The 20 Critical Security Controls: From Framework to Operational to Implementation

The 20 CSC provide an excellent bridge between the high level security framework requirements and the operational commands needed to implement them. Implementation is a 3-7 year process depending on a wide variety of factors and constraints. This talk discusses our experiences in implementing the 20 CSC. For example, Control #1 has proved to be the most challenging one because it depends on how your IP addresses are generated by your networking group. We'll also discuss various tools and internal policies and standards that support a particular control's implementation. Finally, we'll show examples of how we measure progress.
Speaker Bio
Randy Marchany
Randy is the Chief Information Security Officer of Virginia Tech and the Director of Virginia Tech's IT Security Laboratory. He is a co-author of the original SANS Top 10 Internet Threats, the SANS Top 20 Internet Threats, the SANS Consensus Roadmap for Defeating DDoS Attacks, and the SANS Incident Response: Step-by-Step guides. He is a member of the Center for Internet Security development team that produced and tested the CIS Solaris, HPUX, AIX, Linux and Windows2000/XP security benchmarks and scoring tools. He was a member of the White House Partnership for Critical Infrastructure Security working group that developed a Consensus Roadmap for responding to the DDOS attacks of 2000.

[@RoDrop]

Thanks for sharing! Go Hokies!

[@KabirKazim]

Excellent !!

[@comunidaddojo]

Very informative presentation , thank for sharing

[@andersjaiden1467]

you probably dont give a damn but does anyone know a way to log back into an Instagram account?
I somehow lost my login password. I would appreciate any help you can offer me.

[@seangunner6524]

@Anders Jaiden Instablaster :)

[@andersjaiden1467]

@Sean Gunner Thanks for your reply. I found the site on google and Im waiting for the hacking stuff atm.
I see it takes quite some time so I will get back to you later when my account password hopefully is recovered.

[@andersjaiden1467]

@Sean Gunner It worked and I finally got access to my account again. Im so happy:D
Thanks so much, you saved my account!

[@seangunner6524]

@Anders Jaiden no problem =)

[@cjv6295]

Do you have telco security controls?

[@CC-yr3gs]

it is just a training course sans sec 566