Defense-in-Depth: Foundations for Secure and Resilient Enterprises

The Defense-in-Depth Foundational Curriculum is designed for students, ranging from system administrators to CIOs, who have some technical understanding of information systems and want to delve into how technical assurance issues affect their entire organizations. The course material takes a big-picture view while also reinforcing concepts presented with some details about implementation. Therefore, this course can be a useful pursuit for system administrators and IT security personnel who would like to step up to the management level. It also can provide a refresher for IT managers and executives who want to stay up to date on the latest technological threats facing their enterprises.

The curriculum consists of eight main modules: (1) Compliance Management, (2) Risk Management, (3) Identity Management, (4) Authorization Management, (5) Accountability Management, (6) Availability Management, (7) Configuration Management, and (8) Incident Management. The document also contains an introduction, "Foundations of Information Assurance," which focuses on how the overarching concepts of confidentiality, integrity, and availability can lead to a comprehensive security strategy.

PDF [9928 KB]

Authors

Christopher May

Josh Hammerstein

Kristopher Rush

Jeff Mattson

This report is related to the following area(s) of work:

Security and Survivability

Handbook
CMU/SEI-2006-HB-003
September 2006

Cite This Report

SEI:

May, Christopher; Hammerstein, Josh; Rush, Kristopher; & Mattson, Jeffrey. Defense-in-Depth: Foundations for Secure and Resilient Enterprises (CMU/SEI-2006-HB-003). Software Engineering Institute, Carnegie Mellon University, 2006. http://www.sei.cmu.edu/library/abstracts/reports/06hb003.cfm

IEEE:

C. May, J. Hammerstein, K. Rush, and J. Mattson, "Defense-in-Depth: Foundations for Secure and Resilient Enterprises," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Handbook CMU/SEI-2006-HB-003, 2006. http://www.sei.cmu.edu/library/abstracts/reports/06hb003.cfm

APA:

May, C., Hammerstein, J., Rush, K., & Mattson, J. (2006). Defense-in-Depth: Foundations for Secure and Resilient Enterprises (CMU/SEI-2006-HB-003). Retrieved May 25, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/06hb003.cfm

CHI:

May, Christopher, Josh Hammerstein, Kristopher Rush, and Jeffrey Mattson. Defense-in-Depth: Foundations for Secure and Resilient Enterprises (CMU/SEI-2006-HB-003). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2006. http://www.sei.cmu.edu/library/abstracts/reports/06hb003.cfm

MLA:

May, C., Hammerstein, J., Rush, K., & Mattson, J. 2006. Defense-in-Depth: Foundations for Secure and Resilient Enterprises (Technical Report CMU/SEI-2006-HB-003). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/06hb003.cfm

Find Us Here

Find us on Youtube  Find us on LinkedIn  Find us on twitter  Find us on Facebook

Share This Page

Share on Facebook  Send to your Twitter page  Save to del.ico.us  Save to LinkedIn  Digg this  Stumble this page.  Add to Technorati favorites  Save this page on your Google Home Page 

For more information

Contact Us

info@sei.cmu.edu

412-268-5800

Help us improve

Visitor feedback helps us continually improve our site.

Please tell us what you
think with this short
(< 5 minute) survey.