(Bill's) computer & information.

Security Auditability ColorChart

This home-page is the out-growth of a project, like many, that started as a solution to a need for a tool to help me in my job / company. It has grown to have a life of it's own, and others now share in the use of the tool. Herein, I explain the how's & why's in order to give you the benefit of my experience, hoping you can learn something and "leverage" off of my work - to help you in yours.

• Introduction to: concept of "Why" do you want to AUDIT your Security Status?
• Another VIEW of "Why & How" - do you want to AUDIT your Security Status?
• Introduction to: the "Color Chart Tool" - whys and hows of adapting & using the tool itself
• Here's how to: decide Which(of 3) Versions of "Color Chart Tool" is right for you
• What items do I secure ? can you tell me & my manager what & why?
• IF an audit comes to my site, what will happen? (for self-internal-Audits) Audit Methodology
• We KNOW Bill's a Mac & Unix geek - what about NT Basic Security items?
• GSD-Fall 1999 Audits - when / where / who??? - schedule
• Andrew's Presentation on Fall 1999 Audits PowerPointAudit

Here are directories for each of the different versions of the tool - I leave you to browse the directories, and use what you want & need - making the assumption that the filenames & types will be pretty self-explanatory and you don't need any supporting documentation for each of the files, if you DO NEED HELP - find my e-mail address below.

• AuditCC version 1
• AuditCC version 2
• AuditCC version 3 (for Global Software Division folks - already has site-headings & such)
• AuditCC version 3 (for Generic Operations (labelled: "Acme Bread"))
   

Templates you can borrow / plaugerize!:

AND - many admins will want to know - as there's some reference to physical files / hardcopy documentation in many of the "line-items" listed herein - where they can obtain "templates" or "blank files" to use to attempt to comply with those line-items that require some degree of documentation.   In the "template documents" page (click here) I attempt to create links to a file wherever one is required.  RECOGNIZE, though, that some of these are "common sense" - and/or some others are particularly generic as they may require tailoring to your local situation / legal environment or particular country-culture.  So - I've "done my best" to at least, though, give you a flavour of what these documents should look-like and the sort of information they should include...

AND, Lastly - here's how to correspond with me about the tool: MailTo: Bill

(revID: 1q: last updated on  Wednesday_11_August_1999 by: Bill Schell (Happy Bytes)