Re: Statistics

From: Vishal (dhrakol_at_myrealbox.com)
Date: 11/25/03

  • Next message: Sarbjit Singh Gill: "RE: Managed OS?" 
    Date: Tue, 25 Nov 2003 00:23:06 -0500
To: Jack <security-basics@securityfocus.com>

    Hi Jack

    Monday, November 24, 2003, 10:57:12 AM, you wrote:

    JS> I often hear statistics bandied around like 85% of attacks are internal.
    JS> Can anyone point to a reliable/quotable source of stats? I'd like to prove
    JS> to my cynical managment that we are not safe behind the corporate
    JS> firewall...

    JS> Also, I'd be interested in stats on amout of money lost to fraud, downtime,
    JS> hacking, lack of DR etc.

    A good book you can use to talk to senior management was written by three
    security experts from Ernst & Young. It's called "Defending the digital
    frontier". Unlike most security books, this one aims at the people in the best
    position to influence security practice - management. EY is well-respected in
    the security field and their explanations are very useful in convincing
    higher-ups that security must be an integral part of their risk management
    strategies.

    Cheers, 

    -- 
Vishal
 
---------------------------------------------------------------------------
----------------------------------------------------------------------------
  • Next message: Sarbjit Singh Gill: "RE: Managed OS?"

    Relevant Pages

    • RE: googling an IP address
      ... Some website owners make their stats available on the site. ... are being spidered by Google along with all the other pages so when you ... search for an IP you may find it in the logfiles of these websites and see ... > Thinking About Security Training? ...
      (Security-Basics)
    • Re: AOM - Multiplayer
      ... "AoM Error Uploading Stats 2.4" ... Internet Explorer Q832894 is listed in their Control Panel / ... I suspect it might be a security setting, ...
      (microsoft.public.games)
    • Re: Is Wikipedia taking over the net?
      ... Have you seen their stats? ... someone will notice the lack of security soon: ... Mike ... Prev by Date: ...
      (alt.internet.search-engines)
    • RE: CISSP-ISSMP
      ... management say "that's nice", and move on. ... education, certification, experience, know-how, abilities, and ... Many 'security jobs' are nothing shy than that of an overly glorified ... Download FREE whitepaper on how a managed service ...
      (Pen-Test)
    • RE: security not a big priority?
      ... But I have found that upper management will only ... and push out the changes; management has to have this information to ... Network Security Engineer ... Network team with Project Management tasks. ...
      (Security-Basics)