Monday, 11 September 2017 10:33

IT DEFENSE IN DEPTH PART II

Written by
Rate this item
(0 votes)

 

 

In our last blog we started talking about the different layers of security necessary to fully defend your data and business integrity. Today we will look at the human aspect of it, and network defenses. The human layer refers to the activities that your employees perform. 95% of security incidences involve human error. Ashley Schwartau of The Security Awareness Company says the two biggest mistakes a company can make are “assuming their employees know internal security policies" and “assuming their employees care enough to follow policy”.

Here are some ways Hackers exploit human foibles:

  • Guessing or brute-force solving passwords
  • Tricking employees to open compromised emails or visit compromised websites
  • Tricking employees to divulge sensitive information

For the human layer, you need to:

  • Enforce mandatory password changes every 30 to 60 days, or after you lose an employee
  • Train your employees on best practices every 6 months
  • Provide incentives for security conscious behavior.
  • Distribute sensitive information on a need to know basis
  • Require two or more individuals to sign off on any transfers of funds,
  • Watch for suspicious behavior

The network layer refers to software attacks delivered online. This is by far the most common vector for attacks, affecting 61% of businesses last year. There are many types of malware: some will spy on you, some will siphon off funds, some will lock away your files.

However, they are all transmitted in the same way:

  • Spam emails or compromised sites
  • “Drive by” downloads, etc.

To protect against malware

  • Don’t use business devices on an unsecured network.
  • Don’t allow foreign devices to access your wifi network.
  • Use firewalls to protect your network
  • Make sure your Wi­Fi network is encrypted.
  • Use antivirus software and keep it updated. Although it is not the be all, end all of security, it will protect you from the most common viruses and help you to notice irregularities
  • Use programs that detect suspicious software behavior

The mobile layer refers to the mobile devices used by you and your employees. Security consciousness for mobile devices often lags behind consciousness about security on otherplatforms, which is why there are 11.6 million infected devices at any given moment.

There are several common vectors for compromising mobile devices

  • Traditional malware
  • Malicious apps
  • Network threats

To protect your mobile devices you can:

  • Use secure passwords
  • Use encryption
  • Use reputable security apps
  • Enable remote wipe options.

Just as each line of defense would have been useless without an HQ to move forces to where they were needed most, IT defense-in-depth policy needs to have a single person, able to monitor each layer for suspicious activity and respond accordingly.

Read 68099 times Last modified on Monday, 11 September 2017 10:47
Jordon Darling - CISSP

Jordon is the President/CEO of  HITECH. He is a business minded security professional who has a passion for people and small business.  Some of his certifications include: CISSP, CSSA, MCPS, MCNPS, MS, SA

24639 comments

  • Comment Link olympic 2014 ca. 44 marc edouard vlasic red stitched nhl jersey Wednesday, 29 May 2019 05:48 posted by olympic 2014 ca. 44 marc edouard vlasic red stitched nhl jersey

    new york yankees visor hat templates,new york mets winter hats australia,nfl playoff knit hats mens,san francisco giants rhinestone hat upgrade
    olympic 2014 ca. 44 marc edouard vlasic red stitched nhl jersey http://www.tomsdeli.net/olympic-2014-ca.-44-marc-edouard-vlasic-red-stitched-nhl-jersey-nflusa_uk

  • Comment Link wtfthemes Wednesday, 29 May 2019 02:25 posted by wtfthemes

    cleveland cavaliers 30 dahntay jones new swingman alternate navy jersey nike lebron 10 cheap black and white shoes cincinnati reds newborn hat utah women nike detroit lions 94 lawrence jackson elite white nfl jersey sale toronto blue jays hat 2003 updates youth nike seattle seahawks 90 jason jones limited white nfl jersey sale
    wtfthemes http://www.wtfthemes.com/

  • Comment Link adidas golden knights 18 james neal white road authentic 2018 stanley cup final stitched nhl jersey Wednesday, 29 May 2019 01:14 posted by adidas golden knights 18 james neal white road authentic 2018 stanley cup final stitched nhl jersey

    nike hyperrev 2017 alle weiß,nike sf-af1 weiß gelb für verkauf,nike air more uptempo frau turnschuhe,nike air max plus premium
    adidas golden knights 18 james neal white road authentic 2018 stanley cup final stitched nhl jersey http://www.discodroid.com/adidas-golden-knights-18-james-neal-white-road-authentic-2018-stanley-cup-final-stitched-nhl-jersey-nflusa_uk

  • Comment Link lifencode Tuesday, 28 May 2019 15:40 posted by lifencode

    toronto maple leafs tie domi 28 green replica jersey sale nike air max 93 alle schwarz schuhe air jordan 13 gs price graph youth nike dallas cowboys 8 troy aikman limited white nfl jersey sale youth mlb angels 43 garrett richards green salute to service stitched youth mlb jersey adidas nmd vs nike huarache
    lifencode http://www.lifencode.com/

  • Comment Link nike mercurial superfly v fg jaune Tuesday, 28 May 2019 11:41 posted by nike mercurial superfly v fg jaune

    toronto blue jays weed hats fitted,wholesale san francisco giants hats list,miami dolphins stocking hats ebay,womens red sox hat camo guide
    nike mercurial superfly v fg jaune http://www.topchoko.com/nike-mercurial-superfly-v-fg-jaune-wholesale_fr

  • Comment Link read this,read more,read here,find here,find this,find more,Click Here,Clicking Here,Go Here,Going Here,Read This,Read More,Find Out More,Discover More,Learn More,Read More Here,Discover More Here,Learn More Here,Click This Link,Visit This Link,Homepage,H Tuesday, 28 May 2019 09:23 posted by read this,read more,read here,find here,find this,find more,Click Here,Clicking Here,Go Here,Going Here,Read This,Read More,Find Out More,Discover More,Learn More,Read More Here,Discover More Here,Learn More Here,Click This Link,Visit This Link,Homepage,H

    I have been exploring for a little for any high-quality articles or blog posts on this sort of house . Exploring in Yahoo I eventually stumbled upon this web site. Studying this information So i’m satisfied to convey that I have a very excellent uncanny feeling I came upon exactly what I needed. I most surely will make certain to do not fail to remember this site and provides it a look on a constant basis.

  • Comment Link Wanda Tuesday, 28 May 2019 08:08 posted by Wanda

    Hurrah! After all I got a blog from where I know how to genuinely obtain helpful data concerning my study and knowledge.

  • Comment Link engringo Tuesday, 28 May 2019 06:36 posted by engringo

    toronto maple leafs tie domi 28 green replica jersey sale nike air max 93 alle schwarz schuhe air jordan 13 gs price graph youth nike dallas cowboys 8 troy aikman limited white nfl jersey sale youth mlb angels 43 garrett richards green salute to service stitched youth mlb jersey adidas nmd vs nike huarache
    engringo http://www.engringo.com/

  • Comment Link Rochelle Tuesday, 28 May 2019 05:59 posted by Rochelle

    It's amazing in support of me to have a web site, which is
    helpful designed for my know-how. thanks admin

  • Comment Link Gertude Vergeer Tuesday, 28 May 2019 05:52 posted by Gertude Vergeer

    Woah! I'm really loving the template/theme of this website. It's simple, yet effective. A lot of times it's very hard to get that "perfect balance" between user friendliness and visual appearance. I must say that you've done a excellent job with this. Also, the blog loads extremely quick for me on Opera. Superb Blog!

Leave a comment

Make sure you enter all the required information, indicated by an asterisk (*). HTML code is not allowed.