Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: security not a big priority?

Subject: Re: security not a big priority?
Date: Thu, 15 Feb 2007 10:14:28 -0600

Francois,

Definitely DO NOT look for another job.  It sounds like you're being
presented with a huge opportunity.  I'd recommend implementing some sort
of HelpDesk or Priority list so that you can keep track of your tasks.
I'm not sure what you need the Network Engineers to do, however push
forward.  Apply pressure on their team to do their part. Try to identify
the steps involved in completing each task.  It may be easier to
complete one task if another is already resolved.  Your boss may not
know much about security, but frankly, he/she may not need to.  That's
what you're there for.  Step up to the plate and take control of the
situation.  Use your boss for guidance, but you should really take the
helm here.  It's been my experience that management support is key.  If
you can get the support of your boss and his/her peers, then they can
assist in getting the other teams to work with you.

Again, it sounds like a great opportunity and although it may be
overwhelming at first, persevere and you will be better for it.  Good
luck!


Kind Regards,


JMB



You're right it is overwhelming. The problem with the boss not
understanding how big of a deal this is, causes him not to give me
full support. And that's one of the problem.
You have to remember his roles is to support the network operations.
So his first priority is network operations.  And anything else like
security which requires redesigning the way things are done or making
them do things they never did before. (like following policies) is a
big challenge.  I've created a list of things that needed to be done
with their priority and even put comments on how it can affect us and
other things.  I need the other engineers to work on some projects.
Since I'm not the one who maintain the servers or services, I don't
want to try to make changes to the systems.  But yea, I'll just have
to keep bugging my boss about it.

--
If you think technology can solve your security problems, then you
don't understand the problems and you don't understand the technology.
Bruce Schneier

<Prev in Thread] Current Thread [Next in Thread>