Compliance and Power Users
by Steven W. Martinson, CISSP, CISM, CISA
Senior Consultant, SkyView Partners, Inc.
In the January 2011 newsletter, Compliance Resolutions for 2011, Carol Woodbury challenged you to make some compliance resolutions, so that you wouldn't have to scramble when notified of an upcoming audit.
Number 3 on Carol's list was to perform a system vulnerability assessment at least annually. This vulnerability assessment is essentially the first step in the compliance process.
One of the primary focus areas in a vulnerability assessment (and in many audits) is the configuration and activity of power users. Based on experiences helping clients with their compliance challenges, here are some things to keep in mind when reviewing and managing powerful user accounts on both your IBM i and AIX partitions. Let's look at some recommendations ... |
| High-profile attacks, inadequate defenses burden IT security programs
A plethora of high-profile data security breaches that marred the first half of 2011, and other recent high-profile attacks, such as Stuxnet, Operation Aurora and state-sponsored persistent threats, have dominated the discussion in the information security community.
|
Simple Isn't Simple
It's time to admit security is hard, and to stop blaming the victims for being human.
|
Setting the record straight on sudo
Vincent Danen takes exception to some of the criticisms regarding sudo as insecure and unfit for the enterprise.
Read the Complete Article |
