40种不同风格的微软图表资料.ppt

Task Status Tracking Formal Workflow Expense Management Benefits Administration Account Planning Procurement Government Forms …. Enterprise Applications Department Applications Team Collaboration Dept. Vertical Workflow 5-10 users Solutions Landscape Department users Cross-enterprise users Formal Ad-hoc Team Department IT Enterprise IT Team Survey Status Report Issue Tracking …. Asset Mgmt Sales Reports Customer Service Healthcare Forms Project Mgmt … Case studies at /casestudies Risk Analysis By Asset Class Exploit of misconfiguration, buffer overflows, open shares, NetBIOS attacks Host Unauthenticated access to applications, unchecked memory allocations Application Compromise of integrity or privacy of accounts Account Unmanaged trusts enable movement among environments Trust Data sniffing on the wire, network fingerprinting Network Assets Operating Principles Mission and Vision Risk Based Decision Model Tactical Prioritization Components Of Risk Assessment Asset Threat Impact Vulnerability Mitigation Probability + = What are you trying toassess? What are you afraid of happening? What is the impact to the business? How could the threat occur? What is currently reducing the risk? How likely is the threat giventhe controls? Current Level of Risk What is the probability that the threat will overcome controls to successfully exploit the vulnerability and affect the asset? Operating Principles Mission and Vision Risk Based Decision Model Tactical Prioritization Risk Management Process And Roles 3 4 SecuritySolutions Initiatives Sustained Operations Cross-IT Teams Corporate Security Operating Principles Mission and Vision Risk Based Decision Model Tactical Prioritization Tactical Prioritization 1 PrioritizeRisks 2 Security Policy 5 Compliance Tactical PrioritizationBy Environment Operating Principles Mission and Vision Risk Based Decision Model Tactical Prioritization Policies and mitigation tactics appropriate for each environmen