Advanced Security: Difference between revisions
From GCA ACT
Jump to navigationJump to search
No edit summary |
No edit summary |
||
Line 3: | Line 3: | ||
| colspan="3" style="border: none; background-color: transparent; text-align: center; vertical-align: middle;" | <div style="display: flex; justify-content: center;"><div style="position:relative; text-align:center; font-weight:bold; z-index: 1;">[[File:Elephants.png|frameless|225px|center|link=Advanced_Protection]]</div></div> | | colspan="3" style="border: none; background-color: transparent; text-align: center; vertical-align: middle;" | <div style="display: flex; justify-content: center;"><div style="position:relative; text-align:center; font-weight:bold; z-index: 1;">[[File:Elephants.png|frameless|225px|center|link=Advanced_Protection]]</div></div> | ||
|- | |- | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:network-segmentation.png|frameless|60px|left]]" alt="Network Segmentation"></div><div style="position:relative; text-align: left; z-index:1;">Network Segmentation<br>Divide networks into smaller, isolated segments to limit the impact of a potential breach.</div></div> | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:intrusion-protection.png|frameless|60px|left]]" alt="Intrusion Detection & Prevention Systems"></div><div style="position:relative; text-align: left; z-index:1;">Intrusion Detection & Prevention Systems<br>Deploy advanced systems to detect and prevent network intrusions.</div></div> | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:endpoint-protection.png|frameless|60px|left]]" alt="Endpoint Protection"></div><div style="position:relative; text-align: left; z-index:1;">Endpoint Protection<br>Implement robust antivirus and endpoint security solutions to safeguard individual devices.</div></div> | ||
|- | |- | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:security-information-event-management.png|frameless|60px|left]]" alt="Security Information & Event Management"></div><div style="position:relative; text-align: left; z-index:1;">Security Information & Event Management<br>Utilize SIEM tools to monitor and analyze security events across the network.</div></div> | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:vulnerability-management.png|frameless|60px|left]]" alt="Vulnerability Management"></div><div style="position:relative; text-align: left; z-index:1;">Vulnerability Management<br>Conduct regular assessments to identify and address system vulnerabilities.</div></div> | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:penetration-testing.png|frameless|60px|left]]" alt="Penetration Testing"></div><div style="position:relative; text-align: left; z-index:1;">Penetration Testing</div></div> | ||
|- | |- | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:incident-response.png|frameless|60px|left]]" alt="Incident Response Planning"></div><div style="position:relative; text-align: left; z-index:1;">Incident Response Planning<br>Develop and test an incident response plan to efficiently handle cybersecurity incidents.</div></div> | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:configuration-management.png|frameless|60px|left]]" alt="Secure Configuration Management"></div><div style="position:relative; text-align: left; z-index:1;">Secure Configuration Management<br>Establish and maintain secure configuration settings for all systems and devices.</div></div> | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:change-management.png|frameless|60px|left]]" alt="Change Management"></div><div style="position:relative; text-align: left; z-index:1;">Change Management</div></div> | ||
|- | |- | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:identity-access-management.png|frameless|60px|left]]" alt="Identity & Access Management"></div><div style="position:relative; text-align: left; z-index:1;">Identity & Access Management<br>Implement proper user access controls, management processes, and regularly review user privileges.</div></div> | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:patch-management.png|frameless|60px|left]]" alt="Patch Management"></div><div style="position:relative; text-align: left; z-index:1;">Patch Management<br>Establish processes to apply patches and updates to systems and applications in a timely manner.</div></div> | ||
| style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style=" | | style="border: none; background-color: transparent; text-align: left; vertical-align: middle;" | <div style="display: flex; align-items: center;"><div style="padding-right: 10px;"><img src="[[File:security-awareness.png|frameless|60px|left]]" alt="Security Awareness Training & Testing"></div><div style="position:relative; text-align: left; z-index:1;">Security Awareness Training & Testing<br>Provide regular training and education on cybersecurity best practices to all personnel; and periodically test that knowledge.</div></div> | ||
|} | |} |
Revision as of 00:08, 17 July 2023
<img src="" alt="Network Segmentation"> Network Segmentation Divide networks into smaller, isolated segments to limit the impact of a potential breach. |
<img src="" alt="Intrusion Detection & Prevention Systems"> Intrusion Detection & Prevention Systems Deploy advanced systems to detect and prevent network intrusions. |
<img src="" alt="Endpoint Protection"> Endpoint Protection Implement robust antivirus and endpoint security solutions to safeguard individual devices. |
<img src="" alt="Security Information & Event Management"> Security Information & Event Management Utilize SIEM tools to monitor and analyze security events across the network. |
<img src="" alt="Vulnerability Management"> Vulnerability Management Conduct regular assessments to identify and address system vulnerabilities. |
<img src="" alt="Penetration Testing"> Penetration Testing |
<img src="" alt="Incident Response Planning"> Incident Response Planning Develop and test an incident response plan to efficiently handle cybersecurity incidents. |
<img src="" alt="Secure Configuration Management"> Secure Configuration Management Establish and maintain secure configuration settings for all systems and devices. |
<img src="" alt="Change Management"> Change Management |
<img src="" alt="Identity & Access Management"> Identity & Access Management Implement proper user access controls, management processes, and regularly review user privileges. |
<img src="" alt="Patch Management"> Patch Management Establish processes to apply patches and updates to systems and applications in a timely manner. |
<img src="" alt="Security Awareness Training & Testing"> Security Awareness Training & Testing Provide regular training and education on cybersecurity best practices to all personnel; and periodically test that knowledge. |