Required Attributes of Security Solutions

Required Attributes of Security Solutions | Secure Software Engineering Blog

Required Attributes of Security Solutions | Secure Software Engineering Blog — Sun, 02 Mar 2008 22:15:39 GMT

PingBack from http://www.secure-software-engineering.com/2008/03/02/required-attributes-of-security-solutions/

re: Required Attributes of Security Solutions

Josh Maher — Wed, 26 Jul 2006 22:40:50 GMT

This is great, sounds just like the requirements of an accounting system. Although one of the requirements is missing, Relevancy. It isn’t surprising though that the same requirements would exist; you are effectively doing the same thing. In accounting you have a system that is required to know everything about business transactions and effectively report to management and external sources the information that is relevant to them. This is the same basic requirement for a security system. I had never really thought about the two this way (until I saw this list). Additionally an accounting and a security system can have other requirements, like enable faster responses to changing… security threats or economic environments. Hmm, way more similarities then I have room for in a comment… I’ll post a better write up later joshmaher.wordpress.com

re: Required Attributes of Security Solutions

UMACF24 — Sun, 23 Jul 2006 22:43:42 GMT

I like Lazy and Robust for security. Typically, security systems are delivering a policy, and if a policy is going to work, it has to be Lazy and Robust.

Lazy -- it's easier to obey than to ignore or bypass

Robust -- whatever the current compliance status is, application of the solution will tend to improve it over time

Is that too pessimistic?

re: Required Attributes of Security Solutions

Susan — Fri, 21 Jul 2006 20:14:06 GMT

Not sure where this fits.. but a solution needs to be 'delegat-able'.. such that parts can be delegated to members of the team in a manner that only those parts/rights/modules, etc that are deemed needed for that person/team member to perform the task are given to them.

But is that part of adaptable?

re: Required Attributes of Security Solutions

Keith B. Rosenberg — Thu, 20 Jul 2006 01:37:28 GMT

How about affordable? If small organizations with extremely limited budgets cannot afford the solution, then it is of no use to them. And they need it the most precisely because they have fewer resources and any downtime might bring the end of the organization.

There are only 500 companies in the Fortune 500, but hundreds of thousands of organizations at the other end of the spectrum who are desperate for inexpensive and robust solutions!