IT Security Management

Hey My Friends !

I'm trying to write my blog in english . hiks :D ^^ so i'm sory if there mistakes .

Yesterday, event at my campus is seminar about IT security. I’m still pemula to know about IT security. It’s so difficult to understand for me. But I think its enough useful for listener. Who is the speaker about that?? He is Mr. Hananto Adi Swasono. He is a manager IT at one of the company in Indonesia. I have a dream like him. Be successful person. Okay for the topic about IT security .Lets learn about it ^^

Actually, in a Security IT is not only about :
1. SSL
2. Antivirus
3. Firewall
4. Smartcard
5. Password
6. Hardware Key
7. etc.

What I mention on the top?
Mr. Hananto Says “It is only in technical of technology.” Hiks hiks :D

Okay I’ll share what I got yesterday in seminar IT Security.


The IT Security Domain & Concept:
- Basic Concept use C-I-A Model (Confidentiality – Integrity – Availability)
- Domain :

1. Access Control
2. Telecommunication & Network Security
3.  Information Security
4. Risk Management ( Save Our Data what has high Value ^^)
5. Application Security
6. Cryptography
7. Etc.

What is Access Control ?

1. Set the User Federation like ( Create, Delete, Deactive, and Authorize )
2. For the user access : minimal set password age (3 months change password)

Technology what the technology used ::

1. Active Directory Microsoft (connected between Active Directory Server at all the company.
2. Open LDAP

The operation Security what used :

1. Patch Management
2. Inventory Management
3. Change Management

The principles of security:
1. Least Privilege: each person was only given no more privileges than necessary to carry out their duties.
2. Defense in Dept: for mutual backup.
3. Check Point: everyone must pass through a gate.