[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ids
Subject:    RE: Industries Best practices
From:       "Gary Everekyan" <karo () onnik ! com>
Date:       2006-11-08 19:35:58
Message-ID: 002d01c7036d$1e6b1000$0201a8c0 () bluemonster
[Download RAW message or body]

Less is always better for legal reasons. Having said that...
Your best place to get any pertinent information will be dependent on the
vertical that the business is in.
I recommend to review all the regulatory requirements that you have to
consider before you look at general best practice that may recommended by
various vendors, ISO COBIT, COSO etc.
HTH  


Regards, 

Gary Everekyan

CISSP, CISM, CHS-III, ISSAP,ISSPCS, ITILp, MCSE, MCT 
Information Security and Audit
"High achievement always takes place in the framework of high expectation" -
Jack Kinder


-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of david.craigen@acs-inc.com
Sent: Wednesday, November 08, 2006 11:31 AM
To: focus-ids@securityfocus.com
Subject: Industries Best practices

My question today is
Is there an industry standard for retention of IDS logs? 

What is considered best practices for reviewing firewall logs.  Daily,
weekly, quarterly, etc.

Thanks for your assistance

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=in
tro_sfw
to learn more.
------------------------------------------------------------------------



------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------

[prev in list] [next in list] [prev in thread] [next in thread]