IT Solutions Series - IT Security Advice from Experts

Lawrence M. Oliva

Senior Managing Editor: Jan Travers
Managing Editor: Amanda Appicello
Development Editor: Michele Rossi
Copy Editor: Ingrid Widitz
Typesetter: Jennifer Wetzel
Cover Design: Lisa Tosheff
Printed at: Yurchak Printing Inc.

Published in the United States of America by
CyberTech Publishing (an imprint of Idea Group Inc.)
701 E. Chocolate Avenue, Suite 200
Hershey PA 17033 USA
Tel: [phone]
Fax: [phone]
E-mail: [e-mail]
Web site: http://www.idea-group.com

and in the United Kingdom by
CyberTech Publishing (an imprint of Idea Group Inc.)
3 Henrietta Street Covent Garden
London WC2E 8LU
Tel: [phone]
Fax: [phone]
Web site: http://www.eurospan.co.uk

Copyright 2004 by Idea Group Inc. All rights reserved. No part of this book may be reproduced in any form or by any means, electronic or mechanical, including photocopying, without written permission from the publisher.

Library of Congress Cataloging-in-Publication Data

Oliva, Lawrence M.
Information technology security : advice from experts / Lawrence Oliva.
p. cm.
Includes bibliographical references and index.
ISBN 1-59140-247-6 (pbk.) ISBN 1-59140-248-4 (ebook)
1. Computer security. I. Title.
QA76.9.A25O64 2004 005.8--dc22

2004005871

British Cataloguing in Publication Data A Cataloguing in Publication record for this book is available from the British Library.

All work contributed to this book is new, previously-unpublished material. The views expressed in this book are those of the authors, but not necessarily of the publisher.

About the Authors      

Lawrence M. Oliva is director of Infrastructure Project Management for the CSC PRIME Alliance Project, which is focused on modernizing many of the U.S. Treasury Department s communications and computing infrastructure. He has more than 25 years of experience with information security practices and procedures from both the technical and executive management perspectives, and has implemented many of the security management best practices mentioned in this book. As a certified project management professional (PMP), Oliva has managed several extraordinarily high-risk, mission-critical projects up to $160 million in budget. As vice president for a computer security firm developing biometric security solutions, his team developed and delivered procedures to quickly, securely and inexpensively migrate hundreds of financial and health care IT users from password-only conditions to multi-factor , high security biometric access environments. He is a faculty member at the University of Phoenix.

* * *

Chrisan Herrod is serving as both department chair of the Information Operations and Assurance Department where she is responsible for curriculum, including information security, assurance, and operations and as a professor of Information Security and Systems Management. Previously she was director of Global IT Security at GlaxoSmithKline (GSK), a large pharmaceutical company, and she was director of Information Security at Fannie Mae. While at Fannie Mae she became involved in the White House sponsored Partnership for Critical Infrastructure Security as the Information Sharing and Analysis Working Group Chair, and is currently serving as a special advisor to the Health Care Industry Information Sharing and Analysis Center initiative. She is an adjunct professor teaching information security and leadership courses with both the University of Fairfax and the University of Phoenix. From 1999 to 2001, she taught information security graduate courses at the George Washington University.

Craig E. Kaucher is a professor of Information Operations and Assurance at the National Defense University. He served in a variety of security and systems management assignments from the tactical to the strategic level, and in the U.S. Intelligence community, over a 21-year career of military service. He holds a BA in Communications from Temple University, an MS in Software Engineering Administration from Central Michigan University, and is currently pursuing a PhD in Information Systems. He also holds the Department of Defense CIO and CISO Graduate Certificates, and is a certified information security manager (CISM). He has published articles on various aspects of information security, and has spoken at numerous government and industry conferences

LTC Clifton H. Poole, CISSP, CISM, IAM, is a 20-year veteran of the U.S. Army. Clifton H. Poole currently instructs information assurance, policy development, security standards and wireless security at the Information Resources Management College, National Defense University, Washington, DC. He was featured in the Washington Post newspaper (2003) for his research in wireless computing as he war drives the area mapping local wireless access points. He is a doctoral student in the Graduate School Computer and Information Sciences, NOVA Southeastern University.

Charles Rex IV is the chief information officer and director of academic operations at the National War College in Washington, DC. He received a bachelor s degree from the Virginia Military Institute, an MBA from the University of Phoenix, and holds the chief information officer certification and Information Assurance certification from the Information Resources Management College at the National Defense University. Mr. Rex owns a business consulting firm and is a member of the faculty at the University of Phoenix.