12. Recommend and Apply Basic Security Controls

Recommend and Apply Basic Security Controls

ND545 C1 L5 11 Recommend And Apply Basic Security Controls Video

Recommend and Apply Basic Security Controls

Once you identify potential security issues like vulnerabilities and threats, you need to recommend how to minimize the risks. These are putting protective or detective measures in place to meet security requirements and keep others from breaking it either on purpose or by accident. This can be done with technical settings, corporate policies, user training, or all three. You can use the CIS Controls™ for guidance on how you should secure computer systems.

Secure the Configuration of Software, Operating Systems & Networks includes the following steps:

  • Application Security - Remove unneeded applications and make sure the rest are up-to-date on patches.
  • End-Point Protection - Make sure antivirus and firewall applications are on and they stay up to date. For Windows 10, this is known as Windows Defender.
  • Security Policy settings - Configure the operating system to log events

Access Control includes:

  • Account ownership
  • Administrative Privileges
  • Limit accounts in the Administrator group
  • User Account Control (UAC) on Windows

Implement Security Awareness

  • Best practices for keeping systems, applications, and data safe
  • Company policies
  • Throughout the year verified annually

Further research

Next Concept