New answers tagged incident-response
Perhaps use one of: NIST Computer Security Incident Handling Guide SANS Security Incident Handling in Small Organizations ISO/IEC 27035:2011 Information technology — Security techniques — Information security incident management as a basis for your own policy/procedures.
Multi-failure tolerant systems are exactly that; Systems that are designed such that they can handle multiple failures through multiple/layered redundancies. You won't find a more detailed definition of this in any RFP, compliance, audit, due-diligence document as it's a general concept and will look different for every system/service. For those looking ...
Yes, there are many reason why you would want to have a complete audit trail of everything done on a given server (or everything you do on any server), and auditing is just a small fraction of it. Often information that later proves critical is only ever dumped to the console (not to any log file), and having a history to go look through can be very ...
Top 50 recent answers are included