Not looking at the whole security picture
There are many mistakes one can and does make, causing weaknesses in your network. Protect your network further by avoiding these five security assessment mistakes.
- Laptops.
- Voice over Internet Protocol.
- 802.11 and Bluetooth wireless.
- Software source code.
- Unstructured files scattered about the network.
- Development, QA and test systems.
Also, you'll never be able to say with conviction that you've tested for all security vulnerabilities unless and until you look at things on the business side. Operational security weaknesses that can lead to Windows hacks and other abuse include:
- Poorly managed user provisioning and passwords.
- Patching (or lack thereof).
- User NTFS rights assignments.
- Backups and media handling.
- Policy documentation and enforcement.
- Incident response and disaster recovery procedures.
Minimizing information risks means looking at everything -- soup to nuts.
Security assessments and five mistakes to avoid
Home: Introduction
About the author: Kevin Beaver is an independent information security consultant, speaker and expert witness with Atlanta-based Principle Logic LLC. He has more than 19 years of experience in IT and specializes in performing information security assessments revolving around compliance and IT governance. Kevin has authored/co-authored six books on information security including Hacking For Dummies and Hacking Wireless Networks For Dummies (Wiley) as well asThe Practical Guide to HIPAA Privacy and Security Compliance (Auerbach). He's also the creator of the Security On Wheels audiobook series. You can reach Kevin at [email protected]>.
