To create an effective multi-layer security plan, all seven of the domains of the IT infrastructure must be addressed. An improvement on each of the domains will help to fight against an attacker. For this part of the project we will address five of the domains.
Probably the best place to start beefing up security is with the user domain. Most attacks on security are from users. You cannot allow users to have simple passwords. A complex password is paramount to defending the user domain. A complex password is at least eight characters, uses a mix of upper and lower case letters, and contains special characters such as an @ or $. Passwords need to be changed regularly as well. They should be change every so many months and users should not be able to use a password twice in a year.
In the LAN domain we need to protect against malicious emails. Users should know better than to open suspect emails at work, but a reminder could not hurt. Spam filters are extremely important so that user do not get as many suspect emails.
In the workstation domain we need to make sure our workstations are protected. Internet security or at least antivirus should be used an all workstations. It seems like a no brainer in this day and age, but we still need to ensure it is implemented. Another way to secure our workstations is to encrypt the hard drives. We should also deactivate all media ports.
In the WAN domain we need to set up firewalls. The firewalls we block things our company does not want. The firewall will act as filter keeping out things we do not want, but letting things through that we do want.
And finally on the admin domain group policies can be set up to keep unauthorized users from accessing certain areas. After an employee signs off on a policy and they violate it, they can be disciplined or terminated. Polices are an excellent tool for