Message-ID: <274928505050406444d459315 () mail gmail com>
Date: Wed, 4 May 2005 08:44:18 -0500
From: Bamm Visscher <bamm.visscher () gmail com>
Reply-To: Bamm Visscher <bamm.visscher () gmail com>
To: Jason Patel <patel1210 () yahoo com>
Subject: Re: Value of IDS, ROI
Cc: focus-ids () securityfocus com
In-Reply-To: <20050503181519.31414.qmail () www securityfocus com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <20050503181519.31414.qmail () www securityfocus com>
There is no calculating ROI for security (including IDS) [0]. A CIO
should be able to understand that. Security is about mitigating loss,
much like insurance. You should focus on explaining how your IDS
implementation will help protect the investment your company has made
in IT. An IDS should provide early warnings of a compromise and other
security events. It will also help you quickly determine the scope of
the event, escalate the activity to the correct departments, and the
data gathered will make the remediation effort more efficient.
Bammkkkk
[0] http://taosecurity.blogspot.com/2004/04/calculating-security-roi-is-was=
te-of.html
On 3 May 2005 18:15:19 -0000, Jason Patel <patel1210 () yahoo com> wrote:
=20
=20
I was wondering how big companies CIO show their executives Return of inv=
estment on IDS. What is the monitoring strategy for IDS alerts. I am trying=
to figure monitoring strategy and how to show my executive that how import=
ant job this is, but cant come up with a convincing solution. Anyhelp is hi=
ghly appreciated.
=20
Thanks,
=20
Jason
=20
-------------------------------------------------------------------------=
-
Test Your IDS
=20
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
-------------------------------------------------------------------------=
-
=20
=20
--=20
sguil - The Analyst Console for NSM
http://sguil.sf.net
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
Intro
