Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Implementing segregation of duties in an account management process |
|---|---|
| Date: | 27 Jun 2005 13:45:34 -0000 |
Hi Andy,
you can one centrally maintained matrix of all services/permissions on
one side and all user on the other. you could develop some kind of an
html form to show this matrix and gives the manager the way request
permissions for his/her people. when a permission is requested it is
redirected to the owner of the target system. the owner is responsible
for granting the permission and updating the matrix.
i hope this was useful,
Regards
Khaled Nassar
Information Security Consultant
Secure Business Infrastructure (SBI)
www.sbi-secureit.com
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: Implementing segregation of duties in an account management process, Dimitrios Patsos |
|---|---|
| Next by Date: | OT: Review of CISSP Training Material, Saqib Ali |
| Previous by Thread: | Implementing segregation of duties in an account management process, Andrew Steingruebl |
| Next by Thread: | OT: Review of CISSP Training Material, Saqib Ali |
| Indexes: | [Date] [Thread] [Top] [All Lists] |