ITS 111

Seminar 6

2/15/15

Maintenance Model Essay

When companies are created, structure is needed to help them thriv. Management models must be adopted to manage and operate ongoing security programs. Models such as these act as frameworks that structure tasks of managing a particular set of activities or business functions. Maintenance models are usually based on five subject areas or domains: external monitoring, internal monitoring, planning and risk assessment, vulnerability assessment and remediation, and readiness and review. When organizations have implemented policies such as this, it helps them maintain an awareness of the networks, systems, and helps them create defense mechanisms that can protect them against various threats. The objective of the external monitoring system is to provide and early awareness of new threats and vulnerabilities that helps gain the intelligence to build an effective defense. The internal monitoring systems helps to maintain an awareness of an organizations networks and systems by helping to maintain the integrity of the organizations infrastructure, this can be done by way of real-time monitoring of IT activity by the use of an intrusion detection system. The planning and risk assessment phase consist of an organization providing an over watch over the entire security program, this task is accomplished by planning policies that reduce risk in workplace. The primary goal of the vulnerability assessment and remediation is to identify specific, documented vulnerabilities and the time in which this process is completed. This task can be accomplished in a number of ways, with two examples being the use of vulnerability assessment procedures and by documenting information and providing for results for remediation procedures that are tested for vulnerabilities that are reported. The last phase is readiness and review.