Using checklists to make better best

Craig Wright, Tanveer Zia

Research output: Book chapter/Published conference paperConference paper

25 Downloads (Pure)

Abstract

The more routine a task is we see the greater the need for a checklist. Even the smartest of us can forget where we parked our cars on returning from a long flight. So, the question is, why not create a straightforward checklist that will improve system management and security? In Information Technology operations, the vast majority of skilled people have re-built servers, but in an incident response situation, it can be unforgivable to overlook a serious security configuration simply because in the stress of the environment causes one to lose track of which stage they were on while being interrupted and multitasking. We show that the use of standard checklists and flowcharts created by the individual make for better results even in daily tasks. This paper presents the results of an experiment into the use of checklists by incident responders. It demonstrates how basic checklists can improve an organisation's security.
Original languageEnglish
Title of host publication9th Australian Information Security Management Conference (secau Security Congress 2011)
EditorsCraig Valli
Place of PublicationPerth
PublisherSecAU Security Congress, ECU
Pages245-251
Number of pages7
Publication statusPublished - 2011
EventAustralian Information Security Management Conference - Perth, Australia
Duration: 05 Dec 201107 Dec 2011

Conference

ConferenceAustralian Information Security Management Conference
CountryAustralia
Period05/12/1107/12/11

Fingerprint

Multitasking
Information technology
Railroad cars
Servers
Experiments

Cite this

Wright, C., & Zia, T. (2011). Using checklists to make better best. In C. Valli (Ed.), 9th Australian Information Security Management Conference (secau Security Congress 2011) (pp. 245-251). Perth: SecAU Security Congress, ECU.
Wright, Craig ; Zia, Tanveer. / Using checklists to make better best. 9th Australian Information Security Management Conference (secau Security Congress 2011). editor / Craig Valli. Perth : SecAU Security Congress, ECU, 2011. pp. 245-251
@inproceedings{8b339b0d011b48c4a98d9063113f56c2,
title = "Using checklists to make better best",
abstract = "The more routine a task is we see the greater the need for a checklist. Even the smartest of us can forget where we parked our cars on returning from a long flight. So, the question is, why not create a straightforward checklist that will improve system management and security? In Information Technology operations, the vast majority of skilled people have re-built servers, but in an incident response situation, it can be unforgivable to overlook a serious security configuration simply because in the stress of the environment causes one to lose track of which stage they were on while being interrupted and multitasking. We show that the use of standard checklists and flowcharts created by the individual make for better results even in daily tasks. This paper presents the results of an experiment into the use of checklists by incident responders. It demonstrates how basic checklists can improve an organisation's security.",
keywords = "Open access version available, Checklists, Incident handling, Incident response, Security",
author = "Craig Wright and Tanveer Zia",
note = "Imported on 03 May 2017 - DigiTool details were: publisher = Perth: SecAU Security Congress, ECU, 2011. editor/s (773b) = Prof Craig Valli; Event dates (773o) = 5-7 December 2011; Parent title (773t) = Australian Information Security Management Conference.",
year = "2011",
language = "English",
pages = "245--251",
editor = "Craig Valli",
booktitle = "9th Australian Information Security Management Conference (secau Security Congress 2011)",
publisher = "SecAU Security Congress, ECU",

}

Wright, C & Zia, T 2011, Using checklists to make better best. in C Valli (ed.), 9th Australian Information Security Management Conference (secau Security Congress 2011). SecAU Security Congress, ECU, Perth, pp. 245-251, Australian Information Security Management Conference, Australia, 05/12/11.

Using checklists to make better best. / Wright, Craig; Zia, Tanveer.

9th Australian Information Security Management Conference (secau Security Congress 2011). ed. / Craig Valli. Perth : SecAU Security Congress, ECU, 2011. p. 245-251.

Research output: Book chapter/Published conference paperConference paper

TY - GEN

T1 - Using checklists to make better best

AU - Wright, Craig

AU - Zia, Tanveer

N1 - Imported on 03 May 2017 - DigiTool details were: publisher = Perth: SecAU Security Congress, ECU, 2011. editor/s (773b) = Prof Craig Valli; Event dates (773o) = 5-7 December 2011; Parent title (773t) = Australian Information Security Management Conference.

PY - 2011

Y1 - 2011

N2 - The more routine a task is we see the greater the need for a checklist. Even the smartest of us can forget where we parked our cars on returning from a long flight. So, the question is, why not create a straightforward checklist that will improve system management and security? In Information Technology operations, the vast majority of skilled people have re-built servers, but in an incident response situation, it can be unforgivable to overlook a serious security configuration simply because in the stress of the environment causes one to lose track of which stage they were on while being interrupted and multitasking. We show that the use of standard checklists and flowcharts created by the individual make for better results even in daily tasks. This paper presents the results of an experiment into the use of checklists by incident responders. It demonstrates how basic checklists can improve an organisation's security.

AB - The more routine a task is we see the greater the need for a checklist. Even the smartest of us can forget where we parked our cars on returning from a long flight. So, the question is, why not create a straightforward checklist that will improve system management and security? In Information Technology operations, the vast majority of skilled people have re-built servers, but in an incident response situation, it can be unforgivable to overlook a serious security configuration simply because in the stress of the environment causes one to lose track of which stage they were on while being interrupted and multitasking. We show that the use of standard checklists and flowcharts created by the individual make for better results even in daily tasks. This paper presents the results of an experiment into the use of checklists by incident responders. It demonstrates how basic checklists can improve an organisation's security.

KW - Open access version available

KW - Checklists

KW - Incident handling

KW - Incident response

KW - Security

M3 - Conference paper

SP - 245

EP - 251

BT - 9th Australian Information Security Management Conference (secau Security Congress 2011)

A2 - Valli, Craig

PB - SecAU Security Congress, ECU

CY - Perth

ER -

Wright C, Zia T. Using checklists to make better best. In Valli C, editor, 9th Australian Information Security Management Conference (secau Security Congress 2011). Perth: SecAU Security Congress, ECU. 2011. p. 245-251