Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [CISSP-D] REVIEW: "The Visible Ops Handbook", Kevin Behr/Gene Kim/George Spafford |
|---|---|
| Date: | Tue, 10 Apr 2007 11:59:37 -0800 |
BKVSOPHB.RVW 20070118 "The Visible Ops Handbook", Kevin Behr/Gene Kim/George Spafford, 2006, U$21.95, 0-9755686-1-2 %A Kevin Behr %A Gene Kim genek@tripwire.com %A George Spafford %C #104 - 2896 Crescent Ave, Eugene, OR 97408 %D 2006 %G 0-9755686-1-2 978-0-9755686-1-3 %I Information Technology Process Institute %O U$21.95 www.itpi.org 541-485-4051 info@itpi.org %O http://www.amazon.com/exec/obidos/ASIN/0975568612/robsladesinterne http://www.amazon.co.uk/exec/obidos/ASIN/0975568612/robsladesinte-21 %O http://www.amazon.ca/exec/obidos/ASIN/0975568612/robsladesin03-20 %O Audience s- Tech 1 Writing 1 (see revfaq.htm for explanation) %P 98 p. %T "The Visible Ops Handbook" The introduction notes that while many people see the need for process improvement, and that the ITIL (Information Technology Infrastructure Library) contains many "best practices," it is still difficult to know where to start, and to suggest what should be done in a given situation. The authors then go on to outline a study two of them conducted on the characteristics of "high performing" companies. They assert that the factors identified in the survey relate to three areas of the British Standard 15000 structure provided for the ITIL practices: release processes (planning and designing), control processes (particularly change management), and resolution processes (dealing with problems). Unfortunately, the authors have often chosen to describe their findings in terms of what does not work, rather than what does. There are also readability issues: the material seems almost to be written with an intent to impress the reader, rather than to clearly inform. Finally, it is far from obvious that the conclusions the book presents could assist organizations to improve. The problems described are common to immature and "chaotic" enterprises, and the text does not demonstrate whether the processes identified have made the associated companies good, or whether good companies use these processes once they have achieved maturity and stability. Chapter one suggests that you reduce unplanned changes to your systems, but is a little short on advice about how to accomplish this. There is a great deal of material on the symptoms of an organization that lacks planning structures rather than specifics of how to identify or deal with problems. A suggested agenda for a change advisory board is one useful item. You should inventory your systems, and then identity the ones that cause the most trouble, says chapter two. The third phase is to devise a system to manage the creation of software builds, and provide the company with standard software releases. Chapter four outlines a number of useful metrics for determining how well your organization is performing--at controlling the release of new and updated software that you write. If you create software, and particularly if you develop your own software and systems in-house, then it is a good idea to manage the process and ensure that changes are made properly. Therefore, the advice to do so is good. However, this booklet doesn't go much beyond that, and would be of rather limited use to most companies, even those that do a lot of their own development. copyright Robert M. Slade, 2007 BKVSOPHB.RVW 20070118 ====================== (quote inserted randomly by Pegasus Mailer) rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org Real joy comes not from ease or riches or from the praise of others, but from doing something worthwhile. - Wilfred Grenfell (1865 - 1940) Dictionary of Information Security www.syngress.com/catalog/?pid=4150 http://victoria.tc.ca/techrev/rms.htm Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/CISSP-Discuss/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/CISSP-Discuss/join (Yahoo! ID required) <*> To change settings via email: mailto:CISSP-Discuss-digest@yahoogroups.com mailto:CISSP-Discuss-fullfeatured@yahoogroups.com <*> To unsubscribe from this group, send an email to: CISSP-Discuss-unsubscribe@yahoogroups.com <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [CISSP-D] Shon Harris -- 3rd Edition, Aun Ali Motani |
|---|---|
| Next by Date: | [CISSP-D] REVIEW: "Information Insecurity", Eduardo Gelbstein/Ahmad Kamal, Rob, grandpa of Ryan, Trevor, Devon & Hannah |
| Previous by Thread: | [CISSP-D] REVIEW: "Botnets: The Killer Web App", Craig A. Schiller et al, Rob, grandpa of Ryan, Trevor, Devon & Hannah |
| Next by Thread: | [CISSP-D] REVIEW: "Information Insecurity", Eduardo Gelbstein/Ahmad Kamal, Rob, grandpa of Ryan, Trevor, Devon & Hannah |
| Indexes: | [Date] [Thread] [Top] [All Lists] |