Wednesday, May 20, 2020

Understanding Strengths and Weaknesses

Recently, a security survey revealed that employee confidence in their company’s security programs outweighed the actual effectiveness of the security programs. This is a remarkable disparity, one that the same survey suggested could be caused by a lack of consistent cybersecurity audits. That’s a point well taken. How can you possibly know where to make cybersecurity investments without analyzing the company’s most vulnerable areas?

As experts in web application security, we often start there. But there’s also backup and disaster recovery or password policies to consider. The fact is, basic firewalls and virus protection no longer shield an enterprise from malicious attacks.

In Grening’s new job he keeps up the rugged laptops that ride along with police cruisers and law enforcement boats and the external modems that connect everything back to the agency. When Grening first applied for the job, he noticed the job description included experience in two software programs that were way past their expiration dates.

“I thought, ‘They’ve been end-of-life for a while and there’s very little chance those would even be running in an enterprise environment,’” he said. The description also included Windows 7, which Grening knew was on its way out.

“I asked if they had plans to migrate their system and if they needed someone to help with that,” he said. Now part of his role involves migrating images to the new system.

More sophisticated, intelligent technologies are needed to measure things like user and entity behaviors, privileged access behaviors, roles and permissions, security event alerts and more. Therefore, a security officer must use a comprehensive audit to identify as many threats as possible, and then decide which technologies will help reduce vulnerabilities before something happens.

More Info: a+ certification salary

No comments:

Post a Comment