SecureAdvisor.com

	Mission
	Background
	Scope
	Projects
	Publications
	Bio
	Contact
	References

Sample Publications

Burton Group Methodologies & Best Practices (MBP) Program

The purpose of Burton Group’s Methodologies and Best Practices (MBP) document series is to distill the valuable experience our consultants have gained in hundreds of infrastructure planning engagements to help NSS clients plan out and execute their projects.

Security Project Cookbook

Author: Nigel Willson

While many organizations believe that security is achieved by a few technical measures - a carefully placed firewall here, a virus protection package there - security is actually a process, not just a product or technology issue. The Security Project Cookbook identifies the various stages of security projects, and contains valuable tips for starting on the right track, assessing requirements, developing architecture and migration strategy, selecting vendors and partners, planning security implementation, and conducting deployment. For each stage it identifies general best practices, pitfalls, and offers recommendations on how to proceed.

For more information or to obtain a copy contact: The Burton Group

Burton Group In-Depth Research:

Public Key Infrastructure Vendors, Interoperability & The Market

Co-Author: Nigel Willson

Burton Group offers objective research with an in-depth analysis that is unmatched in the industry. That research examines existing and emerging network technologies, architectures, and long-term product/vendor selections. Burton analysts and consultants identify technology positives and negatives from an IT-decision-maker's point of view.

Synopsis

While public key security’s potential is vast, public key infrastructure (PKI) continues to struggle with component interoperability, application interoperability, and interorganization interoperability issues that retard progress.

Ironically, in spite of PKI’s sophistication, passwords remain the dominant authentication technology. VeriSign, Entrust, Baltimore Technologies, and RSA Security are among the key vendors trying to break PKI technologies out of the early-stage chicken-and-egg cycle.

For more information or to obtain a copy contact: The Burton Group

SANS Institute Computer Incident Response Guidebook

G4.1 - Computer Security Incident Handling: Step-by-Step

Co-Author: Nigel Willson

A fascinating guide that reflects the experience of people who together have handled more than 100 separate major computer incidents. Their expertise shows. If you are certain your computers will never by cracked, you can do without this book. Everyone else should have it on hand, if only for its prescription for what to do if you haven't prepared in advance.

The guide describes six phases:

Preparation (42 actions)
Identification (6 actions)
Containment (17 actions)
Eradication (10 actions)
Recovery (6 actions)
Follow-up (9 actions

e-Business Advisor Magazine

Feature Article

INTERNET AND INTRANET DATABASE DEVELOPMENT

Intranet Security: An Investment in the Enterprise

Simply because data on an Intranet is behind the company firewall doesn't mean it's safe. Here are some issues to consider when securing your Intranet applications.

By Nigel P. Willson

Article Summary: Since the advent of Internet technology and Intranets, the return on investment is clear. A secure Intranet is the key enabling technology that facilitates the ability to exchange goods, services, and information electronically in a stable, well-managed infrastructure. This provides interaction with customers, partners, and employees, and promotes loyalty and allows the enterprise to gain a competitive edge.

http://advisor.com/Articles.nsf/aid/WILLN01