Full Disclosure mailing list archives
RE: perfect security architecture (network)
From: "Chuck Fullerton" <cfullerton () fullertoninfosec com>
Date: Wed, 10 Aug 2005 09:04:20 -0400
That is the exact attitude of "Perfect Security". If you have a small 10 person shop your not going to purchase a big identity management solution. Your going to spend a couple of hundred dollars to train you and your people how to create and use strong passwords effectively. EVERYONE in the industry must remember that ROI and TCO are king and queen. If you can't justify the expenditure for the protection, then it's not working. The only exception to this rule is that everyone must take those basic minimum steps to protect the systems under their control. Such as, firewalls, anti-virus, and updates. I do a lot of work with the "Forgotten Market" of Small and Medium Business. At this level ROI and TCO are critical to the success of the plan. Smaller companies don't have the capital to waste and recover from other areas like the large enterprises do. Chuck Fullerton -----Original Message----- From: C0BR4 [mailto:cobradead () gmail com] Sent: Wednesday, August 10, 2005 3:01 AM To: charles.heselton () gmail com Cc: Chuck Fullerton; full-disclosure () lists grok org uk Subject: Re: [Full-disclosure] perfect security architecture (network) Hi All, the point that i wanna make is "just make it simple".if i can work with what i got. why i have to invest???? . if no tool provides 100% security.why not invest little money in Awareness program. policy design and specially restrict user for unnecessary applications. thank you all for your valuable comments C0br4 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- perfect security architecture (network) C0BR4 (Aug 08)
- RE: perfect security architecture (network) Aditya Deshmukh (Aug 08)
- <Possible follow-ups>
- Re: perfect security architecture (network) Daniel H. Renner (Aug 08)
- RE: perfect security architecture (network) Charles Heselton (Aug 08)
- RE: perfect security architecture (network) Chuck Fullerton (Aug 08)
- RE: perfect security architecture (network) Charles Heselton (Aug 08)
- RE: perfect security architecture (network) Charles Heselton (Aug 09)
- Re: perfect security architecture (network) Aycan iRiCAN (Aug 09)
- Re: perfect security architecture (network) C0BR4 (Aug 10)
- RE: perfect security architecture (network) Chuck Fullerton (Aug 10)