Target Audience: The goal of this three-hour clinic is to provide attendees with a general awareness of the common types of security threats and offer practical solutions to protect their organizations. Attendees will learn about recommended security policies, practices, and procedures to establish a long-term approach to proactively manage systems that are exposed to the Internet. Attendees will see demonstrations of security monitoring and evaluation tools, which they can take back to their organizations.This course is intended IT decision makers and systems engineers and who are responsible for establishing security policies and procedures for an organization. It is also intended for Web administrators, and Internet and intranet systems engineers who are responsible for managing the day-to-day operations of Web sites.

Pre-requisites: Before attending this course, students must be familiar with Windows 2000 security features including:

• Security templates
• Group Policy
• Account management.

Purpose: After attending the clinic, attendees will have a general awareness of the common types of security attacks and knowledge of practical solutions to protect organizations from internal and external based threats.Clinic presentation topics include identifying security risks; performing a risk assessment; planning a security strategy; securing the perimeter network; securing servers, workstations, and services; responding to a security incident; maintaining network security.