CASP/R A

From Wikibooks, open books for an open world
Jump to navigation Jump to search

Analyze industry trends and outline potential impact to the enterprise[edit | edit source]

Perform on-going research[edit | edit source]

Best practices[edit | edit source]

New technologies[edit | edit source]

New security systems and services[edit | edit source]

Technology evolution (e.g. RFCs, ISO)[edit | edit source]

Situational awareness[edit | edit source]

Latest client-side attacks[edit | edit source]

Threats[edit | edit source]

Counter zero day[edit | edit source]

Emergent issues[edit | edit source]

Research security implications of new business tools[edit | edit source]

Social media/networking[edit | edit source]

Integration within the business (e.g. advising on the placement of company material for the general public)[edit | edit source]

Global IA industry/community[edit | edit source]

Conventions[edit | edit source]

Attackers[edit | edit source]

Emerging threat sources[edit | edit source]

Research security requirements for contracts[edit | edit source]

Request for Proposal (RFP)[edit | edit source]

Request for Quote (RFQ)[edit | edit source]

Request for Information (RFI)[edit | edit source]

Agreements[edit | edit source]

Carry out relevant analysis for the purpose of securing the enterprise[edit | edit source]

Benchmark[edit | edit source]

Prototype and test multiple solutions[edit | edit source]

Cost benefit analysis (Return on Investment - ROI, Total Cost of Ownership - TCO)[edit | edit source]

Analyze and interpret trend data to anticipate cyber defense aids[edit | edit source]

Review effectiveness of existing security[edit | edit source]

Reverse engineer / deconstruct existing solutions[edit | edit source]

Analyze security solutions to ensure they meet business needs[edit | edit source]

Specify the performance[edit | edit source]

Latency[edit | edit source]

Scalability[edit | edit source]

Capability[edit | edit source]

Usability[edit | edit source]

Maintainability[edit | edit source]

Availability (MTTR- Mean Time To Recovery, MTBF- Mean-Time Between Failure)[edit | edit source]

Conduct a lessons-learned / after-action review[edit | edit source]

Use judgment to solve difficult problems that do not have a best solution[edit | edit source]

Conduct network traffic analysis[edit | edit source]

Retrieved from "https://en.wikibooks.org/w/index.php?title=CASP/R_A&oldid=2653929"