Advanced Security: Difference between revisions
From GCA ACT
Jump to navigationJump to search
No edit summary |
No edit summary |
||
(2 intermediate revisions by the same user not shown) | |||
Line 29: | Line 29: | ||
|- | |- | ||
| style="border: none; background-color: transparent; vertical-align: top; text-align: center; width: 20%; font-weight: bold;" | | | style="border: none; background-color: transparent; vertical-align: top; text-align: center; width: 20%; font-weight: bold;" | | ||
Vulnerability Management | Threat & Vulnerability Management | ||
<br> | <br> | ||
<br> | <br> | ||
[[File:ACT_Vulnerability_Management_Icon.svg|frameless|60px|center|link=Vulnerability Management]] | [[File:ACT_Vulnerability_Management_Icon.svg|frameless|60px|center|link=Threat & Vulnerability Management]] | ||
<br> | <br> | ||
<div style="text-align: left; font-weight: normal; font-size: 75%;">Conduct regular assessments to identify and address system vulnerabilities.</div> | <div style="text-align: left; font-weight: normal; font-size: 75%;">Conduct regular assessments to identify and address system vulnerabilities.</div> | ||
| style="border: none; background-color: #EBEBEB; vertical-align: top; text-align: center; width: 20%; font-weight: bold;" | | | style="border: none; background-color: #EBEBEB; vertical-align: top; text-align: center; width: 20%; font-weight: bold;" | | ||
Penetration Testing | Attack & Penetration Testing | ||
<br> | <br> | ||
<br> | <br> | ||
[[File:ACT_Penetration_Testing_Icon.svg|frameless|60px|center|link=Penetration Testing]] | [[File:ACT_Penetration_Testing_Icon.svg|frameless|60px|center|link=Attack & Penetration Testing]] | ||
<br> | <br> | ||
<div style="text-align: left; font-weight: normal; font-size: 75%;">Simulate real-world attacks to evaluate the security of a system or network.</div> | <div style="text-align: left; font-weight: normal; font-size: 75%;">Simulate real-world attacks to evaluate the security of a system or network.</div> |
Latest revision as of 19:56, 26 September 2023
Network Segmentation
Divide networks into smaller, isolated segments to limit the impact of a potential breach.
|
Intrusion Detection & Prevention Systems
Deploy advanced systems to detect and prevent network intrusions.
|
Endpoint Protection
Implement robust antivirus and endpoint security solutions to safeguard individual devices.
|
Security Information & Event Management
Utilize SIEM tools to monitor and analyze security events across the network.
| |
Threat & Vulnerability Management
Conduct regular assessments to identify and address system vulnerabilities.
|
Attack & Penetration Testing
Simulate real-world attacks to evaluate the security of a system or network.
|
Incident Response Planning & Testing
Develop and test an incident response plan to efficiently handle cybersecurity incidents.
|
Secure Configuration Management
Establish and maintain secure configuration settings for all systems and devices.
| |
Change Management
Implement structured processes to manage changes in a controlled and efficient manner.
|
Identity & Access Management
Implement proper user access controls, management processes, and regularly review user privileges.
|
Patch Management
Establish processes to apply patches and updates to systems and applications in a timely manner.
|
Security Awareness Training & Testing
Provide regular training and education on cybersecurity best practices to all personnel; and periodically test that knowledge.
|