Timeline for What are possible approaches and arguments for securing corporate IT systems with most computers being portable?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 11, 2012 at 15:38 | vote | accept | Gennady Vanin Геннадий Ванин | ||
| Mar 27, 2012 at 20:45 | comment | added | Brad | Once everything is identified, remove and/or block traffic that is not needed since it's just extra network congestion. For external connections I would force ALL external connections by employees via VPN and don't allow split tunnels. Limit all they can do and since many are technical people I would also block stuff through DNS and HOSTS files. They still may be able to get around what you put in place but it will probably take a while. Also if you don't use IPV6, then disable it on the machines and block it on your corporate firewall/IDS, it's an overlooked loophole known by some ;-) | |
| Mar 27, 2012 at 20:41 | comment | added | Brad | Since there is no compliance to have to adhere to I would just put the place on lockdown. Force everyone to have to login to a domain controller, force all traffic to be trackable to help eliminate who caused what. Give the minimum required rights for each user. You may want to consider everyone running through terminal sessions and for sure enable loggong on everything, atleast until you know everything is locked down completely. I'd still keep it on provided that your hardware has the necessary horsepower. Lastly build/buy a lantap and sniff your own traffic 24/7 and identify everything. | |
| Mar 27, 2012 at 20:22 | comment | added | Gennady Vanin Геннадий Ванин | I updated the question. The networks are in workgroups because the company was being extended chaotically by non-IT workers and had no IT staff at all (an external system administrator was called to service specific arising problems). First of all, I am looking to protect integrity of system against eventual malfunctioning, disgruntled insider or previous external system administrator who mostly worked remotely. If to break the server (servicing accounting apps thru terminal sessions) all company would cease to exist. No compliance | |
| Mar 27, 2012 at 20:06 | comment | added | Brad | What kind of data do you need to protect? Is there any compliance pieces that need to be considered? Ex. PCI, HIPAA, HITECH compliance? | |
| Mar 26, 2012 at 23:28 | history | answered | Brad | CC BY-SA 3.0 |