Cobit 4.1 Summary

HIGH LEVEL CONTROL OBJECTIVESPlan and Organize


PKI

Public-Key infrastructure (PKI) is the integration of software, hardware, encryption technologies and services for managing public keys. PKI provides for the four basic requirements of a secure system:

  • Confidentiality to keep information private.
  • Integrity to prove that information has not been changed.
  • Authentication to prove the identity of the sender.
  • Non-repudiation, which ensures that the information originator cannot deny ownership.

How these requirements are acheived?


Configure Solaris server as a DHCP client

  1. To find out the interfaces on your system, type: ifconfig -a
  2. Lets assume your interface name is "pcn0"
  3. Run "ifconfig pcn0 plumb"
  4. Run "ifconfig pcn0 dhcp start" to bring the interface up and get a DHCP address (assuming you have a DHCP server for the subnet your host is on)
  5. Create empty files named /etc/hostname.pcn0 and /etc/dhcp.pcn0
  6. Reboot: shutdown -i6 -g0 -y

Firewalls

Firewalls In General


Database Security Logging

This is the information one should be looking for in database security logs.
Area Activity
System Access


PCI DSS Updates

Some important items worth noting:


Protecting your identity on the Internet

Internet is a medium where you are trusting a website with the information you provide, you have no idea who this website belongs to.  Therefore:


Protecting your identity at home and in public

People think their information is protected while it is sitting in their homes, which is not true.  Therefore:

  • Always shred your bills, credit card offers before disposing off
  • At home try to mantain a clean desk policy, to ensure your bills and other information is not lying around in the open, which makes it easy for visitors to pick up
  • Never carry your SSN/SIN card in your wallet/purse
  • Never provide your SSN/SIN numbers to anyone besides your TAX Agency, all other agencies need it but it is not mandatory

Patch update

Ubuntu Linux Software update using command line tools
apt-get is the command-line tool for handling packages, updating package and installing patches under Ubuntu Linux. All you have to do is type the following two command to update all installed software to latest version.
Open terminal and type the following two commands: $ sudo apt-get update $ sudo apt-get upgrade Sample output:


Social Networking Security Tips

By the Associated Press