Monday, 11 September 2017 10:33

IT DEFENSE IN DEPTH PART II

Written by
Rate this item
(0 votes)

 

 

In our last blog we started talking about the different layers of security necessary to fully defend your data and business integrity. Today we will look at the human aspect of it, and network defenses. The human layer refers to the activities that your employees perform. 95% of security incidences involve human error. Ashley Schwartau of The Security Awareness Company says the two biggest mistakes a company can make are “assuming their employees know internal security policies" and “assuming their employees care enough to follow policy”.

Here are some ways Hackers exploit human foibles:

  • Guessing or brute-force solving passwords
  • Tricking employees to open compromised emails or visit compromised websites
  • Tricking employees to divulge sensitive information

For the human layer, you need to:

  • Enforce mandatory password changes every 30 to 60 days, or after you lose an employee
  • Train your employees on best practices every 6 months
  • Provide incentives for security conscious behavior.
  • Distribute sensitive information on a need to know basis
  • Require two or more individuals to sign off on any transfers of funds,
  • Watch for suspicious behavior

The network layer refers to software attacks delivered online. This is by far the most common vector for attacks, affecting 61% of businesses last year. There are many types of malware: some will spy on you, some will siphon off funds, some will lock away your files.

However, they are all transmitted in the same way:

  • Spam emails or compromised sites
  • “Drive by” downloads, etc.

To protect against malware

  • Don’t use business devices on an unsecured network.
  • Don’t allow foreign devices to access your wifi network.
  • Use firewalls to protect your network
  • Make sure your Wi­Fi network is encrypted.
  • Use antivirus software and keep it updated. Although it is not the be all, end all of security, it will protect you from the most common viruses and help you to notice irregularities
  • Use programs that detect suspicious software behavior

The mobile layer refers to the mobile devices used by you and your employees. Security consciousness for mobile devices often lags behind consciousness about security on otherplatforms, which is why there are 11.6 million infected devices at any given moment.

There are several common vectors for compromising mobile devices

  • Traditional malware
  • Malicious apps
  • Network threats

To protect your mobile devices you can:

  • Use secure passwords
  • Use encryption
  • Use reputable security apps
  • Enable remote wipe options.

Just as each line of defense would have been useless without an HQ to move forces to where they were needed most, IT defense-in-depth policy needs to have a single person, able to monitor each layer for suspicious activity and respond accordingly.

Read 7793 times Last modified on Monday, 11 September 2017 10:47
Jordon Darling - CISSP

Jordon is the President/CEO of  HITECH. He is a business minded security professional who has a passion for people and small business.  Some of his certifications include: CISSP, CSSA, MCPS, MCNPS, MS, SA

746 comments

  • Comment Link bostbarge Monday, 24 June 2019 07:01 posted by bostbarge

    san francisco 49ers womens legend logo dri fit nfl t shirt blue billig oakland as bling hat billig womens 2012 new nfl jerseys houston texans 99 j.j. watt white color breast cancer awareness fashion jersey billig nike free 5.0 all black australia billig
    bostbarge

  • Comment Link nasdaqim Monday, 24 June 2019 05:40 posted by nasdaqim

    asics gel saga gris verde nike hyperadapt 1.0 negro blanco azul zapatos on venta lebron 10(x) low todas negro nike air max 98 todas negro nero rosa blu air perce femminile heels nike solarsoft kd slide bianca blu scarpe
    nasdaqim

  • Comment Link kenchona Monday, 24 June 2019 05:38 posted by kenchona

    oakland raiders replica jersey for cheap custom authentic michigan football jersey uk sale jordan retro 10 x under armour clutchfit drive low vert nike kd 7 prm blanco mens 2015 nike nfl philadelphia eagles t shirts 32
    kenchona

  • Comment Link dcpretire Monday, 24 June 2019 04:05 posted by dcpretire

    2014 new nfl jerseys oakland raiders 34 bo jackson black team color limited jerseys limited jerome murphy mens jersey denver broncos 45 road white nfl philadelphia flyers 16 bobby clarke green salute to service stitched nhl jersey nike 49ers 69 mike mcglinchey black youth stitched nfl limited rush jersey cubs 12 kyle schwarber royal quot schwarbs quot players weekend authentic stitched baseball jersey nike steelers 81 jesse james black mens stitched nfl limited gold rush jersey
    dcpretire

  • Comment Link loveaita Monday, 24 June 2019 03:52 posted by loveaita

    nike lebron james ambassador 10 x viola asics gel lyte iii varsity verde
    loveaita

  • Comment Link bindonfarm Sunday, 23 June 2019 23:49 posted by bindonfarm

    oakland raiders replica jersey for cheap custom authentic michigan football jersey uk sale jordan retro 10 x under armour clutchfit drive low vert nike kd 7 prm blanco mens 2015 nike nfl philadelphia eagles t shirts 32
    bindonfarm http://www.bindonfarm.com/

  • Comment Link rgdvDeeby Sunday, 23 June 2019 21:14 posted by rgdvDeeby

    [url=http://bestbuymaleenhancement.com/]viagra[/url] viagra generic viagra

  • Comment Link nbanetflow Sunday, 23 June 2019 14:12 posted by nbanetflow

    toronto maple leafs bryan mccabe 24 white authentic jersey sale billig nike dunk sb all blue for canada billig nike cortez cheap all grey shoes billig nike air force one kids silver red billig uk white sale adidas ado pure boost billig nike kd 9 elite 4k billig
    nbanetflow

  • Comment Link ellaries Sunday, 23 June 2019 07:09 posted by ellaries

    oakland raiders replica jersey for cheap custom authentic michigan football jersey uk sale jordan retro 10 x under armour clutchfit drive low vert nike kd 7 prm blanco mens 2015 nike nfl philadelphia eagles t shirts 32
    ellaries

  • Comment Link mybildverlag Sunday, 23 June 2019 02:46 posted by mybildverlag

    oakland raiders replica jersey for cheap custom authentic michigan football jersey uk sale jordan retro 10 x under armour clutchfit drive low vert nike kd 7 prm blanco mens 2015 nike nfl philadelphia eagles t shirts 32
    mybildverlag

Leave a comment

Make sure you enter all the required information, indicated by an asterisk (*). HTML code is not allowed.