System Security Checklists and Configuration Guides

Noticeboard posted an article today about a number of system security checklist and configuration guides recently added to the NIST web site:

A raft of new or updated security checklists and verification tools have been released by NIST covering: access control; application & database security; DNS; Enclave; .NET framework; network infrastructure; SAN/sharing peripherals across the network; UNIX; VoIP; and Windows 2000, XP and 2003 Server. The combination of comprehensive security checklists recommending specific parameter settings and automated tools to check system configurations against the recommendations makes the security manager's job that bit easier.

The majority of these guides are from DISA (Defense Information Systems Agency). A few are from DOT. Remember the source of these guideline; they may not be totally applicable to your environment.

The NIST Practices & Checklists / Implementation Guides web site contains a wealth of information on federal agency and civilian security practices and guidelines.


Steve Mullen has been involved in information technology for over 35 years. He is also actively involved in the music program (voice and English hand bells) and Vestry of St. Anne’s Episcopal Church in Damascus, MD.

Posted in Blog, Security, Technology

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

June 2006
« May   Jul »
%d bloggers like this: