This represents the bulk of the cost effective security capabilities and facilitates better detection. Visibility to key areas and activities is vital. Effective monitoring to identify issues, breaches and attacks is necessary. This drives immediate interdiction by response capabilities. Efficient management of efforts to contain, repair and recover as needed to return the environment to normal operations is vital. This reduces losses by rapidly addressing issues and feeds intelligence into both the prediction and prevention areas (Defense in depth strategy optimizes security, 2008).
Personnel Resources
Personnel requirements to implement a defense in depth strategy are many. This process will include experts drawn from several different areas. The teams that are vital include:
emerging threats team- this cross functional team continuously discusses emerging trends and events in order to identify imminent threats that might be out there.
threat horizon team -- this team works to classify different attackers or threat agents in order to understand who likely to attach, with what methods and what their motivations are.
rapid risk assessment team -- this team meets often in order to track the large number of emerging vulnerabilities and determine what risk that they bring.
security center of excellence team -- this team evaluates products for security and privacy in use both internally...
Securing organizational information and the systems that are used to manage and transmit data has become a high profile function. Failure to secure information can have a severe impact on business credibility. Threats to an organization come in a variety of forms, for example from hacking, viruses, and simple human error. The types of threats change constantly, so management must sponsor, design, and implement business and technical processes to safeguard critical business assets (Service Management Functions: Security Management (Part 1), 2005).
References
Defense in depth strategy optimizes security. (2008). Retrieved from http://www.intel.com/it/pdf/Defense_In_Depth_Strategy_Optimizes_Security.pdf
Hazlewood, V. (2006). Defense-in-Depth. Retrieved from http://www.sdsc.edu/~victor/DefenseInDepthWhitePaper.pdfPerrin, C. (2008). Service Management Functions: Security Management (Part 1). (2005). Retrieved from http://www.windowsecurity.com/whitepapers/Service-Management-Functions-Security-Management-Part1.html
Understanding layered security and defense in depth. Retrieved from http://www.techrepublic.com/blog/security/understanding-layered-security-and-defense-in-depth/703
