|
System Security
IPS is heavily involved in consulting in areas of computer data fraud, theft,
and sabotage investigations, recovery and abatement.
Issues Addressed by IPS
- threats and vulnerabilities
- safeguards, controls, and countermeasures
- information as a resource
- information security objectives
- security-related directives, laws, and guidelines
- roles and responsibilities
- generally accepted principles
- supporting security programs
- policy and procedures
- risk management (including certification & accreditation process)
- life cycle planning
- assurance
- personnel/user issues
- contingency/disaster planning
- incident handling
- security awareness, training, and education
- security in computer support and operations
- physical and environmental security
- malicious logic (prevention, detection, containment, eradication, and reporting)
- identification and authentication
- logical access control
- audit trails/logs
- cryptography
|
