Defence in Depth, do you need client/server edge security?
Ensure all passwords used in the organisations are strong – over 8 characters long containing a mix of letters and numbers and no plain words.
Try experimenting with pass phrases to help users remember these stronger passwords and enforce a regular password change policy – maybe every 30 days. Users also need to be fully warned about attempts to “phish” their passwords and the danger of unsolicited email attachments.
Review the systems and services that users can access. Question why a user needs access to a certain system, and if there is no reasonable business justification consider measures to remove that user from such access.
It has to be Defence in Depth
Each measure you undertake to protect your environment is another step a potential hacker will need to go through when mounting an attack. Think of these as obstacles strewn in the hackers way as they pursue you down the alleyway.
Instead of relying on a single dustbin thrown in their tracks get as many barriers in place as soon as you can, each of which will help to build delay and hopefully trip up the pursuer altogether.
Hopefully you will now see the benefits of having security in depth across the organisation.
Far from being an expensive insurance policy a secured IT environment, enabled with appropriate tools and technologies, is a must have in today’s business world.
Recommended Articles
blog comments powered by Disqus
