Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Security Audit

What would someone need to do a complete security audit on a network from the inside and the outside? What kind of legal documents would I need and where can I find samples? Any good web sites?

Thanks for the reply.

Jacques

4 REPLIES
New Member

Re: Security Audit

I actually looked into that and couldn’t find too much information. It’s worthwhile using a third party on this to have someone from the outside do the audit. What legalities concern you?

New Member

Re: Security Audit

Hello Jacques, This sounds a lot like a system Certification and Accreditation that gov't organizations have to do on all of the sensitive systems.

There's a lot of "how to" type stuff at NIST:

http://csrc.nist.gov/

Good luck!!! Tom

New Member

Re: Security Audit

I've worked on several security audits (inside and outsite). I use what is called a "Get out of Jail" document that eliminates the liability that you might occure if in your audit you damage something. I also carry 1,000,000 insurance just in case. James Wilson jwilson@nmtg.com

New Member

Re: Security Audit

Start with the Site Security Handbook... RFC-2196

http://www.cis.ohio-state.edu/Services/rfc/rfc-text/rfc2196.txt

187
Views
0
Helpful
4
Replies
CreatePlease login to create content