Question

What are 5 things organizations are doing to ensure a certain level of security for their organization? How are they doing this? How are they auditing it to make sure the process is working? These examples can be from your personal history of employment, but please do not state the organization you work for.

Answer 1

1. Training Workforce

Organizations use a security awareness training program to educate their employees about the importance of data security.

2. Data Centric Security Strategy

Organizations should encrypt their data using right encryption algorithm. Organizations should develop a robust data backup strategy and test that strategy and their backups often.

3.Implement Multi-Factor Authentication(MFA)

Like an OTP or some push message in the employee mobile when they are trying to access some confidential organization data from their laptop. This will ensure that no one else is using their laptop without their knowledge.

4. Setting Strict Permissions for Cloud

To prevent AWS S3 breach, organizations should strategically use ACLs to grant read/write permissions to certain AWS accounts and/or predefined S3 groups. Security personnel should subsequently audit those accounts and their levels of access to ensure the principle of least privilege. They should not necessarily apply default permissions to their cloud-based data. In fact, they could choose to grant read-only access to a few system manager-specific s3 buckets

5. Exercise Vigilance for Patch Management

Organizations can strengthen the security of their data by patching vulnerabilities through which malicious actors could gain access to their network assets. They can do this by formulating a patch management program through which they test patches before they deploy them on their production systems.

6 Using badges for Entry in office permises for everyone. Visitors should be given a dummy/guest badge.