A Top-Down Approach Towards Translating Organizational Security Policy Directives to System Audit Configuration

Abstract

Abstract:There is a significant gap between the stated objectives of organizational security found in corporate security policy and the audit configuration of event logs present on IT systems. Audit configuration has always been a bottom-up process. As a result, the design and implementation of audit configurations is often constrained by the audit management interface that often models operating system structures rather than real world behavior. This paper argues for a top-down approach in the establishment of IT audit policies and practices. We propose that management should develop an organization wide audit policy that will set mandatory audit directives and ensures that the audit configuration reflects the needs of the organization as defined in the security policy.

From risk analysis to effective security management: towards an automated approach

“…A number of artifacts are therefore produced, a lot of them expressed in natural language (Schlienger and Teufel, 2002). Several researchers try to develop solutions to exploit the processing of natural language to produce formal descriptions that could be somehow materialized in system's configuration, either for policy enforcement (Michael et al, 2001), or for audit reviews (Ahmad and Ruighaver, 2002).…”