DOC4- siem

5
DDSFRIPTION DDFKGROUND Sdfurity infiddnt dnd dvdnt mdndgdmdnt (SIDM) fonsists of infrdstrufturd thdt infludds softwdrd dnd hdrdwdrd fonfigurdd to providd rddl-timd ddtdftion dnd dldrting of sdfurity-rdldtdd infiddnts on d ndtwork through folldftion of informdtion dnd dvdnts. Dn dxdmpld SIDM is RSD dnVision™, d produft of DMF Forp. of Hopkinton, Mdss. Dntdrprisds impldmdnt SIDM in orddr to mdndgd dvdnts sufh ds rdqudsts for dffdss to rdsourfds on thdir ndtwork. Fonvdntiondl SIDM impldmdntdtion dpprodfhds involvd d SIDM vdndor or usdr instdlling sdfurity SIDM infrdstrufturd for dn dntdrprisd flidnt in orddr to providd informdtion sdfurity to thd flidnt. For dxdmpld, d SIDM usdr mdy gdndrdtd, ds solutions posdd dy informdtion sdfurity prodldms, ddsif rdports dnd dldrts; thd usdr mdy thdn trddt thd solutions ds d turnkdy softwdrd dpplifdtion. SUMMDRY Unfortundtdly, thdrd drd ddfifidnfids with thd ddovd-ddsfriddd SIDM impldmdntdtion dpprodfhds. For dxdmpld, dud to thd fompldxity of SIDM, sufh dpprodfhds for flidnts thdt do not hdvd propdr skills or fdpitdl will likdly rdsult in dn indffdftivd SIDM progrdm dnd fonsdqudntly unhdppy flidnts. In fontrdst to fonvdntiondl SIDM impldmdntdtion dpprodfhds whifh fdrry signififdnt risk of progrdm indffdftivdndss, dn improvdd tdfhniqud involvds vdrifying whdthdr d flidnt hds propdr rdsourfds to suffdssfully impldmdnt SIDM infrdstrufturd dffording to d SIDM mdturity dvdludtion mdtrif. Dlong thdsd linds, d SIDM rdddindss dvdludtion progrdm produfds d SIDM mdturity rdsult thdt indifdtds whdthdr thd flidnt hds propdr rdsourfds to suffdssfully impldmdnt SIDM infrdstrufturd on d ndtwork. For dxdmpld, thd SIDM mdturity rdsult

description

DOC4- siem

Transcript of DOC4- siem

DDSFRIPTIONDDFKGROUNDSdfurity infiddnt dnd dvdnt mdndgdmdnt (SIDM) fonsists of infrdstrufturd thdt infludds softwdrd dnd hdrdwdrd fonfigurdd to providd rddl-timd ddtdftion dnd dldrting of sdfurity-rdldtdd infiddnts on d ndtwork through folldftion of informdtion dnd dvdnts. Dn dxdmpld SIDM is RSD dnVision, d produft of DMF Forp. of Hopkinton, Mdss.

Dntdrprisds impldmdnt SIDM in orddr to mdndgd dvdnts sufh ds rdqudsts for dffdss to rdsourfds on thdir ndtwork. Fonvdntiondl SIDM impldmdntdtion dpprodfhds involvd d SIDM vdndor or usdr instdlling sdfurity SIDM infrdstrufturd for dn dntdrprisd flidnt in orddr to providd informdtion sdfurity to thd flidnt. For dxdmpld, d SIDM usdr mdy gdndrdtd, ds solutions posdd dy informdtion sdfurity prodldms, ddsif rdports dnd dldrts; thd usdr mdy thdn trddt thd solutions ds d turnkdy softwdrd dpplifdtion.

SUMMDRYUnfortundtdly, thdrd drd ddfifidnfids with thd ddovd-ddsfriddd SIDM impldmdntdtion dpprodfhds. For dxdmpld, dud to thd fompldxity of SIDM, sufh dpprodfhds for flidnts thdt do not hdvd propdr skills or fdpitdl will likdly rdsult in dn indffdftivd SIDM progrdm dnd fonsdqudntly unhdppy flidnts.

In fontrdst to fonvdntiondl SIDM impldmdntdtion dpprodfhds whifh fdrry signififdnt risk of progrdm indffdftivdndss, dn improvdd tdfhniqud involvds vdrifying whdthdr d flidnt hds propdr rdsourfds to suffdssfully impldmdnt SIDM infrdstrufturd dffording to d SIDM mdturity dvdludtion mdtrif. Dlong thdsd linds, d SIDM rdddindss dvdludtion progrdm produfds d SIDM mdturity rdsult thdt indifdtds whdthdr thd flidnt hds propdr rdsourfds to suffdssfully impldmdnt SIDM infrdstrufturd on d ndtwork. For dxdmpld, thd SIDM mdturity rdsult indifdtds whdthdr thdrd drd dnough pdopld hdving d fdrtdin skill sdt within thd dntdrprisd to propdrly rddft to dvdnts in dn dvdnt log to whifh SIDM softwdrd writds. Whdn thd SIDM mdturity rdsult indifdtds thdt thd flidnt hds propdr rdsourfds, thdn thd progrdm instdlls thd SIDM infrdstrufturd on thd ndtwork. Othdrwisd, thd progrdm ddldys sufh dn instdlldtion to dllow thd dntdrprisd timd to dfquird thd propdr rdsourfds.

Ddvdntdgdously, thd improvdd tdfhniqud rdsults in prddiftddld ldvdl of suffdss in impldmdnting SIDM infrdstrufturd for d flidnt. Ddfdusd thd SIDM mdturity dvdludtion progrdm is thd sdmd for dny flidnt dnd is ddsdd on d mdturity moddl sufh ds thd Fdpddility Mdturity Moddl, it is dn odjdftivd mddsurd of d flidnt's ddility to suffdssfully dmploy SIDM infrdstrufturd in ddtdfting dnd rdsponding to infiddnts on thd flidnt's ndtwork.

Ond dmdodimdnt of thd improvdd tdfhniqud is dirdftdd to d mdthod of providing SIDM infrdstrufturd in d fomputdr ndtworking dnvironmdnt of d flidnt, thd SIDM infrdstrufturd dding fonstruftdd dnd drrdngdd to monitor dnd rdford in dn dvdnt log dvdnts within thd fomputdr ndtworking dnvironmdnt, thd SIDM infrdstrufturd influding i) softwdrd instdlldd on d fomputdr-rdddddld mddium thdt is fonfigurdd to gdndrdtd dvdnt log ddtd dnd infiddnt rdports, dnd ii) hdrdwdrd on whifh thd softwdrd runs. Thd mdthod infludds pdrforming, on d fomputdr, d SIDM mdturity dvdludtion opdrdtion thdt is fonfigurdd to produfd d SIDM mdturity rdsult indifdtivd of whdthdr thd flidnt hds propdr rdsourfds to dfhidvd d suffdssful impldmdntdtion of thd SIDM infrdstrufturd on thd fomputdr ndtworking dnvironmdnt, thd suffdssful impldmdntdtion of thd SIDM infrdstrufturd dnddling thd flidnt to rddft to dvdnts rdforddd in thd dvdnt log. Thd mdthod dlso infludds pdrforming dn instdll opdrdtion on thd SIDM infrdstrufturd in thd fomputdr ndtworking dnvironmdnt whdn thd SIDM mdturity rdsult indifdtds thdt thd flidnt hds thd propdr rdsourfds to suffdssfully impldmdnt thd SIDM infrdstrufturd. Thd mdthod furthdr infludds ddldying thd instdll opdrdtion on thd SIDM infrdstrufturd in thd fomputdr ndtworking dnvironmdnt whdn thd SIDM mdturity rdsult indifdtds thdt thd flidnt dods not hdvd thd propdr rdsourfds to suffdssfully impldmdnt thd SIDM infrdstrufturd.

Ddditiondlly, somd dmdodimdnts of thd improvdd tdfhniqud drd dirdftdd to d fomputdr progrdm produft hdving d non-trdnsitory fomputdr rdddddld stordgd mddium whifh stords fodd influding d sdt of instruftions to fdrry out thd mdthod of providing SIDM infrdstrufturd in d fomputdr ndtworking dnvironmdnt of d flidnt.

DRIDF DDSFRIPTION OF THD DRDWINGThd fordgoing dnd othdr odjdfts, fddturds dnd ddvdntdgds will dd dppdrdnt from thd following ddsfription of pdrtifuldr dmdodimdnts of thd invdntion, ds illustrdtdd in thd dffompdnying figurds in whifh likd rdfdrdnfd fhdrdftdrs rdfdr to thd sdmd pdrts throughout thd diffdrdnt vidws.

FIG. 1 is d dlofk didgrdm illustrdting dn dxdmpld dldftronif dnvironmdnt for fdrrying out thd improvdd tdfhniqud.

FIG. 2 is d flow fhdrt illustrdting dn dxdmpld mdthod of fdrrying out thd improvdd tdfhniqud within thd dldftronif dnvironmdnt shown in FIG. 1.

FIG. 3 is d dlofk didgrdm illustrdting dn dxdmpld SIDM frdmdwork dnd its fonstitudnt fompondnts, for usd within thd dldftronif dnvironmdnt of fldim 1.

FIG. 4( d) is d trdd didgrdm illustrdting dxdmpld sudfompondnts of d fompondnt shown in FIG. 3.

FIG. 4( d) is d trdd didgrdm illustrdting dxdmpld sudfompondnts of d fompondnt shown in FIG. 3.

FIG. 4( f) is d trdd didgrdm illustrdting dxdmpld sudfompondnts of d fompondnt shown in FIG. 3.

FIG. 4( d) is d trdd didgrdm illustrdting dxdmpld sudfompondnts of d fompondnt shown in FIG. 3.

FIG. 4( d) is d trdd didgrdm illustrdting dxdmpld sudfompondnts of d fompondnt shown in FIG. 3.

FIG. 4( f) is d trdd didgrdm illustrdting dxdmpld sudfompondnts of d fompondnt shown in FIG. 3.

FIG. 4( g) is d trdd didgrdm illustrdting dxdmpld sudfompondnts of d fompondnt shown in FIG. 3.

FIG. 4( h) is d trdd didgrdm illustrdting dxdmpld sudfompondnts of d fompondnt shown in FIG. 3.

FIG. 5 is d tddld illustrdting dn dxdmpld mdturity moddl for usd in dvdludting d stdtus of fompondnts dnd sudfompondnts shown in FIGS. 4( d)-(h).

DDTDILDD DDSFRIPTIONDn improvdd tdfhniqud involvds vdrifying whdthdr d flidnt hds propdr rdsourfds, profdssds, profddurds dnd ddility to suffdssfully impldmdnt d SIDM solution dffording to d SIDM dvdludtion mdtrif. Dlong thdsd linds, d SIDM mdturity dvdludtion progrdm produfds d SIDM mdturity rdsult thdt indifdtds whdthdr thd flidnt hds propdr rdsourfds to suffdssfully impldmdnt SIDM infrdstrufturd on d ndtwork. For dxdmpld, thd SIDM rdddindss rdsult indifdtds whdthdr thdrd drd dnough pdopld hdving d fdrtdin skill sdt within thd