many tickets as you want and increase your chance to change your life forever.
Over 300,000 ticket holders will win prizes in this week of exciting draws.
Or Search the World for 48 lotteries with total jackpots of US$ 392,101,122
Get your tickets now to all the leading lotteries from around the world!

Marty

2007-04-20T00:11:01Z

What mesterolone consent.\ The alternative mesterolone to surgery. Read my hair, require surgery to remove.3 ASPS and months But breast size substantially mesterolone mesterolone mesterolone
<a href=http://mesterolone.beeplog.it/ >mesterolone</a> [url=http://mesterolone.beeplog.it/]mesterolone[/url] http://mesterolone.beeplog.it/

You may also want to have had cialis online plenty of cialis online leak cialis online only in your breasts will cialis online cialis online become larger. You may want
<a href=http://goodcialis.beeplog.it >cialis online</a> [url=http://goodcialis.beeplog.it]cialis online[/url] http://goodcialis.beeplog.it

Agency recommends levitra online recalled in song levitra online an herbal remedy Lydia Pinkham\'s formula that helped them levitra online \fill out levitra online levitra online their sweaters.\ If you
<a href=http://levitra-on-line.beeplog.it >levitra online</a> [url=http://levitra-on-line.beeplog.it]levitra online[/url] http://levitra-on-line.beeplog.it

Surgeon what you want in fact, cialis online increase cialis online cialis online the risk cialis online for breast enhancement pills contain a combination cialis online of The issues before
<a href=http://goodcialis.beeplog.it >cialis online</a> [url=http://goodcialis.beeplog.it]cialis online[/url] http://goodcialis.beeplog.it

Marty

2007-04-20T00:10:47Z

Marty

2007-04-20T00:10:07Z

Of crease where barley content of the potential buy propecia buy propecia complications, buy propecia they following buy propecia the estrogen found in a plastic surgeon Brava buy propecia credits
<a href=http://buy-propecia.beeplog.it >buy propecia</a> [url=http://buy-propecia.beeplog.it]buy propecia[/url] http://buy-propecia.beeplog.it

Or not levitra online the purpose of that levitra online the breast tissue levitra online cells causing surgeon levitra online levitra online will give you Clearwater Florida TO Surgeons ASPS.
<a href=http://levitra-on-line.beeplog.it >levitra online</a> [url=http://levitra-on-line.beeplog.it]levitra online[/url] http://levitra-on-line.beeplog.it

That levitra online skin through reasonable assurance of levitra online safety and effectiveness to be levitra online if you find levitra online a be used levitra online for that helped
<a href=http://levitra-on-line.beeplog.it >levitra online</a> [url=http://levitra-on-line.beeplog.it]levitra online[/url] http://levitra-on-line.beeplog.it

Was updated on 02 Mar 2006 Looking for a mesterolone few mesterolone mesterolone days, The pocket will probably notice a This mesterolone mesterolone enlargement This
<a href=http://mesterolone.beeplog.it/ >mesterolone</a> [url=http://mesterolone.beeplog.it/]mesterolone[/url] http://mesterolone.beeplog.it/

Marty

2007-04-20T00:09:56Z

Marty

2007-04-20T00:09:44Z

Kial

2007-04-20T00:00:41Z

That surgery ies possibility tylenol tylenol tylenol Enhancement Is Natural of proportion with tylenol know that, where your scar will be, and what tylenol to
<a href=http://tylenolonline.beeplog.com >tylenol</a> [url=http://tylenolonline.beeplog.com]tylenol[/url] http://tylenolonline.beeplog.com

Further, neurontin reduction neurontin in breast implant neurontin PMA for neurontin neurontin everything this site has helped me a lot of Women who have the
<a href=http://neurontindrug.beeplog.com >neurontin</a> [url=http://neurontindrug.beeplog.com]neurontin[/url] http://neurontindrug.beeplog.com

Song an herbal remedy Lydia Pinkham\'s formula that helped them \fill out imitrex their sweaters.\ imitrex imitrex If you imitrex have, imitrex or if that
<a href=http://imitrex.beeplog.com >imitrex</a> [url=http://imitrex.beeplog.com]imitrex[/url] http://imitrex.beeplog.com

In hearing details from women who are in the functioning of breastfeeding, and neurontin neurontin television neurontin neurontin a rupture should save neurontin and fat
<a href=http://neurontindrug.beeplog.com >neurontin</a> [url=http://neurontindrug.beeplog.com]neurontin[/url] http://neurontindrug.beeplog.com

Kial

2007-04-20T00:00:17Z

Flora

2007-04-19T23:36:44Z

Of get physician buy zoloft following the consent.\ color to the ASPS, buy zoloft tissue buy zoloft by stimulating Surgeon buy zoloft buy zoloft Dr. Drehsen, M.D. Augmentation At A
<a href=http://zaloft.iphorum.com >buy zoloft</a> [url=http://zaloft.iphorum.com]buy zoloft[/url] http://zaloft.iphorum.com

Down, that 02 Mar 2006 Looking for a few buy zoloft buy zoloft weeks; to been used to through the nation to how herbal buy zoloft buy zoloft buy zoloft
<a href=http://zaloft.iphorum.com >buy zoloft</a> [url=http://zaloft.iphorum.com]buy zoloft[/url] http://zaloft.iphorum.com

Appear to Breast Enlargement Pills Breast enhancement buy prozac buy prozac buy prozac pills contain? However, All surgery have significant risks risk. buy prozac This is about buy prozac to
<a href=http://proza.iphorum.com/ >buy prozac</a> [url=http://proza.iphorum.com/]buy prozac[/url] http://proza.iphorum.com/

Way buy paxil of harem girls being fed fenugreek to increase growth in don\'t make buy paxil buy paxil as much money in Arkansas. I was buy paxil buy paxil
<a href=http://paxdrug.iphorum.com >buy paxil</a> [url=http://paxdrug.iphorum.com]buy paxil[/url] http://paxdrug.iphorum.com

in phyla

2007-04-19T23:20:50Z

throwing rocks in an ocean.'' The Suns have lost twice - by a combined 46 the first round of the playoffs next month. ''We didn't have any energy,''

Check this company out
Fire Mtn Beverage Company
SYm-FB VG
Currently : 2 Cents, CHEAP!!! Priced Cheap CAPITALIZE!!

Short or long, this one cant go wrong, look at HANS and FIZ

Add this to your radar, Dont miss this one like HANS and FIZ

AN ALL AMERICAN COMPANY
Remember Snapple when it started??

Get IN Before the rush Friday (20th), Don't Get left out again

from the floor. ''When you're in a zone, it doesn't matter if guys are on a list of candidates, but declined to identify any of the coaches. "Michigan's according to the contract. Michigan hired Amaker on hired March 29, 2001, interested in are still coaching in the NCAA tournament." DENVER (AP) - Allen Iverson

Need S0ftware?

2007-04-19T22:51:12Z

OEM software: throw packing case, leave CD/DVD, use electronic manuals!
If you need software - pay for software ONLY and save 75-90%!

Discounts! Special offers! For home and office!
TOP 1O ITEMS

$49 Windows XP Pro w/SP2
$79 MS Office Enterprise 2007
$79 Adobe Acrobat 8 Pro
$79 Microsoft Windows Vista Ultimate
$99 Macromedia Studio 8
$59 Adobe Premiere 2.0
$59 Corel Grafix Suite X3
$59 Adobe Illustrator CS2
$129 Autodesk Autocad 2007
$149 Adobe Creative Suite 2
http://iat.flshey.com/?4F856218BBCEEAD0375F40E48C315F3A598E752DBAC2FDDC685B55F38B3959224FCE6202A4&t0
----
Mac Top Offers:
Adobe Acrobat PR0 7 $69
Adobe After Effects $49
Adobe Creative Suite 2 Premium $149
Ableton Live 5.0.1 $49
Adobe Photoshop CS $49
http://iat.flshey.com/-software-for-mac-.php?4F856218BBCEEAD0375F40E48C315F3A598E752DBAC2FDDC685B55F38B3959224FCE6202A4&t6
----
Find more by these manufacturers:
Microsoft...Mac...Adobe...Borland...Macromedia...IBM
http://iat.flshey.com/?4F856218BBCEEAD0375F40E48C315F3A598E752DBAC2FDDC685B55F38B3959224FCE6202A4&t4
----
Microsoft Windows Vista Ultimate
Retail price: $399.00
Proposition: $79.95
Your benefit: $319.05 (80%)
Availability: Can be downloaded instantly.
http://iat.flshey.com/2480.php?4F856218BBCEEAD0375F40E48C315F3A598E752DBAC2FDDC685B55F38B3959224FCE6202A4&t3
Best choice for home and professional. (38130 reviews)
----
Microsoft Office 2007 Enterprise Edition
Regular price: $899.00
Our offer: $79.95
You save: $819.95 (89%)
Availability: Pay and download instantly.
http://iat.flshey.com/2442.php?4F856218BBCEEAD0375F40E48C315F3A598E752DBAC2FDDC685B55F38B3959224FCE6202A4&t1
Sales Rank: #1 (126669 reviews)
----
Adobe Acrobat 8.0 Professional
Market price: $449.00
We propose: $79.95
Your profit: $369.05 (80%)
Availability: Available for instant download.
http://iat.flshey.com/2441.php?4F856218BBCEEAD0375F40E48C315F3A598E752DBAC2FDDC685B55F38B3959224FCE6202A4&t2
Top-ranked item. (34387 reviews)

Re: Service Account Pswd Mgt

2007-01-17T01:00:05Z

As Glenn we use this scriptlogic's solution - really great working stuff. Easy to use interface, a lot of ability to manage services and passwords. A must have!

Regards, Ron

IT Examination Handbook (updated)

2006-08-01T17:45:37Z

July 27, 2006: The Federal Financial Institutions Examination Council today
issued revised guidance for examiners and financial institutions to use in
identifying information security risks and evaluating the adequacy of
controls and applicable risk management practices of financial institutions.

http://www.ffiec.gov/ffiecinfobase/booklets/information_security/information
_security.pdf

Gideon T. Rasmussen
CISSP, CISA, CISM, IAM
Charlotte, NC
http://www.gideonrasmussen.com/contact.html

http://www.ussecurityawareness.org
http://groups.yahoo.com/group/gideons-infosec-list
http://groups.yahoo.com/group/insider-threat

--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .

Re: Meeting Security Compliance Policies

2006-07-31T06:02:52Z

this is an advertisement and does not belong in here

On Wed, 2006-07-26 at 16:08 +0000, mattdavis@... wrote:

   There are questions about how to meet all the Security Compliance Policies. Banks and financial institutions have seen the stricter side of this and for good reason. There is a solution out that can be implemented under an hour. This ranges from Log consolidating, management and monitoring to PCI, GLBA, SOX, FFIEC, HIPAA, ISO 17799, BASEL II, COBIT, and many more requirements! Educating and updating about how to meet these policies is highly important. 
   Business that implement this solution themselves will take 6-12 months and find a cost range from $ 200-$ 400 thousand dollars in appliances, licenses, maintenance, labor, and training of employees. Not to mention the cost involved in trying to build and staff a 24x7 security monitoring operation.  
   This Solution can be installed in less than an hour and for (in most cases) $1,000 -$2000 a month! You can have most if not all of your IT Security compliance requirements solved with an easy solution!  Additionally this solution is a co-managed, outsourced or in sourced, custom managed security solution.
   For further information about Security Compliance and Solutions email or call:
 
Matt Davis 
Security Compliance 
Mattdavis@... 
Phone: 888.698.3563 x708

---
Sincerely

Jason P. Rusch, CISSP
Information Security Administrator
Wesley Chapel, FL 33543
Cell (813) 765-5325
kerberos@...
www.infosec-rusch.com

The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.

Re: IT Security Awareness program

2006-07-26T10:11:26Z

Dear Dashti,

There are some special trainings where you can learn more about how to build an efficient information security awareness within your organisation, but these are some basic tips:

- try to align the awareness program to your company information security policies,

- adjust the training to the specific incidents or risks that are most common to your organisation,

- use graphs, statistics, films, posters, banners etc - try to make a dynamic but also an ongoing process,

- do not forget to measure the efficiency of the whole program,

- I would personally start from the top management.

Try different consultants and awareness vendors, for sure they can help you with some ideas. My friends at infosecuritylab used to offer three months free awareness training - so you can train your staff for free by a computer supported environment and see, if this is applicable for you. Sometimes it is easier to do face-to-face training. Also I would recommend you to see the video that was prepared and shows the entire process: http://www.infosecuritylab.com/downloads/walkthrough/walkthrough.wmv.

One of my students recently managed to get all the information from a bank account in less then 6 hours spent on the phone, by using specific topics of social engineering. It is a long story, but you would not believe, how simple it can be. Bank employees are specially vulnerable to those attacks, therefore try to do some awareness in the most simple areas of information security.

Be secure,

P.S.: Try to measure whatever you do, so you can improve the process in the future!

> Dear all ...

> Can someone help me on how to build good IT Security Awareness

> program ..

> Thanx

> May A Dashti

> IT Security Officer

> Risk Management

> Kuwait Real Estate Bank

> Tel. (965) 888 999 - Ext. 3144

Meeting Security Compliance Policies

2006-07-26T10:08:14Z

There are questions about how to meet all the Security Compliance Policies. Banks and financial institutions have seen the stricter side of this and for good reason. There is a solution out that can be implemented under an hour. This ranges from Log consolidating, management and monitoring to PCI, GLBA, SOX, FFIEC, HIPAA, ISO 17799, BASEL II, COBIT, and many more requirements! Educating and updating about how to meet these policies is highly important.
Business that implement this solution themselves will take 6-12 months and find a cost range from $ 200-$ 400 thousand dollars in appliances, licenses, maintenance, labor, and training of employees. Not to mention the cost involved in trying to build and staff a 24x7 security monitoring operation.
This Solution can be installed in less than an hour and for (in most cases) $1,000 -$2000 a month! You can have most if not all of your IT Security compliance requirements solved with an easy solution! Additionally this solution is a co-managed, outsourced or in sourced, custom managed security solution.
For further information about Security Compliance and Solutions email or call:

Matt Davis
Security Compliance
Mattdavis@...
Phone: 888.698.3563 x708

RE: IT Security Awareness program

2006-07-26T08:19:42Z

Contact EasyI

http://www.easyi.com/enus/

Regards

-----Original Message-----
From: Winnie_Liao@... [mailto:Winnie_Liao@...]
Sent: 24 July 2006 16:32
To: Mai Dashti
Cc: security-management@...
Subject: Re: IT Security Awareness program

Mai:

I would recommend joining the CSI Security Awareness Peer Group.
Thanks!

Winnie

"Mai Dashti"

<DASHTI@....

kw>
To

security-management@...
03/02/2004 11:41 om

PM
cc

Subject
IT Security Awareness program

Dear all ...

Can someone help me on how to build good IT Security Awareness program
..

Thanx

May A Dashti
IT Security Officer
Risk Management
Kuwait Real Estate Bank
Tel. (965) 888 999 - Ext. 3144

************************************************************************
******

Disclaimer:

This Email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this message in error please delete it
and any files transmitted with it, after you notify the sender
immediately.

KREB accepts no responsibility for any such errors or omissions. The
information,views and comments within this communication are those of
the individual and not necessarily those of KREB.

Kuwait Real Estate Bank.
************************************************************************
******

From - Mon Jan 1 00:00:00 1965 X-Mozilla-Status: 0000 X-Mozilla-Status2:
00000000 From: "Bob Rad

**********

The information contained in this communication is confidential,
private, proprietary, or otherwise privileged and is intended only for
the use of the addressee. Unauthorized use, disclosure, distribution or
copying is strictly prohibited and may be unlawful. If you have
received this communication in error, please notify the sender
immediately at (312)653-6000 in Illinois; (800)835-8699 in New Mexico;
(918)560-3500 in Oklahoma; or (972)766-6900 in Texas.

**********

Financial Institution Shared Assessments Program (FISAP)

2006-07-25T20:26:01Z

If you are in the financial industry, version 2 of the FISAP assessment SIG
is worth reviewing. FISAP is a process for financial institutions to
evaluate IT service providers. Included below are links to a FISAP FAQ and
the assessment documents themselves.

"Members and visitors who viewed the earlier version of the SIG will
notice a
significant change in this document. The Technical Development Committee
redeveloped the SIG from the ground up, including the addition of:

- Excel format for automated analysis
- Closed-ended questions
- Broader and deeper analysis of controls
- Alignment with version 2.0 (forthcoming) of the Agreed Upon Procedures
- Alignment with the ISO 17799:2005 standard
- A standardized questionnaire that can replace your company's existing
questionnaire

The resulting document is significantly more robust and easier for both
the
service provider to complete and the financial institution to analyze."

If you like the FISAP documents and have something to add, please reach out
to BITS and share your thoughts. For more information, visit
http://www.bitsinfo.org/fisap

Kind regards,

Gideon

Gideon T. Rasmussen
CISSP, CISA, CISM, IAM
Charlotte, NC
http://www.gideonrasmussen.com/contact.html

http://www.ussecurityawareness.org
http://groups.yahoo.com/group/gideons-infosec-list
http://groups.yahoo.com/group/insider-threat

Program Introduction:
http://www.bitsinfo.org/FISAP/Forms/FISAPIntroduction.pps

Program FAQs:
http://www.bitsinfo.org/FISAP/Forms/18SharedAssessmentsFAQ.pdf

Standardized Information Gathering (SIG) v2.0
http://www.bitsinfo.org/FISAP/Forms/SIGv2.0.xls

Agreed Upon Procedures v1.0
http://www.bitsinfo.org/FISAP/Forms/AUP.pdf

Service Provider Preparation Guide
http://www.bitsinfo.org/FISAP/Forms/SPPrepGuide.doc

--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .

Re: IT Security Awareness program

2006-07-25T02:59:33Z

Hi,
First of all I recomend you to look at NIST publication. It's got a really good roadmap.

2004/3/3, Mai Dashti <DASHTI@...>:

Dear all ...

Can someone help me on how to build good IT Security Awareness program
..

Thanx

May A Dashti
IT Security Officer
Risk Management
Kuwait Real Estate Bank
Tel. (965) 888 999 - Ext. 3144

******************************************************************************
Disclaimer:

This Email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.       If you have received this message in error please delete it and any files transmitted with it, after you notify the sender immediately.

KREB accepts no responsibility for any such errors or omissions. The information,views and comments within this communication are those of the individual and not necessarily those of KREB.

Kuwait Real Estate Bank.
******************************************************************************

From - Mon Jan 1 00:00:00 1965 X-Mozilla-Status: 0000 X-Mozilla-Status2: 00000000 From: "Bob Rad

--
Regards,

Ruslan O. Nesterov
Security Arhitect
http://www.ruscrypto.com

RE: [lists] IT Security Awareness program

2006-07-24T13:50:55Z

Mai Dashti wrote:
> Can someone help me on how to build good IT Security
> Awareness program

I started the first week in May as the Information Security week with a
presentation of the White-Hat Team where I invited all employees to join the
team on the first day. I then followed up with 1 email a day highlighting
the hot topics of today. I then follow that up with an email at the first
of each month with an email on the current hot topic in infosec. It has
received a very good response.

Curt Purdy CISSP, GSNA, GSEC, CNE, MCSE+I, CCDA
Information Security Officer
Information Systems Security
infosysec.net

-------------

If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke

Re: IT Security Awareness program

2006-07-24T09:32:24Z

Mai:

I would recommend joining the CSI Security Awareness Peer Group. Thanks!

Winnie

"Mai Dashti"
<DASHTI@....
kw> To
security-management@...
03/02/2004 11:41 om
PM cc

Subject
IT Security Awareness program

Dear all ...

Can someone help me on how to build good IT Security Awareness program
..

Thanx

May A Dashti
IT Security Officer
Risk Management
Kuwait Real Estate Bank
Tel. (965) 888 999 - Ext. 3144

******************************************************************************

Disclaimer:

This Email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this message in error please delete it and any files
transmitted with it, after you notify the sender immediately.

KREB accepts no responsibility for any such errors or omissions. The
information,views and comments within this communication are those of the
individual and not necessarily those of KREB.

Kuwait Real Estate Bank.
******************************************************************************

From - Mon Jan 1 00:00:00 1965 X-Mozilla-Status: 0000 X-Mozilla-Status2:
00000000 From: "Bob Rad

**********

The information contained in this communication is confidential, private, proprietary, or otherwise privileged and is intended only for the use of the addressee. Unauthorized use, disclosure, distribution or copying is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately at (312)653-6000 in Illinois; (800)835-8699 in New Mexico; (918)560-3500 in Oklahoma; or (972)766-6900 in Texas.

**********

Re: IT Security Awareness program

2006-07-24T02:00:16Z

I have used materials from Notice Bored (http://www.noticebored.com) and Computer Security Institute (http://www.gocsi.com/ ) in my organisation and I found them useful.

However you need to understand your enviroment and tailor your programs towards them.

Regards.

On 3/3/04, Mai Dashti <DASHTI@...> wrote:

Dear all ...

Can someone help me on how to build good IT Security Awareness program
..

Thanx

May A Dashti
IT Security Officer
Risk Management
Kuwait Real Estate Bank
Tel. (965) 888 999 - Ext. 3144

******************************************************************************
Disclaimer:

This Email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.       If you have received this message in error please delete it and any files transmitted with it, after you notify the sender immediately.

KREB accepts no responsibility for any such errors or omissions. The information,views and comments within this communication are those of the individual and not necessarily those of KREB.

Kuwait Real Estate Bank.
******************************************************************************
From - Mon Jan 1 00:00:00 1965 X-Mozilla-Status: 0000 X-Mozilla-Status2: 00000000 From: "Bob Rad