RE: Looking For Security Metrics

How about looking at NIST for their checklists or CIS?
Maybe SANS have something specific for the platform/app you're using.
Is it like Sharepoint?

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of jmacaranas@xxxxxxxx
Sent: Wednesday, March 26, 2008 4:56 AM
To: david.durcsak@xxxxxxxxxxx; security-basics@xxxxxxxxxxxxxxxxxxxxxxx
Subject: RE: Looking For Security Metrics

openACS?

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of david.durcsak@xxxxxxxxxxx
Sent: Tuesday, March 25, 2008 1:27 PM
To: security-basics@xxxxxxxxxxxxxxxxxxxxxxx
Subject: Looking For Security Metrics

To all:

We are running a web based document sharing and collaborative
enviornment and don't have the security expertise/time in house to
develop a set of securiy metrics.

My thoughts right now are if someone had a list that they could share,
we could use those as a starting point for understanding what we need to
do.

Any help would be appreciated.

Cheers
Dave

-------------------------------------------------------------------------
-------------------------------
This message and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom it is
addressed. It may contain sensitive and private proprietary or legally
privileged information. No confidentiality or privilege is waived or
lost by any mistransmission. If you are not the intended recipient,
please immediately delete it and all copies of it from your system,
destroy any hard copies of it and notify the sender. You must not,
directly or indirectly, use, disclose, distribute, print, or copy any
part of this message if you are not the intended recipient.
FXDirectDealer, LLC reserves the right to monitor all e-mail
communications through its networks. Any views expressed in this
message are those of the individual sender, except where the
message states otherwise and the sender is authorized to state them.

Unless otherwise stated, any pricing information given in this message
is indicative only, is subject to change and does not constitute an
offer to deal at any price quoted. Any reference to the terms of
executed transactions should be treated as preliminary only and subject
to our formal confirmation. FXDirectDealer, LLC is not responsible for
any
recommendation, solicitation, offer or agreement or any information
about any transaction, customer account or account activity contained in
this communication.

Relevant Pages

  • Making big money...
    ... destroy any hard copies of it and notify the sender. ... part of this message if you are not the intended recipient. ... message states otherwise and the sender is authorized to state them. ... executed transactions should be treated as preliminary only and subject ...
    (Bugtraq)
  • RE: Looking For Security Metrics
    ... Subject: Looking For Security Metrics ... destroy any hard copies of it and notify the sender. ... part of this message if you are not the intended recipient. ... executed transactions should be treated as preliminary only and subject ...
    (Security-Basics)
  • RE: Port Monitoring Software
    ... If you are not the intended recipient, any disclosure, ... those of the sender, and do not necessarily reflect those of Abu Dhabi ... transmission and then immediately delete this transmission ... utilisation de cette information ou toute action prise sur la foi de ...
    (Security-Basics)
  • Re: Wubi.exe install on XP and other
    ... of this message if you are not the intended recipient. ... Any views expressed in this message are those of the individual sender, ... where the message states otherwise and the sender is authorised to state them to be ... the Registered Office is Trinity Court, 42 Trinity Square, London EC3N 4TH ...
    (Ubuntu)
  • Re: live cd that installs a bootloader
    ... of this message if you are not the intended recipient. ... Any views expressed in this message are those of the individual sender, ... where the message states otherwise and the sender is authorised to state them to be ... the Registered Office is Trinity Court, 42 Trinity Square, London EC3N 4TH ...
    (Ubuntu)