Educause Security Discussion mailing list archives

Re: Security Checklists or Scripts


From: "Holland II, Richard H" <rick.holland () UTDALLAS EDU>
Date: Thu, 15 Jan 2009 14:15:34 -0600

On 1/15/09 2:09 PM, "Brenda B Gombosky" <brenda.gombosky () LOUISVILLE EDU>
wrote:

I am interested in what others are using to check security of new servers
being placed in production -  Windows, Linux etc.  Are you using scripts or
checklists?  Thanks in advance!


Brenda B. Gombosky, CISSP, CISM, CHSP
Director, Enterprise Security
Information Technology
University of Louisville
Miller IT Center, Room 109
Louisville, KY 40292
(502)852-5037
(502)419-6689


We use the CIS Benchmarks scripts. They work really well and cover many of
the OSes that we run. They provide pdf documents as well as script scoring
tools.

http://www.cisecurity.org/


--
Rick Holland
rick {dot} holland {at} utdallas {dot} edu
Senior Information Security Analyst
The University of Texas at Dallas


Attachment: smime.p7s
Description:


Current thread: