Created by:Eric Hansen · SANS Institute

Download File

Internal SLA (Service Level Agreements) for Information Security (PDF, 1.60MB)Published: 06 Dec, 2001

Information security typically suffers due to a lack of serious commitment by an organization on the prevention side of security breaches. Many systems are compromised even after patches or hotfixes have been publicized. The premise of this must be to understand the relationship between the information technology (IT) team and the information security (IS) team. The information security team must view themselves as customers of the information technology team. The IS teams must also see that their activities are common elements within the IT teams service to the enterprise. IS' three legged stool of Confidentiality, Integrity and Availability certainly coincides with IT's Total Cost of Ownership (TCO) and Quality of Service (QoS) initiatives. The purpose of this paper is to advocate for the establishment of internal SLAs between the Information Technology team and the Information Security team.

Additional resources

Related courses

  • Slide 1 of 16

    FOR589: Cybercrime Investigations

    FOR589Digital Forensics and Incident Response

    FOR589: Cybercrime Intelligence

    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs

    View course detailsRegister

  • Slide 2 of 16

    FOR585: Smartphone Forensic Analysis In-Depth

    FOR585Digital Forensics and Incident Response, Artificial Intelligence

    FOR585: Smartphone Forensic Analysis In-Depth

    • GIAC Advanced Smartphone Forensics (GASF)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 22 Hands-On Labs
    • GIAC Advanced Smartphone Forensics (GASF)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 22 Hands-On Labs

    View course detailsRegister

  • Slide 3 of 16

    FOR478: Cyber Threat Intelligence Foundations

    FOR478Digital Forensics and Incident Response, Artificial Intelligence

    FOR498: Digital Acquisition and Rapid Triage

    • 2 Days (Instructor-Led)
    • 12 CPEs / 12 Hours (Self-Paced)
    • Labs: 8 Hands-On Labs
    • 2 Days (Instructor-Led)
    • 12 CPEs / 12 Hours (Self-Paced)
    • Labs: 8 Hands-On Labs

    View course detailsRegister

  • Slide 4 of 16

    FOR608: Enterprise-Class Incident Response & Threat Hunting

    FOR608Digital Forensics and Incident Response

    FOR608: Enterprise-Class Incident Response & Threat Hunting

    • GIAC Enterprise Incident Responder (GEIR)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs
    • GIAC Enterprise Incident Responder (GEIR)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs

    View course detailsRegister

  • Slide 5 of 16

    FOR518: Mac and iOS Forensic Analysis and Incident Response

    FOR518Digital Forensics and Incident Response

    FOR518: Mac and iOS Forensic Analysis and Incident Response

    • GIAC iOS and macOS Examiner (GIME)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 23 Hands-On Labs
    • GIAC iOS and macOS Examiner (GIME)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 23 Hands-On Labs

    View course detailsRegister

  • Slide 6 of 16

    FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics

    FOR508Digital Forensics and Incident Response, Artificial Intelligence

    FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics

    • GIAC Certified Forensic Analyst (GCFA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 35 Hands-On Labs
    • GIAC Certified Forensic Analyst (GCFA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 35 Hands-On Labs

    View course detailsRegister

  • Slide 7 of 16

    FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques

    FOR610Digital Forensics and Incident Response

    FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques

    • GIAC Reverse Engineering Malware (GREM)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 48 Hands-On Labs
    • GIAC Reverse Engineering Malware (GREM)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 48 Hands-On Labs

    View course detailsRegister

  • Slide 8 of 16

    FOR578: Cyber Threat Intelligence

    FOR578Digital Forensics and Incident Response

    FOR578: Cyber Threat Intelligence

    • GIAC Cyber Threat Intelligence (GCTI)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs
    • GIAC Cyber Threat Intelligence (GCTI)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs

    View course detailsRegister

  • Slide 9 of 16

    FOR509: Enterprise Cloud Forensics and Incident Response

    FOR509Digital Forensics and Incident Response

    FOR509: Enterprise Cloud Forensics and Incident Response

    • GIAC Cloud Forensics Responder (GCFR)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 23 Hands-On Labs
    • GIAC Cloud Forensics Responder (GCFR)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 23 Hands-On Labs

    View course detailsRegister

  • Slide 10 of 16

    FOR528: Ransomware and Cyber Extortion

    FOR528Digital Forensics and Incident Response

    FOR528: Ransomware and Cyber Extortion

    • 3 Days (Instructor-Led)
    • 24 CPEs / 24 Hours (Self-Paced)
    • Labs: 12 Hands-On Labs
    • 3 Days (Instructor-Led)
    • 24 CPEs / 24 Hours (Self-Paced)
    • Labs: 12 Hands-On Labs

    View course detailsRegister

  • Slide 11 of 16

    FOR577: LINUX Incident Response and Threat Hunting

    FOR577Digital Forensics and Incident Response, Artificial Intelligence

    FOR577: LINUX Incident Response and Threat Hunting

    • GIAC Linux Incident Responder (GLIR)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 29 Hands-On Labs
    • GIAC Linux Incident Responder (GLIR)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 29 Hands-On Labs

    View course detailsRegister

  • Slide 12 of 16

    FOR710: Reverse-Engineering Malware: Advanced Code Analysis

    FOR710Digital Forensics and Incident Response

    FOR710: Reverse-Engineering Malware: Advanced Code Analysis

    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 12 Hands-On Labs
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 12 Hands-On Labs

    View course detailsRegister

  • Slide 13 of 16

    FOR498: Digital Acquisition and Rapid Triage

    FOR498Digital Forensics and Incident Response

    FOR498: Digital Acquisition and Rapid Triage

    • GIAC Battlefield Forensics and Acquisition (GBFA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs
    • GIAC Battlefield Forensics and Acquisition (GBFA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs

    View course detailsRegister

  • Slide 14 of 16

    FOR563: Applied AI for Digital Forensics and Incident Response: Leveraging Local Large Language Models

    FOR563Digital Forensics and Incident Response, Artificial Intelligence

    FOR509: Enterprise Cloud Forensics and Incident Response

    • 1 Day (Instructor-Led)
    • 6 CPEs / 6 Hours (Self-Paced)
    • Labs: 4 Hands-On Labs
    • 1 Day (Instructor-Led)
    • 6 CPEs / 6 Hours (Self-Paced)
    • Labs: 4 Hands-On Labs

    View course detailsRegister

  • Slide 15 of 16

    FOR500: Windows Forensic Analysis

    FOR500Digital Forensics and Incident Response

    FOR500: Windows Forensic Analysis

    • GIAC Certified Forensic Examiner (GCFE)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 22 Hands-On Labs
    • GIAC Certified Forensic Examiner (GCFE)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 22 Hands-On Labs

    View course detailsRegister

  • Slide 16 of 16

    FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response

    FOR572Digital Forensics and Incident Response

    FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response

    • GIAC Network Forensic Analyst (GNFA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs
    • GIAC Network Forensic Analyst (GNFA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs

    View course detailsRegister

Read the original on sans.org ↗