Do you guys have to deal with these? I have no idea what I am doing but I will be in charge of the Network Audits. we have an internal Audit and the FDIC.
any suggestions on where to get info or how these nomaly work?
thanks, J :confused:
Printable View
Do you guys have to deal with these? I have no idea what I am doing but I will be in charge of the Network Audits. we have an internal Audit and the FDIC.
any suggestions on where to get info or how these nomaly work?
thanks, J :confused:
Check out my thread "Network Vulnerability Assessment".
Try not to overlook....DOCUMENTATION!!
To any decent auditor, lack of operational documentation is a great reason to score
you and/or your department low.
Disaster recovery processes in particular.
We do a ton of work for the Defense Logistics Agency. Their audits are tough..
Properly prepared documentation seems to paint more smiles on the suits than
anything else.
Although not often admitted, many in the infosec industry avoid correct documentation
operating under the guise that it de-values their expertise. I use it as a selling point.
I'll throw together a tutorial if enough show interest.
INTEREST SHOWN. Do it. :)
Jason1977 you keep asking about letting people use apps. like aim and online radio. I assume these are people at the bank you work at? As MsM has posted, look at your AUP and see if any of these apps. are allowed. As far as FDIC auditing is concerned, check out these pages for more info
http://www.ffiec.gov/ffiecinfobase/h...book_frame.htm
http://www.ffiec.gov/ffiecinfobase/h..._01.html#audit
http://www.ffiec.gov/ffiecinfobase/h...ges/it_01.html
As someone else stated, let us know which bank this is so I can look elswhere for my banking needs :p
Just kidding, the little money that I have is safe and sound in my freezer