A Security Business Case for the Common Criteria对于常见的标准安全业务的案例.pptVIP

A Security Business Case for the Common Criteria Marty Ferris Ferris Associates, Inc. 202-234-9683 jmferris@ Outline Security Problem Overview Bounding a Moving Target Role of Standards Common Criteria Bound the Exposure Problem – Organizational Security Management Develop Policies and Standards Develop Operational Security Practices On-Going Assessment of Security Program Operational Security Practices Defining “Good Enough” Risk/Acceptability Model Security Program as Starting Place Ongoing assessment and refinement Marketplace dependence for IT Security Solutions Security Infras