Risk Assessments Revisited
Risk Assessments Revisited
It is not useful to secure a WLAN if the data is not worth
protecting. The two primary types of assets to protect on a WLAN are sensitive
data and network services:
-
Sensitive data. Sensitive can mean
different things to different companies. It must be determined at all levels of
an organization what data must be protected from both a legal and business
viewpoint. The security practitioner must work with top-level management to
ensure that the appropriate data is being protected and what degree of
protection is required. Some of the types of data that need to be secured
include intellectual property, trade secrets, identity information, credit card
information, health information, and customer databases. It is possible that
some data is so sensitive that a WLAN installation would present too high a
security risk and should not be installed at all.
-
Network services. An adversary may try
to undermine the availability of a company's network, and such actions would
cause damage to the company's productivity and affect sales. Network services
such as the following are critical to most organizations: e-mail services, file
servers, database services, directory services, Internet connectivity, Web-based
applications, virus and intrusion detection services, and custom application
services. Many types of services run on an organization's network at any given
time, many of which could cause an unnecessary waste of time and resources or
dire business consequences if taken offline.
134 times read
|
|
|
|
Sections
Archive
Syndication
