Re: Security Standards

[Wim Remes <wremes () gmail com>]

you should also have a look at www.cisecurity.org. Their benchmarks are pretty good, NSA config guides are more up to 
date I would say.

Cheers,

W
On 06 Jan 2010, at 22:29, Boyd, Chad wrote:

> The baseline that we used were the NSA Security Configuration Guides:
> http://www.nsa.gov/ia/guidance/security_configuration_guides/operating_systems.shtml
>
> They do a great job of telling you what settings to change for various scenarios. These, of course, should be 
> modified to your environment, but these are a great jumping-off point.
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of s0h0us () yahoo com
> Sent: Wednesday, January 06, 2010 1:30 PM
> To: security-basics () securityfocus com
> Subject: Security Standards
>
> Hi,
> As part of a PCI-DSS risk assessment I need to come up with security standards for all of our critical network 
> devices, including windows servers. I've been directed to NIST publications and others but I'm finding that they are 
> general documents rather than specific ones regarding what settings need to be configured, i guess like a checklist. 
> can you recommend a site that might have them? i continue to search as i submit this posting...thanks! any 
> information is appreciated. happy new year!!!
>
>
> sOhO
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------