We are currently in phase one of producing the Security as a Service guidance documentation;
– Agreeing and documenting categories of service and their definitions
– Agreeing and documenting categories of threats and their definitions
So far the top five categories of service are;
- Secure Web Gateway
- Vulnerability Assessments
- Pen Testing
- Intrusion Detection
- Log Management
With several further categories in the mix. We will be looking to consolidate the above categories and the others identified into sensible easy to understand groupings. For example it is likely that ‘vulnerability assessment’ and ‘pen testing’ will be a single category.
The top categories of threat identified are currently;
- Data Loss Leakage
- Traffic Hijacking
- Unauthorized Access
- Denial of Service
- Application Vulnerabilities
With about forty further ideas being assessed in the same way as for categories of service.
Should you have any ideas please do let me know either by posting a comment on this blog or by mailing me on LinkedIn, any assistance is greatly welcomed!