You're in charge of your company's IT infrastructure. How do you ensure it stays secure?

由人工智能和领英社区提供技术支持

You're in charge of your company's IT infrastructure. How do you ensure it stays secure? It's a big responsibility that requires careful planning, implementation, and monitoring. In this article, you'll learn some of the best practices and tools for systems management that can help you protect your data, devices, and networks from cyber threats.

此文章中的业界达人

由社区从 9 条内容中精选。了解更多

Aecio Ventura

Analista de Infraestrutura/Redes | AWS CCP(CLF-C01) | AZ-900 | SC-900 | PL-90 | AL-900 | SCRUM | ITIL | ITSM | COBIT |…
Karen G.

1 Assess your risks

The first step to securing your IT infrastructure is to identify and prioritize the potential risks that could compromise its availability, integrity, or confidentiality. You can use a risk assessment framework, such as NIST SP 800-30, to analyze your assets, threats, vulnerabilities, and impacts. Based on your findings, you can develop a risk mitigation strategy that aligns with your business goals and budget.

添加您的观点

Aecio Ventura

Analista de Infraestrutura/Redes | AWS CCP(CLF-C01) | AZ-900 | SC-900 | PL-90 | AL-900 | SCRUM | ITIL | ITSM | COBIT | AGILE
举报内容
A avalia??o de riscos é fundamental para entender as potenciais amea?as e vulnerabilidades que podem afetar a seguran?a da infraestrutura de TI de uma empresa. Sempre utilizo como guia o NIST SP 800-30, que é um guia do Instituto Nacional de Padr?es e Tecnologia dos Estados Unidos (NIST) para a avalia??o de riscos de seguran?a da informa??o, é uma excelente referência para conduzir essa análise.

已翻译

赞
Karen G.
举报内容
some ideas: 1. Perform regular risk assessments and update the risk mitigation strategy accordingly. 2. Use threat intelligence feeds and services to stay informed about the latest threats and vulnerabilities. 3. Implement a bug bounty program or a vulnerability disclosure policy to encourage responsible reporting and reward ethical hackers.

已翻译

赞

2 Implement security controls

The next step is to implement security controls that can prevent, detect, or respond to cyber attacks. You can use a security framework, such as ISO 27001, to select and apply the appropriate controls for your IT infrastructure. Some of the common controls include encryption, authentication, firewall, antivirus, backup, patching, and auditing. You can also use systems management tools, such as Microsoft Endpoint Manager or SolarWinds, to automate and streamline the deployment and maintenance of security controls across your devices and networks.

添加您的观点

Karen G.
举报内容
some ideas: 1. Use multi-factor authentication (MFA) and single sign-on (SSO) to enhance your authentication controls. 2. Implement network segmentation and micro-segmentation to limit the scope and impact of cyber attacks. 3. Use artificial intelligence (AI) and machine learning (ML) to detect and respond to advanced threats and anomalies.

已翻译

赞

3 Train your staff

The third step is to train your staff on how to use and protect your IT infrastructure. Human error is one of the main causes of security breaches, so you need to educate your employees on the best practices and policies for IT security. You can use online courses, workshops, simulations, or quizzes to teach your staff about topics such as password management, phishing, malware, data privacy, and incident response. You can also use systems management tools, such as KnowBe4 or LMS365, to create and manage your training programs and track your staff's progress and performance.

添加您的观点

Karen G.
举报内容
some ideas: 1. Using gamification and simulation to make the training more engaging and interactive. 2. Using social engineering and phishing tests to measure and improve staff's awareness and resistance to cyber-attacks. 3. Using role-based access control (RBAC) and the least privilege principle to limit the access and permissions of staff, based on their roles and needs.

已翻译

赞

4 Monitor your performance

The fourth step is to monitor your IT infrastructure's performance and security status. You need to collect and analyze data from your devices and networks to identify any issues, anomalies, or threats that could affect your IT operations. You can use systems management tools, such as Splunk or Nagios, to gather and visualize your data, generate alerts and reports, and troubleshoot problems. You can also use systems management tools, such as Qualys or Rapid7, to conduct vulnerability scans and penetration tests to assess your security posture and compliance.

添加您的观点

Karen G.
举报内容
some ideas: 1. Using security information and event management (SIEM) systems to correlate and analyze security events and alerts. 2. Using threat hunting and incident response plans to proactively detect and respond to cyber-attacks. 3. Use encryption and tokenization to protect data in transit and at rest.

已翻译

赞
Ravi Mehrotra

Salesforce Delivery Head | Author & Speaker | Top AI and Agile Voice | Featured in Forbes | Harvard (BR) Advisory Council Member | Digital Transformation Lead
举报内容
Continuous Monitoring: Implement real-time monitoring tools to track network activity, system performance, and potential security threats. Regular Vulnerability Assessments: Conduct periodic vulnerability assessments and penetration testing to identify and remediate potential weaknesses. Patch Management: Establish a robust patch management process to ensure all systems and software are up to date with the latest security patches. Access Control: Implement strict access controls and authentication mechanisms to limit access to sensitive data and systems based on roles and responsibilities.

已翻译

赞

5 Review and improve

The final step is to review and improve your IT infrastructure's security on a regular basis. You need to evaluate the effectiveness and efficiency of your security controls, risk mitigation strategy, staff training, and performance monitoring. You can use systems management tools, such as KPI Dashboard or Balanced Scorecard, to measure and compare your results against your objectives and benchmarks. You can also use systems management tools, such as SWOT Analysis or PESTLE Analysis, to identify and address any internal or external factors that could influence your IT security.

添加您的观点

Karen G.
举报内容
some ideas: 1. Using security audits and compliance checks to ensure IT infrastructure meets the industry standards and regulations. 2. Using continuous integration and continuous delivery (CI/CD) pipelines to automate and accelerate security testing and deployment. 3. Using feedback loops and user feedback to improve your IT infrastructure's usability and security.

已翻译

赞
Marco Antonio

Máster en Seguridad Informática en UNIR Universidad Internacional de La Rioja
举报内容
En un entorno de infraestructura se ve también tener aspectos donde se pueda replicar lo que se tenga para poder realizar laboratorios activos y aplicar un pensamiento para poder evaluar antes que agentes externos maliciosos lo hagan. Esto incluye poder tener laboratorios estándares pruebas de penetración auditorías e ir aportando mayor conocimiento y de estos hallazgos encontrados poder mejorar y asegurar toda la infraestructura . Poder hacer uso de la inteligencia artificial en cada uno de estos ámbitos

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Craig Strangwick

Digital Transformation - Lead-to-Cash
(已编辑)
举报内容
Tools that automate vulnerability assessments and certain pen tests can get you out the mindset of quarterly or annual testing which is no longer valid, you have to continually test. I don't think security via obscurity is a good strategy overall as most attacks are automated & will enumerate but stealth, reduced pubic footprint and even IP cloaking will often be part of the mix. Follow the rules; defence in depth, least-privilege access, multi-vendor security devices, OWASP, redundancy in security, protect your users and make it easier for them to protect the assets then just maybe you will sleep at night :-)

已翻译

赞

Systems Management

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

You're in charge of your company's IT infrastructure. How do you ensure it stays secure?

1

2

3

4

5

6

1 Assess your risks

2 Implement security controls

3 Train your staff

4 Monitor your performance

5 Review and improve

6 Here’s what else to consider

Systems Management

给文章评分

感谢您的反馈

更多Systems Management相关文章

更多相关阅读内容