benchmarking.doc

2
Benchmarking & Metrics Benchmarking and metrics of information systems provides a quantitative measurement of control areas and security within an organization. Various regulations and standards have defined benchmarking procedures created against a baseline of best industry practices and comparative analysis to similar organizations. At Praetorian Secure, we are knowledgeable in many benchmarking processes and use the metrics and results for process improvement. Our trained staff will develop and outline the benchmarking approach to an established standard of due care based on the following: Identify and utilize regulatory benchmark standards – HIPAA, ISO, FISMA, DIACAP, NIST, PCI,GLBA, SOx Integrate operating systems/application benchmark procedures - Apache, Apple, Linux, HP-UX, IBM AIX, Microsoft Windows, Mozilla, Oracle, RedHat, Solaris, VMware Implement and analyze peer-institutional comparison of an organization's security practices Complete benchmark survey of both technical and non- technical personnel Prepare and report on a collective view of an organization's security practices and areas needing improvement Praetorian Secure's benchmarking and metrics services help organizations reduce the risk of business disruptions resulting from inadequate technical security controls. Solid transparent metric reporting prepared by Praetorian Secure

Upload: parthi-ban

Post on 16-Apr-2015

11 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: Benchmarking.doc

Benchmarking & Metrics

Benchmarking and metrics of information systems provides a quantitative measurement of control areas and security within an organization.  Various regulations and standards have defined benchmarking procedures created against a baseline of best industry practices and comparative analysis to similar organizations.  At Praetorian Secure, we are knowledgeable in many benchmarking processes and use the metrics and results for process improvement.  Our trained staff will develop and outline the benchmarking approach to an established standard of due care based on the following:

 

Identify and utilize regulatory benchmark standards –  HIPAA, ISO, FISMA, DIACAP, NIST, PCI,GLBA, SOx

Integrate operating systems/application benchmark procedures - Apache, Apple, Linux, HP-UX, IBM AIX, Microsoft Windows, Mozilla, Oracle, RedHat, Solaris, VMware

Implement and analyze peer-institutional comparison of an organization's security practices

Complete benchmark survey of both technical and non-technical personnel

Prepare and report on a collective view of an organization's security practices and areas needing improvement

 

Praetorian Secure's benchmarking and metrics services help organizations reduce the risk of business disruptions resulting from inadequate technical security controls. Solid transparent metric reporting prepared by Praetorian Secure provides direction for security configurations and gives adequate information to make sound decisions about security investments.