IBM System i™ Session: 490074 Secure Perspective Patrick Botz IBM Lab Services Security Architecture Consulting & Implementation, Practice Leader botz@us. ibm. com i want stress-free IT. i want control. i want an i.
IBM System i Roles / Input 3 rd party Management Technical Process Independent Verification of Policy and Implementation Technical Security Off, Operators System administrator Monitor Compliance With Your Policy Technical Security Officer System administrator Monitor Accuracy of Implementation Technical Security Officer System administrator Implement Policy Outputs Official report to execs Compliance w/ Policy Suggest policy change Audit analysis Report anomalies Take action Periodic reports System secured according to policy Organization Industry Government Security Policy Written policy Management support Widely communicated Security Requirements CIO, CEO, IT Director Lawyers Technical General Requirements documented S ta r t i want an i. © 2007 IBM Corporation
IBM System i Secure Perspective Focus Corporate Security I/T Security Networking Security System i want an i. © 2007 IBM Corporation
IBM System i Independent Verification Policy and Implementation Plan Monitor Compliance With Your Policy Monitor Accuracy of Implementation Implement Policy Security Requirements i want an i. Organization’s security is defined here! © 2007 IBM Corporation
IBM System i Independent Verification Policy and Implementation Monitor Compliance With Your Policy Monitor Accuracy of Implementation Implement Policy Security Policy Implement/Monitor Configure your system to implement and monitor the policy. Make decisions for setting “knobs and dials” on a specific system. Security Requirements i want an i. © 2007 IBM Corporation
IBM System i Independent Verification of Policy and Implementation Monitor Compliance With Your Policy Monitor Accuracy of Implementation Implement Policy Security Policy Evaluate/Feedback Assures organization’s policy: • meets all requirements • is implemented correctly • on specific systems • manual processes accomplish goal of policy Security Requirements i want an i. © 2007 IBM Corporation
IBM System i Independent Verification of Policy and Implementation Monitor Compliance With Your Policy Monitor Accuracy of Implementation Implement Policy The process provides your security – not the computer system! Security Policy Security Requirements i want an i. © 2007 IBM Corporation
IBM System i A 14 year track record…proven methods & techniques, worldwide results STG Lab Services To learn more about how STG Lab Services can help you attain your sales objectives, see us in the Solutions Center or contact a Lab Services Opportunity Manager: System i (WW, AG) Mark Even, (507) 253 -1313, even@us. ibm. com Pete Cornell, (507) 253 -4955, pcornell@us. ibm. com System p (WW, AG) Stephen Brandenburg, (301) 803 -6199, sbranden@us. ibm. com (WW, AG) (919) 543 -7919, kbogart@us. ibm. com Optimization Studies (WW, AG) Marlin Maddy, Solutions Mohsen Nikbakhshian, AP System i, z (WW, AG) 886 -2 -8170 -6895, jenychen@tw. ibm. com 86 -10 -62986677 x 306, xuzhe@cn. ibm. com Jin-Ming Liu, (425) 803 -5901, siglm@us. ibm. com System z Jenny Chen, Zhe Xu, System p, x Storage Mike Sigl, Jerry Koger (877) 598 -9675, mmaddy@us. ibm. com (301) 803 -2947, mnikbakh@us. ibm. com Michael Karchov, (919) 342 -6619, michael. karchov@us. ibm. com Kevin Bogart, (WW, AG) Greg Mallare, (727) 593 -2228, gmallare@us. ibm. com System x System Storage US contact for AP (507) 253 -0391, jliu@us. ibm. com (623) 505 -4932, jerrykog@us. ibm. com Europe SWE & NEE IOT’s Benoit Sirot. 33 -4 9211. 5012, sirot@fr. ibm. com Gerard Barneaud. 33 -4 9211. 4231, barneaud@fr. ibm. com www. ibm. com/eserver/services i want an i. © 2007 IBM Corporation
IBM System i Trademarks and Disclaimers 8 IBM Corporation 1994 -2007. All rights reserved. References in this document to IBM products or services do not imply that IBM intends to make them available in every country. Trademarks of International Business Machines Corporation in the United States, other countries, or both can be found on the World Wide Web at http: //www. ibm. com/legal/copytrade. shtml. Intel, Intel logo, Intel Inside logo, Intel Centrino logo, Celeron, Intel Xeon, Intel Speed. Step, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. Microsoft, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. IT Infrastructure Library is a registered trademark of the Central Computer and Telecommunications Agency which is now part of the Office of Government Commerce. ITIL is a registered trademark, and a registered community trademark of the Office of Government Commerce, and is registered in the U. S. Patent and Trademark Office. UNIX is a registered trademark of The Open Group in the United States and other countries. Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both. Other company, product, or service names may be trademarks or service marks of others. Information is provided "AS IS" without warranty of any kind. The customer examples described are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics may vary by customer. Information concerning non-IBM products was obtained from a supplier of these products, published announcement material, or other publicly available sources and does not constitute an endorsement of such products by IBM. Sources for non-IBM list prices and performance numbers are taken from publicly available information, including vendor announcements and vendor worldwide homepages. IBM has not tested these products and cannot confirm the accuracy of performance, capability, or any other claims related to non-IBM products. Questions on the capability of non-IBM products should be addressed to the supplier of those products. All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only. Some information addresses anticipated future capabilities. Such information is not intended as a definitive statement of a commitment to specific levels of performance, function or delivery schedules with respect to any future products. Such commitments are only made in IBM product announcements. The information is presented here to communicate IBM's current investment and development activities as a good faith effort to help with our customers' future planning. Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve throughput or performance improvements equivalent to the ratios stated here. Prices are suggested U. S. list prices and are subject to change without notice. Starting price may not include a hard drive, operating system or other features. Contact your IBM representative or Business Partner for the most current pricing in your geography. Photographs shown may be engineering prototypes. Changes may be incorporated in production models. i want an i. © 2007 IBM Corporation
Скачать презентацию IBM System i Session 490074 Secure Perspective Patrick
46b1e5d0c2449f1afa5c966dd13a5eef.ppt