Re: Couple of security questions



I dont think there is a metric on how many intrusion detection analysts should be. You can estimate the number based on some factors like: The monitoring crew will work shifts 24/7 or normal 8 hours day?
You will have real time alerts or analyze the alerts output from a database?
Also the server's number its not as important as the number of alerts per hour the analysts have to validate.

Regards,
Revnic Vasile

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------