Security team objectives

Royce Williams royce at
Mon Jul 30 05:12:26 UTC 2018

On Sun, Jul 29, 2018 at 8:58 PM <valdis.kletnieks at> wrote:
> On Mon, 30 Jul 2018 06:43:35 +0200, Ramy Hashish said:
> > If you are going to start a security team in a newly founded IT
> > organization, what will the objectives/results be?
> The answer will depend heavily on the organization that contains the IT
> group.  The right answers will be different for a bank, an ISP, a
> Fortune500, or a large university.  The location (country and
> state/province) and legal requirements for the company will also
> matter - I have to worry about FERPA, Comcast probably doesn't...

Nevertheless, some broad common objectives exist.

IMO, no one summarizes it better than Richard Bejtlich, in his
"Defensible Network Architecture 2.0":

The corresponding metrics for measuring results/progress would be more
specific to the type of org.



More information about the NANOG mailing list