Comments on: On standard configurations http://www.cerias.purdue.edu/weblogs/spaf/general/post-82/on-standard-configurations/ Privacy, Security and Information Assurance issues Fri, 16 May 2008 06:12:21 +0000 http://wordpress.org/?v=2.5.1 By: Steve Lodin http://www.cerias.purdue.edu/weblogs/spaf/general/post-82/on-standard-configurations/#comment-47323 Steve Lodin Sat, 14 Apr 2007 02:25:26 +0000 http://www.cerias.purdue.edu/weblogs/spaf/general/post-82/#comment-47323 Well, the devil is in the details. At the very high level, the scope has not been defined. - which agencies and departments are covered by this? - what types of systems are covered, only general purpose desktop platforms? Mandating that every piece of computing equipment that runs Windows (R) regardless of its computing mission must comply will cause a severe shortage of available solutions, especially in my industry. Thankfully, my colleagues in the DoD and VA have recognized the potential problem and started working on their exception granting approval process. I'm not sure that Alan and his cohorts at SANS are helping here either. Steve Well, the devil is in the details. At the very high level, the scope has not been defined.

- which agencies and departments are covered by this?
- what types of systems are covered, only general purpose desktop platforms?

Mandating that every piece of computing equipment that runs Windows (R) regardless of its computing mission must comply will cause a severe shortage of available solutions, especially in my industry. Thankfully, my colleagues in the DoD and VA have recognized the potential problem and started working on their exception granting approval process.

I’m not sure that Alan and his cohorts at SANS are helping here either.

Steve

]]>