Managing a Secure Network

Managing a Secure Network

1. Developing a Comprehensive Security Policy

   • security policy is a set of security objectives for a company, rules of behavior for users and administrators, and system requirements.
   • security policy is a constantly evolving document based on changes
   • security policy
     • Identification and Authentication PoPolicies
     • Password Policies
     • Acceptable Use Policies
     • Remote Access Policies
     • Network Maintenance Policies
     • Incident Handling Policies
   • Security Policy Hierarchy
     • Governing policy
     • Technical policy
     • End user policy
   • Security Policy Documents
     • Standards, guidelines, and procedures

2. Network Security Testing

   • the day-to-day practices necessary
     • Device hardening, Firewalls, IPSs, Operating systems, Basic programming, Networking protocols, such as TCP/IP, Network vulnerabilities and risk mitigation
   • is conducted during the implementation and operational stages
   • Security testing provides insight into various administrative tasks
   • Types of Network Tests
     • Penetration testing , Network scanning, Vulnerability scanning, Password cracking, Log review, Integrity checkers and Virus detection
   • Network security testing results
     • To define mitigation activities
     • As a benchmark to trace the progress
     • To assess the implementation status
     • To conduct cost and benefit analysis
     • To enhance other activities, such as risk assessments
     • As a reference point for corrective action
   • Network Security Testing Tools
     • Nmap and Zenmap
     • SuperScan
     • SIEM

Bilder und Dateien der Mindmap