Enterprise security architecture approach
Download as PPTX, PDF0 likes290 views
The document outlines an enterprise security architecture approach focused on cyber resilience, highlighting key components such as risk assessment, asset discovery, automated penetration testing, and vulnerability scanning. It emphasizes the importance of proactive strategies, including setting up observability and conducting thorough analyses of active directories and email systems. The approach aims to improve security readiness and mitigate risks associated with cyber threats.
Enterprise security architecture approach
- 1. ENTERPRISE SECURITY ARCHITECTURE APPROACH – CYBER RESILIENCE MAGANATHIN VEERARAGALOO 7TH DECEMBER 2021
- 2. APPROACH 1. Risk Assessment - Security Scorecard (free assessment) 2. Asset Discovery Bit Discovery (initially free) 3. Automated Penetration Testing (Blue/Red Team Approach) – no cost free tools 4. Vulnerability Scan – enterprise context (automated tools) –open source 5. Active Directory and Email Analysis (Email Rectification) 6. Setup Observability going forward – proactive approach 7. Resilience Approach (Recommendation) – going forward
- 3. 1. RISK ASSESSMENT Risk Assessment of current Environment Use Security Scorecard – http://www.securityscorecard.com
- 4. 2. ASSET DISCOVERY • You cannot protect what you don’t know • Asset Discovery using Bit Discovery - https://bitdiscovery.com
- 5. 3. AUTOMATED PENETRATION TESTING • Black-Box Test. • White-Box Test. • Network Service Penetration Testing. • Web Application Penetration Testing. • Wireless Penetration Testing. • Social Engineering Penetration Testing. • Physical Penetration Testing.
- 6. 4. VULNERABILITY SCAN • Vulnerability scanning is the process of identifying security weaknesses and flaws in systems and software running on them. This is an integral component of a vulnerability management program, which has one overarching goal – to protect the organization from breaches and the exposure of sensitive data. These programs rely on assessment to gauge security readiness and minimize risk, and vulnerability scanning is a critical tool in the cybersecurity toolbox. • There are two big challenges related to traditional vulnerability assessment – knowing what to scan and knowing when to scan: • Keeping an up-to-date asset inventory is an essential first step and requires its own set of tools and strategies. • Making sure that your vulnerability scanning tools cover non-traditional assets such as BYOD devices, IoTs, mobile assets, and cloud services is essential. • In a world where cyber threats can come from any
- 7. 5. ACTIVE DIRECTORY AND EMAIL ANALYSIS
- 10. Q&A