構(gòu)建企業(yè)信息安全體系統(tǒng)助力數(shù)據(jù)安全保護

構(gòu)建企業(yè)信息安全體系，助力數(shù)據(jù)安全保護。金霸王(中國)有限公司3年3月24日 1920s1960s2019 1920s1960s2019AboutDuracell2012016acturerofhighrformancealkalinebatteriesspecialtycellsandrechargeablesSinceitsfoundationintheearly40s,ompanyhasbecomeaniconicpersonalpowerbrandtrustedforcompactandlonger-lastingbatteries.AndattheheartofitallhasbeentheDuracellBunny.2123Agenda123rocedures4BuildEnterpriseSecuritySystemsmissioneabelLabeltionApplicationSecuritytyAssessmentlnerabilityManagementTrainingSecurityPoliciesandProceduresisadocumentthatstatesinwritinghowacompanyplansprotectitsphysicalandinformationtechnologyITassetsSecurityhatarecontinuouslyupdatedandchangingastechnologies,vulnerabilitiesandsecurityrequirementschange.efullyanalyzedtherequirementscontainedintheGDPRanddataprotectionlawsandhasdesigneditssecurityarchitecturetoirementsWehavecodifiedtechnicalandnalinformationsecurityrequirementsandcontrolsinaseriesAccessControliVirusAccessControliVirusPolicycyAssessmentPolicycyAuthenticationSecurityEnvironmentalcyicy6SecureDataTransmissionpASconnectionusingdigitalcertificatebetweenpartnersrsdistinctadvantagesoverHTTPSincludingincreasedationandsecurityachievedthroughtheuseofreceiptsanddigitalsignatures.SensitivityLabellyandandexternalsharingforbusinesspurposes.otectedandencryptedbutthatneedstobesharedwithexternalparties.orthatshouldbeprotectedandencryptedandthatshouldnotbesharedexternally.8IdentityServicesEngine(ISE)tyServicesEngineCiscoISEisanintentbasednetworkaccesscontrolandpolicysystemItfunctionsasacommonpolicyenginethatenablesendpointaccesscontrolandnetworkdeviceadministrationforenterprises.Knowandcontroldevicesandusersonyournetwork.9ApplicationSecurityAssessmentcationcationApplicationsecurityistheprocessofreviewingappstomakemorecationcationofappsApplicationsarevulnerabletomanydifferentfattacksandexploitsThepurposeoftheSecurityReviewofapplicationsistocurityrisksandconcernsbeforenewapplicationsareallowedintothecorporationproductionenvironment.Multi-factorAuthentication(MFA)atrequirestheusertoprovidetwooreverificationfactorstogainaccesstoaresourcesuchasanapplicationonlineaccountoraVPNerthanjustnalverificationfactorswhichdecreasesthelikelihoodofasuccessfulcyberattack.ISEPostureostureisawaytochecktomakesureacontractorsPCiscompliantbeforetheyconnectandhaveorporationnetworkthingslikeWindowsversion,firewalls,antivirus,etc.AssoonastheuserisinISEPostureMIMGroupwhentheytrytoconnecthefirsttimetheywillbeedtoasitecalledtheComplianceProvisioningtalwheretheyllneedtodownloadandinstallthemodulebeforecontinuing.uirementsfornoncompanymanageddevicebytorthatusingVPN?YourdevicerequiresthefollowingrequirementstoliantwithourNetworkSecurityPolicies.?OSmustbeWindows8,10or11?Windows10buildversionmustbe1909ornewer.?WindowsFirewallmustbeenabled.AnyAnti-virusorAnti-malwaresoftwarerequirestobeinstalledontheClientdevice.ISEWindows11PostureNot-compliantextranotificationISEWindows11Postureinstallation-compliantMicrosoftIdentityManager(MIM)tityManagerMIMbuildsontheidentityandaccessmanagementcapabilitiesofForefrontIdentitydecessortechnologiesMIMprovidesationwithheterogeneousplatformsacrosstheystemsdirectories,anddatabases.PasswordandAuthenticationPolicyPasswordpolicy:?Includeatminimum3ofthefollowing4complexities:uppercase,lowercase,specialcharacter,ornumber.Spacesarepermitted.?Beaminimumlengthof8characters.?Inabilitytouseyourlast10passwords.?After5incorrectloginattempts,youraccountwillbelocked.?Recommendusingaphraseinsteadofastandardpassword.Ideasinclude:oSelectaphrasefromyourfavoritesong.oSelectaphrasefromyourfavoritepoem,movie,theaterplay,etc.oAddpunctuationtothephrase-period,questionmarkorcommabetweenthewords.Passwordsnotallowed:?AnyvariationofcommonwordssuchasDuracell,Password,seasons,children'snames,pets,sportsteams,etc.?Replacecommonlyknowncharacters(@forA,3forE,1forI,etc.)VulnerabilityManagementtymanagementisanorganizedattemptsystems.tackiscomplexandincludesentsthatcouldhavesecurityweaknessesorulnerabilitiessuchasssfunctionsationsecuritytoolsCyberArkcureaccesstoanyrceanywhereeverywherewithasingleIdentitySecurityplatform.CarbonBlackCarbonBlackEndpointconsolidatescapabilitiesusingonendconsolehelpingyouoperatefasterDataContainerizationformobiledevicesSecureemployeeuseofcorporateinformationwhileensuringflexibleaccessviamobiledevices.Promotebestpracticesformobiledevicesusedtoaccesscompanyemailanddocuments:SorlaterAndroidorlaterbUseaPINtoencryptthedevicec)NotOS-compromised(aka“jailbroken”or“rooted”)2.Useapprovedsecurity-compliantapps(Outlook,Microsoft365)whichwill:a“Containerize”(i.e.store)corporatecontentseparatefromothercontentbAllowcorporatecontentintheseappstobewipedifthephoneislostorstolenGeneralDataProtectionRegulation(GDPR)lDataProtectionRegulationItisadataprotectionlawthatapplieseEuropeanEconomicAr