Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: security not a big priority? |
|---|---|
| Date: | Thu, 15 Feb 2007 10:14:28 -0600 |
Francois,
Definitely DO NOT look for another job. It sounds like you're being presented with a huge opportunity. I'd recommend implementing some sort of HelpDesk or Priority list so that you can keep track of your tasks. I'm not sure what you need the Network Engineers to do, however push forward. Apply pressure on their team to do their part. Try to identify the steps involved in completing each task. It may be easier to complete one task if another is already resolved. Your boss may not know much about security, but frankly, he/she may not need to. That's what you're there for. Step up to the plate and take control of the situation. Use your boss for guidance, but you should really take the helm here. It's been my experience that management support is key. If you can get the support of your boss and his/her peers, then they can assist in getting the other teams to work with you.
Again, it sounds like a great opportunity and although it may be overwhelming at first, persevere and you will be better for it. Good luck!
Kind Regards,
JMB
You're right it is overwhelming. The problem with the boss not understanding how big of a deal this is, causes him not to give me full support. And that's one of the problem. You have to remember his roles is to support the network operations. So his first priority is network operations. And anything else like security which requires redesigning the way things are done or making them do things they never did before. (like following policies) is a big challenge. I've created a list of things that needed to be done with their priority and even put comments on how it can affect us and other things. I need the other engineers to work on some projects. Since I'm not the one who maintain the servers or services, I don't want to try to make changes to the systems. But yea, I'll just have to keep bugging my boss about it.
-- If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology. Bruce Schneier
| Previous by Date: | RE: Discovering network topology, David Rosenhan |
|---|---|
| Next by Date: | Re: Discovering network topology, Kurt Buff |
| Previous by Thread: | RE: security not a big priority?, jbeauford |
| Next by Thread: | Re: security not a big priority?, Brian Loe |
| Indexes: | [Date] [Thread] [Top] [All Lists] |