December 2013 - USHE-assess - devlists.utahtech.edu

Dixie Hotels
by Andrew Goble 17 Jan '14

17 Jan '14

Dixie's assessment is scheduled for January 27 - 31. Hotel reservations are at the Courtyard Marriott. Reservation for DAVE NIELSEN Confirmation Number: 89534538 Reservation for MARK WALTON Confirmation Number: 89534537 Reservation for CHUCK KIMBER Confirmation Number: 89534536 Reservation for DUSTIN UDY Confirmation Number: 89534534 Reservation for COREY ROACH Confirmation Number: 89534541 I'll start working on SANS 20 stuff, should get that to you guys after the new year. Thanks, Andrew

1 2

Weber Report
by Andrew Goble 02 Jan '14

02 Jan '14

Hi Guys, We need to get serious on getting a draft of the Weber report together, they are starting to ask about their report and when they can expect it. I've got some material back only from Dave at this point. Please get your materials together and send them to me. I'll compile and otherwise mangle them together and send out a draft for you to review before we provide it to Weber. I would like to have something to them by the end of next week at the latest. Thanks, Andrew

1 1

Report Template
by Andrew Goble 17 Dec '13

17 Dec '13

I've uploaded a document called report template up to ushedump. Its a rough outline of the format for this year's reports. I borrowed some of the language and formatting I liked from last year's reports, and have reworked some of the stuff as well. This does not include any specific findings or recommendations yet. Its also not prettied-up or formatted much beyond very basic headings and such; we can do that later. Please take a look and let me know if you have any serious structural issues with the way I have things laid out. Also, I'll take your report findings any time. I'd like to have something to Weber by the first week of the new year at the latest. If you have any questions, please let me know. Thanks, Andrew

1 0

WSU Report
by Andrew Goble 13 Dec '13

13 Dec '13

Just wanted to remind you all that I'll be needing your WSU material and write-ups. I'm working on the base template for the reports this year and will send that out when I have it ready. I'll taking some of the things I liked about the format last year and making some new changes as well. If you had a SANS control, please follow last year's format of: MATURITY SCORE: w/ reference to last year's score and any change ASSESSMENT FINDINGS: TESTS AND METRICS: RECOMMENDATIONS: REFERENCES: COMMENTS (optional): Any editorializing or other information you wish to offer the institution that doesn't fit in the above sections. Otherwise, please just organize your pen-test findings, screenshots, tool reports, etc. Maybe something like: FINDINGS: ie, what you were able to do, get to, etc. TESTS: How you did it. RECOMMENDATIONS: w/ a tie-back to specific SANS controls that would mitigate your attack vector. Thanks, Andrew

1 0

Strike Package
by Andrew Goble 10 Dec '13

10 Dec '13

Teh strike package is back up on 205.126.0.222

1 0

WSU Assessment Follow-up Stuff
by Andrew Goble 09 Dec '13

09 Dec '13

Hi guys, Sorry I meant to get this to you earlier but we've had a wild morning here today... overheating data centers and burst pipes and what not... Its a problem when its 25 degrees colder than what the systems were designed for. Remember that the payment process looks like this: Your institution invoices the U for $2500. ---> The U pays out with USHE HETI funds to your institution for the $2500 ---> Your institution pays you however they see fit, usually minus taxes and retirement and what not. All invoices for payment on the assessments should be forwarded to: Matt Timpson Accountant 101 Wasatch Drive, Room 215 Salt Lake City, UT 8112-1792 Email : mtimpson(a)media.utah.edu Phone: 801-585-0470 Matt should also be contacting you with copies of your travel reimbursements. I'm also going to get the strike package back online with its original IP address, 205.126.0.222, hopefully this afternoon, in case you need any information off of it to finish WSU stuff. More details on the report later when I get a free minute. Thanks, Andrew

1 0