Here are some links to the AFCERT (Air Force Computer Emergency Response
Team) web sites. It has some useful information that is public and links
to other organizations.

http://www.afcert.kelly.af.mil/intrusion_detection.html

http://www.afcert.kelly.af.mil/incident_response.html

Hope this helps.

Thanks,

Chuck Marchman
Information Security Consultant
Predictive Systems, Inc.
770-993-5010 ext. 766 (Voicemail)
678-923-4061 (Cell)
877-474-7375 (Pager)

charles.marchmanpredictive.com

Al Berg <alAL-BERG.COM>
Sent by: Focus on Intrusion Detection Systems
<FOCUS-IDSSECURITYFOCUS.COM>
01/17/01 09:04 AM
Please respond to al

        To: FOCUS-IDSSECURITYFOCUS.COM
        cc:
        Subject: Staffing an Intrusion Detection Capability?

My company (an organization of approximately 3000
people in the financial industry and which is doing an
increasing amount of business on the Internet) is
currently putting together a plan for an intrusion
detection and incident response capability.

I am curious to hear what other organizations of a
similar size are doing regarding staffing such a
capability.

Does your organization have a dedicated ID staff?

If so, how large is this staff? If not, where do you
draw the staff from?

What skills do you look for in ID staff?

Is the ID staff integrated with the incident response
staff?

If anyone has a job description for members of such
a staff that they would be willing to post, that would be
great.

I look forward to some interesting discussion on this
topic!

Al

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]