Multi-Layered Security Plan
User Domain
Risk, Threat, or Vulnerability: Lack of awareness, Apathy toward policies, Security policy violations, Personal CD’s and USB drives with photos, music and videos, Download photos, music and videos, Destruction of systems, applications, or data, Employee blackmail or extortion.
Mitigation: Conduct annual security awareness training, Place employee on probation, Disable internal CD drives and USB ports, Enable content filtering. Restrict user access, Track and monitor abnormal employee behavior, Enable Intrusion detection system/Intrusion prevention system (IDS/IPS).
Workstation Domain
Risk, Threat, or Vulnerability: Unauthorized access to workstation, Unauthorized access to systems, applications, and data, Desktop or Laptop computer operating system software vulnerabilities, Viruses, malicious code or malware infects a workstation or laptop.
Mitigation: Enable password protection, Define strict access control policies, standards, procedures and guidelines, Use workstation antivirus and malicious code policies,
LAN Domain
Risk, Threat, or Vulnerability: Unauthorized access to LAN, Unauthorized access to system, applications, and data, LAN server operating system/application software vulnerabilities, Rogue users on WLANs gain unauthorized access.
Mitigation: Define strict access control policies, standards, procedures and guidelines, Make sure wiring closets, data centers, and computer rooms are secure.
LAN to WAN Domain
Risk, Threat, or Vulnerability: Unauthorized network probing and port scanning, Unauthorized access, IP router, firewall, and network appliance configuration file errors or weaknesses.
Mitigation: Disable ping, probing, and port scanning on all exterior IP devices, Apply strict security monitoring controls, Define a strict zero day vulnerability window definition.
WAN Domain (Internet)
Risk, Threat,