Final Review

1
Final Review

• References
• Holtsnider and Jaffe
• Campbell, Calvert, and Boswell

2
Final Content

• List project management stages
• List topics in position description
• List items to communicate with team
• Give advantages of budgeting
• Explain total cost of ownership
• What are two factors critical to successful help
  desk
• Give correct syntax for Unix command to be
  specified at the final
• Describe the DMZ
• List content of disaster recovery plan
• List steps in forensics process

3
IT Management Goals

• IT goals should be measured in same terms as
  business units supported
• Work with non-technical managers to keep IT
  aligned to organizations goal
• Help keep organizations leaders and plan atone
  with IT advancements

4
Project Management

• IT frequently involves projects
• Projects are ambiguous, since each is unique,
  first time endeavor
• Stages
• Initiating set stage for success
• Planning develop schedule, staff budget
• Executing do the project
• Controlling tracking project
• Closing wrap-up project

5
Staffing

• Managers success or failure depends on staff
• Hiring
• Know role of position and why its needed
• Write position description
• Advertise position / seek candidates
• Screen candidates / check references
• Make offer after checking references
• Career paths
• Consultant or permanent employee
• Management or hands-on
• Consider your skills, work you enjoy, and
  personal goals

6
Position Description

• Job title
• Position summary
• Immediate supervisor
• Number of direct reports
• Minimum and specific requirements
• Education, training, and certification needed
• Experience necessary
• Travel
• Salary range

7
Team Management

• Keeping team focused on tasks
• Set priorities based on organization IT goals
• Communicate with team
• Overall goal and objectives
• Proposed plan for achieving goal and objectives
• Encourage questions about plan and suggestions to
  improve and implement plan
• Be prepared to change the plan
• Meet regularly to assess and communicate
  performance status
• Listen carefully
• Make actions reflect priorities
• Be prepared to combat burnout
• Performance review official discussion of
  evaluation previously communicated to team member

8
Budgeting

• Quantitative expression of plan expressed in
  financial terms (dollars)
• Aid to coordinate and implement plan
• Advantages
• Forces planning
• Framework for judging performance
• Helps coordinate various business functions
• Capital vs. expense
• Capital used (depreciated) over multiple cycles
• Expense consumed in one cycle

9
IT Infrastructure

• Inventory
• WAN schematic telecommunications facilities
• LAN schematic
• Server hardware and software
• Server software
• Support services who provides help
• Vendor list who supplies products
• Know your users
• Planning downtime
• Testing new stuff
• Total cost of ownership more than purchase
  price
• Asset management keeping track of resources
• Write down and distribute documentation of assets

10
User Support

• Critical issues
• Centralize way user contact help desk
• Sufficient staffing to answer and resolve calls
• Help desk
• Phone system and call tracking system
• Procedures
• Access
• Tools
• Service level agreements

11
Network Operating Systems

• Windows Server family
• Easy to staff
• Security and stability issues
• Novell
• Easy to install and maintain
• Built to be secure
• Expensive
• Unix
• Time share system
• Requires expertise to make secure

12
Unix Configuration and Commands

• vi
• File location and management
• Routing
• User administration

13
Intrusion Detection

• Monitoring system for unauthorized access or use
• Intrusion detection systems (IDS)
• Detection
• Management
• Console
• Host IDS
• Monitors events on host
• Very responsive to intrusion
• Network IDS
• Two nics one to monitor network traffic other
  mngt
• Location issues
• Active vs. passive
• DMZ

14
Baseline

• Defense in depth
• Identify and remove unused applications and
  services
• Implement and enforce strong password policies
• Limit number of admin accounts
• Set account lockout policies
• Keep patches and hot fixes up-to-date
• Maintain logging of all activity
• Maintain backups
• Configure access control using groups and
  privileges
• Provide encryption capabilities
• Use firewalls and dmz to protect network

15
Disaster Recovery

• Sources human error, natural, internal attack,
  armed conflict, external attack
• Maintenance of data backup essential to recovery
• Plan
• List disasters covered by plan
• List contact information for recovery team
• Business impact assessment
• Business resumption procedures
• Data backup information and restore instructions
• Document plan
• Practice recovery

16
Forensics

• Investigation and analysis shouldnt change
  evidence
• Only manipulate copy of evidence
• Investigator must be competent
• All activities must be documented
• Process
• Preparation
• Collection
• Authentication
• Examination
• Analysis
• Documentation and reporting

17
Summary

• Final consists of ten short answer question
• List project management stages
• List topics in position description
• List items to communicate with team
• Give advantages of budgeting
• Explain total cost of ownership
• What are two factors critical to successful help
  desk
• Give correct syntax for Unix command to be
  specified at the final
• Describe the DMZ
• List content of disaster recovery plan
• List steps in forensics process

18
Questions?