Layered Approach - Information Security Recommendations
Download as PPT, PDF1 like1,135 views
The document outlines a comprehensive approach to information security utilizing a layered strategy, emphasizing access controls, application security through Citrix, and robust electronic security measures. It highlights the importance of security awareness training for employees, covering topics such as password strength, malware protection, and social engineering awareness. Additionally, it provides recommendations for end-user security configurations to mitigate data theft risks and enhance network security.
![02 SECURITY AWARENESS TRAINING Web-Based Training provided by [Vendor of Choice] Michael Kaishar, CISSP / Information Security Consultant](https://image.slidesharecdn.com/layeredapproachinformationsecurityrecommendations-13094826209391-phpapp02-110630201309-phpapp02/85/Layered-Approach-Information-Security-Recommendations-3-320.jpg)
![Security Awareness Training Security Awareness Training empowers employees through a web-based delivery system supporting Information Security Policies and Acceptable Use of Electronic Communications Systems at [COMPANY]. The web-based, e-learning courses are designed to help meet compliance requirements. Security Awareness Training Course Topics Passwords: how to create a strong password and the techniques hackers use to crack them. Viruses & Hoaxes: malware concepts and protective controls each employee can take. Social Engineering: gathering of private information through conversations, and how to avoid crossing the line from helpful to harmful. Michael Kaishar, CISSP / Information Security Consultant](https://image.slidesharecdn.com/layeredapproachinformationsecurityrecommendations-13094826209391-phpapp02-110630201309-phpapp02/85/Layered-Approach-Information-Security-Recommendations-4-320.jpg)
Layered Approach - Information Security Recommendations
- 1. 01 INFORMATION SECURITY Using a Layered Approach Michael Kaishar, CISSP Information Security Consultant
- 2. Defense-in-Depth Layered Approach Access Control Lists and Permissions controlled by GPO All applications published by Citrix Portal with SSL certificate security OS Hardening & Patching, BIOS Password, and Disable USB Subnets, VLANs, IDS/IPS, IPSec Firewalls, VPN, IDS/IPS Badges, PINS, Security Cameras, Locks, etc… Electronic Security Policy and Security Awareness Training Michael Kaishar, CISSP / Information Security Consultant Policies, Procedures, & Security Awareness Physical Security Perimeter Internal Network Host Application Data
- 3. 02 SECURITY AWARENESS TRAINING Web-Based Training provided by [Vendor of Choice] Michael Kaishar, CISSP / Information Security Consultant
- 4. Security Awareness Training Security Awareness Training empowers employees through a web-based delivery system supporting Information Security Policies and Acceptable Use of Electronic Communications Systems at [COMPANY]. The web-based, e-learning courses are designed to help meet compliance requirements. Security Awareness Training Course Topics Passwords: how to create a strong password and the techniques hackers use to crack them. Viruses & Hoaxes: malware concepts and protective controls each employee can take. Social Engineering: gathering of private information through conversations, and how to avoid crossing the line from helpful to harmful. Michael Kaishar, CISSP / Information Security Consultant
- 5. 03 END-USER SECURITY RECOMMENDATIONS FOR TECHNICAL SECURITY Michael Kaishar, CISSP / Information Security Consultant
- 6. End-User Security Technical Recommendation End-User Client Security In order to mitigate the risk of data theft it is necessary to provide a secure ePC (Thin) client solution. ePC Security & Feature Configuration Recommendations RDP / ICA Connection Only Boot from Hard Drive (Disable CD/DVD/USB Booting) Enable BIOS Passwords Latest XP Service Pack. DISABLE ALL USB PORTS!! Michael Kaishar, CISSP / Information Security Consultant
- 7. 04 Network Diagram RECOMMENDATION FOR A SECURE NETWORK Michael Kaishar, CISSP / Information Security Consultant
- 8. Network Security Recommendation Michael Kaishar, CISSP / Information Security Consultant