Security Policy Terminology Confusion

By Author: Shirley Green
Total Articles: 129
Comment this article

The National Security Agency offers a several-hundred-page guide and templates that address security in Windows 2000.
The "Microsoft Windows 2000 Security Operations Guide" provides documentation, recommendations, and templates for Windows 2000.
Microsoft Certified Professional Magazine, which you can view at MCSE Exams, provides a conference CD-ROM and attack analysis, as well as a discussion on how the Windows Security Conference held in July 2002 built a secure network using Microsoft Windows 2000 templates provided in the Win-dows Security Operations Guide. The network was presented on the Internet, attacks were invited, and none were successful.
Ensure that design recommendations are tested. The specific recommendations might have been tested but cannot possibly be judged safe for your organi-zation. You might have legacy clients or applications that will be broken by settings that might not affect others. You might have requirements beyond those which can be reproduced in someone else's test.
Consider the template designer and its intended audience. This ...
... can have an affect on the security settings in the template and whether or not they are applicable in your organization or correct for using in the model defined in this free Network+ study guides. For example:
Q The Microsoft templates were developed to meet this book's definition of baseline—that is, a rigorous security standard that is then adjusted to allow specific server roles to be implemented on the network.
Q Other templates might define baseline as a common security standard that most can live with. The gold standard templates from the Center of Internet Security (CIS), for example, represent the agreement of many organizations and might or might not provide the level of security your organization requires in a free CIW exam questions baseline template.