What the Information Security manager should aim for <\/p>\n
<\/p>\n
\n– I will identify & locate my critical data
\n– I will make sure that critical data is not placed in insecure locations eg. a pen drive or a PC with no password
\n– I will have a relevant set of policies and procedures in place
\n– I will see that my password policy is implemented across all my applications
\n– I will ensure that users are not given administrative rights to their PCs
\n– I will have a good asset & license management system so that I
\n a) know what I have
\n b) can comply with licensing requirements
\n c) can deploy my assets based on need and priority
\n– I will make sure that I have a comprehensive anti-virus solution that
\n a) is installed on all nodes
\n b) is set to run scans regularly
\n c) has the latest virus definitions on all nodes
\n– I will ensure that I have a good patch management solution in place
\n– I will evaluate my backup process and ensure that all critical data is backed up and is retreivable
\n– I will audit all administrative access; make sure
\n a) it is given only to those who require it
\n b) administrators do not have access to systems where they are not administrators
\n c) that administrative activities are logged and that the admins cannot change these logs
\n d) I have a monitoring system that flags unusual administrative activities
\n– I will ensure that all unnecessary ports are closed, especially on external facing systems
\n– I will ensure that default passwords are not used on any of my network devices
\n– I will have an effective change monitoring system in place for
\n – configurations
\n – new software installations
\n – new asset installation
\n – access rights modification; especially when admin rights are given
\n– I will do a vulnerability assessment and penetration testing exercise of all my critical systems and those that face the outside world<\/p>\n
<\/p>\n
and the most difficult one…<\/p>\n
<\/p>\n
– I will try to bring in a culture of security into the organisation<\/p>\n","protected":false},"excerpt":{"rendered":"
What the Information Security manager should aim for <\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[52,8,24,78,12],"tags":[24,115,33],"class_list":["post-890","post","type-post","status-publish","format-standard","hentry","category-bcpdr","category-erp","category-grc","category-information-technology","category-itsec","tag-grc","tag-resolutions-for-2010","tag-security"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9AH7Q-em","_links":{"self":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts\/890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/comments?post=890"}],"version-history":[{"count":0,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/posts\/890\/revisions"}],"wp:attachment":[{"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/media?parent=890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/categories?post=890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qadit.com\/blog\/wp-json\/wp\/v2\/tags?post=890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}