Site Security Planning

The Case of Exploration Air

For a more in-depth view of the thread-assessment process, consider a hypothetical example. A network administrator planned to secure a Web site at his company, Exploration Air. He began by analyzing the security requirements of a Web site that maintains customer informationincluding frequent flyer milesfor members of its Flyers Club.

See the following:

• Assigning Threats and Potential Damage

• Assigning Relative Costs to Security