A good security article: "6 Cyber-Defense Steps to Take Now to Protect Your Company"

6 Cyber-Defense Steps to Take Now to Protect Your Company

Daniel Spicer is Chief Security Officer at Ivanti. 

https://threatpost.com/latest-insights-ransomware-threats/178391/  

1 số nội dung trích lọc

Step 1: Get Complete Asset Visibility

You can’t manage and secure what you can’t find. Invest in an automated platform that enhances visibility into all connected devices and software and provides context into how those assets are being used, so your IT and security teams can make better decisions. A comprehensive discovery initiative finds all assets on a network, including both corporate-owned and BYOD devices, and then provides context around who is using what device, how and when they’re using that device, and what they have access to. ...

Step 2: Modernize Device Management

...A unified endpoint management (UEM) approach fully supports bring-your-own-device (BYOD) initiatives while maximizing user privacy and securing corporate data at the same time.

...

Step 3: Establish Device Hygiene

...Good device hygiene involves taking a proactive, multi-layered approach to ensure that only devices meeting defined security requirements are allowed to access business resources, thereby reducing the digital attack surface. ...

Step 4: Secure Your Users

...The ideal solution: Passwordless authentication via zero sign-on. Instead of passwords, this approach uses multifactor authentication via alternative authentication methods such as possession (what you have, like a mobile device), inherence (biometrics like fingerprints, Face ID, etc.) and context (location, time of day, etc.).

Step 5: Provide Secure Access

...SDP still requires a layer of security to maximize benefits, which is where zero-trust network access (ZTNA) comes into play.

Step 6: Continuously Monitor & Make Improvements

...To stay in compliance and mitigate threats, it’s imperative to get a handle government, risk and compliance (GRC) management. Look for a solution with quick and easy regulatory documentation imports to map citations with security and compliance controls, and seek to replace manual tasks with automated repetitive-governance activities.

------

PS. Tin tức về 1 giải pháp UEM của Ivanti https://www.ivanti.com/lp/uem/reports/2021-gartner-magic-quadrant-for-uem (được đánh giá Visionary, chưa phải Leader theo Gartner)