Timeline for I have just 4 hours a month to security check a cloud based application - How to use my time?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 2, 2019 at 3:28 | comment | added | Izy- | @user230910 you're right! I think this was more of a plan for the first month's 4h. I would recommend first focus on the above, the next month focus on having some DoS protection in place and start laying down second lines of defense like encrypting data at rest, ensuring sufficient logging, etc. And then start looking for anomalies within the system. As you go down the months, you'll have less to implement and more to "check the straps". But don't forget the documentation! It's a great habit to start from now and will help you (and the next guy) loads later :) | |
| S Nov 1, 2019 at 22:20 | history | edited | schroeder♦ | CC BY-SA 4.0 |
fix mispelling
|
| S Nov 1, 2019 at 22:20 | history | suggested | JoL | CC BY-SA 4.0 |
fix mispelling
|
| Nov 1, 2019 at 20:25 | comment | added | user230910 | The one thing that I think is assumed in this answer is that it is not 4h once off, it's 4h EVERY month. So the first month MFA, DR etc, the second month could probably just be a quick test of those things? | |
| Nov 1, 2019 at 20:17 | vote | accept | user230910 | ||
| Nov 1, 2019 at 20:26 | |||||
| Nov 1, 2019 at 19:11 | review | Suggested edits | |||
| S Nov 1, 2019 at 22:20 | |||||
| Nov 1, 2019 at 7:12 | history | answered | Izy- | CC BY-SA 4.0 |