Front cover - IBM Redbooks

Chapter 2. Security methodologies
2
In this chapter we look at the processes and procedures for implementing an
overall security infrastructure, from beginning to end. This is a complex
undertaking since it generally involves many people and many functional areas of
the IT infrastructure, and it must also address many security needs and
concerns.
We first look at exactly what is important when considering the implementation of
security measures in an organization, in general areas of concern.
We then look at what exists to help security practitioners: there are a number of
different approaches that can be used to achieve the objective of enterprise-wide
security. These are generally referred to as methodologies. Some are
vendor-specific, some are considered standards. In this chapter we explain their
contents and their scope.
With all this done, we complete the chapter by reviewing a sample methodology
that will put this information into a practical context. We do this to provide the
perspective needed to understand the ramifications of implementing
enterprise-wide security.
© Copyright IBM Corp. 2004. All rights reserved. 43