登录查看更多内容

How can you ensure information security in a distributed environment?

由人工智能和领英社区提供技术支持

Information security is a critical concern for any organization, especially in a distributed environment where data and systems are accessed from multiple locations and devices. A distributed environment can offer many benefits, such as flexibility, scalability, and resilience, but it also poses many challenges, such as network vulnerabilities, data breaches, and compliance issues. How can you ensure information security in a distributed environment? Here are some best practices to follow.

此文章中的业界达人

由社区从 7 条内容中精选。了解更多

1 Assess your risks

The first step to ensure information security in a distributed environment is to assess your risks and identify your assets, threats, and vulnerabilities. You need to understand what data and systems you have, where they are stored and accessed, who has access to them, and how they are protected. You also need to evaluate the potential impact and likelihood of different types of attacks, such as malware, phishing, denial-of-service, or ransomware. By conducting a risk assessment, you can prioritize your security goals and allocate your resources accordingly.

添加您的观点

Eric B.

Information Systems Manager | BSIT Degree | Security+ | Network+ | A+ | Let's connect!
举报内容
One way to asses your phishing risks is to perform a company wide phishing test campaign. Some vendors provide free or trial based services that can deliver the phishing test to users and provide campaign results reports to view the user click rate. Although sending periodic training emails to users on how to avoid phishing is best in my opinion, a phishing test campaign is a great way to gain insight on what percentage of users are vulnerable.

已翻译

赞

2 Implement security policies and standards

The second step to ensure information security in a distributed environment is to implement security policies and standards that define the roles, responsibilities, and rules for data and system protection. You need to establish clear and consistent guidelines for data classification, access control, encryption, backup, recovery, and auditing. You also need to ensure that your security policies and standards comply with the relevant laws and regulations, such as the General Data Protection Regulation (GDPR) or the Health Insurance Portability and Accountability Act (HIPAA). Moreover, you need to communicate and enforce your security policies and standards across your organization and your partners.

添加您的观点

Gabriel F.

Information Security ? Cybersecurity ? Digital Governance ? Risk Management ? Securing Organisations from Digital Risk
举报内容
One key ingredient often not emphasized is the need to explain and communicate the policies and standards with empathy and in plain speak.

已翻译

赞
Benjamin Corll

CISO in Residence | Advisor
举报内容
Creating policies & standards is a fundamental task. It's how executive management can clearly articulate what they expect. It helps set the culture of the organization. Yet they also need to be maintained. And when the organization changes, they need to be changed / updated as well. The policy lifecycle isn't always done well, which is bad for all parties involved. I cannot expect a person to follow a policy / standard that they are not aware of. And I cannot expect non-native English speakers to be able to read a policy that's not been translated to their native language, which is why I try to make sure policies & standards are written as clearly and concisely as possible as that makes translations easier.

已翻译

赞

3 Use secure technologies and tools

The third step to ensure information security in a distributed environment is to use secure technologies and tools that can help you monitor, detect, and respond to security incidents. You need to choose the right hardware, software, and network solutions that can provide security features, such as firewalls, antivirus, VPN, multifactor authentication, and cloud services. You also need to use tools that can help you analyze and visualize your security data, such as log management, SIEM, or threat intelligence. Additionally, you need to update and patch your technologies and tools regularly to prevent security gaps and vulnerabilities.

添加您的观点

Benjamin Corll

CISO in Residence | Advisor
举报内容
Technical controls are the foundation of your security program. Using the right technologies or tools will further enhance the policies and enable your people. The products don't solve the products, people do, yet products help. Your products need to align to the processes and truly enable them. Products also need to be configured and maintained. Simply purchasing them isn't enough!

已翻译

赞

4 Educate and train your staff

The fourth step to ensure information security in a distributed environment is to educate and train your staff on how to handle data and systems securely. You need to raise awareness and foster a security culture among your employees, managers, and stakeholders. You need to provide them with the necessary knowledge and skills to recognize and avoid common security threats, such as phishing emails, weak passwords, or unsecured Wi-Fi. You also need to test and evaluate their security performance and provide feedback and incentives to improve their security behavior.

添加您的观点

Emma van Geel

Manager corporate information security at DEMCON | Founder Future of Twente | Founder Tech SpeakHers
举报内容
One thing I have found helpful is that there are many ‘ready to go’ solutions to educate, test and monitor your organization. Most can be tailored to specific policies of your organization. A helpful approach is also to include that these trainings help for awareness at work AND at home.

已翻译

赞

5 Review and improve your security

The fifth step to ensure information security in a distributed environment is to review and improve your security on a regular basis. You need to measure and report your security performance and outcomes, such as the number and severity of security incidents, the time and cost of recovery, and the customer and stakeholder satisfaction. You also need to conduct audits and assessments to verify your security compliance and effectiveness. Furthermore, you need to learn from your security experiences and best practices and implement changes and improvements to enhance your security posture.

添加您的观点

Benjamin Corll

CISO in Residence | Advisor
举报内容
A security program is like a living organism. It will change and evolve over time. As such, one has to consciously maintain it. When it's deemed to no longer be adequate, update it. If the use case or purpose no longer fits, retire that aspect. Don't be afraid to change and adapt. After a near-miss or incident, that's a good time to devote to lessons learned or analysis and make appropriate changes to prevent future occurrences.

已翻译

赞

6 Collaborate and coordinate with others

The sixth step to ensure information security in a distributed environment is to collaborate and coordinate with others who are involved in your data and system protection. You need to establish and maintain trust and transparency with your internal and external partners, such as your vendors, suppliers, customers, or regulators. You need to share and exchange information and resources to support each other's security objectives and initiatives. You also need to align and integrate your security strategies and operations to ensure consistency and efficiency in your security management.

添加您的观点

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Chris Chau

Chief Information Officer, A*STAR
(已编辑)
举报内容
It’s probably just me, but I’m not sure if the starting point of the question was correct in the first place. The “exam question” is not about how to secure a distributed environment but rather, whether or not the distributed environment was intentional. If it was, then the security architecture should have been in place from the onset. If it still isn’t, identify the gaps and get on with it. If the state of things was not an intended consequence but a result of lack of proper planning and architecting, then the way to go is to first determine the desired to-be architecture, and then plan to progressively move towards that architecture as we modernize our current systems and infrastructure over time. You’re welcome.

已翻译

赞

Information Systems

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you ensure information security in a distributed environment?

1

2

3

4

5

6

7

1 Assess your risks

2 Implement security policies and standards

3 Use secure technologies and tools

4 Educate and train your staff

5 Review and improve your security

6 Collaborate and coordinate with others

7 Here’s what else to consider

Information Systems

给文章评分

感谢您的反馈

更多Information Systems相关文章

更多相关阅读内容

How can you ensure information security in a distributed environment?

1

2

3

4

5

6

7

1 Assess your risks

2 Implement security policies and standards

3 Use secure technologies and tools

4 Educate and train your staff

5 Review and improve your security

6 Collaborate and coordinate with others

7 Here’s what else to consider

Information Systems

给文章评分

感谢您的反馈

查看其他技能