Jan 17, 2018 5:25 PM
Replying to Deepesh Rammoorthy
...
1) Security Audits . Develop a template to ask questions to the vendor on how they manage information security. How do they collect, store, retrieve and disseminate information.
2) Review your organization's own security policy . For example disallow any USB's that are not provided by the organization and encrypted.
3) Enforce strong password policies
4) Implement stronger web filtering and monitor what websites are being accessed by employees.
5) Implement Two factor authentication
6) Keep your operating system patches up-to date
7) Review your firewall rules
8) Restrict users from downloading their own software without the assistance from IT.
9) Lock down the Web Browser versions
10) Implement a Standard Operating Environment (SOE) on all the computers.
11) Conduct vulnerability scans on all your servers
12) Sign non disclosure agreements with all your vendors and suppliers