Randy Franklin Smith - Articles on Best Practices
most recent | by year | by subject
Security Awareness. Securing your systems depends on user and management cooperation and buy-in. Here are some ways to win the hearts and minds of your company's user base. <more>
Core Concepts: Defense in Depth. Having a defense-in-depth strategy is about more than just having multiple controls and defensive technologies. The essence of defense-in-depth pertains to how you position those defenses. <more>
Using Local User and Group Accounts. Avoid using local user and group accounts to prevent security risks and management headaches. <more>
Get the Most from Least Privilege. The concept of least privilege can help you restrict the spread of malware and other security threats. <more>
How to Set Up a DMZ with ISA Server. Without a DMZ to
separate your publicly accessible servers from your internal LAN, you're
exposing your internal network to unnecessary risk. <more>
Security Tips & Tricks. Apply these tips & tricks to secure
your network. <more>
8 Tips for Avoiding the Next Big Worm. Be proactive and protect your
network from future threats. <more>
Protect Your Web Server Against Threats from
Within. Did the Nimda
worm hit your IIS machines? Learn how Nimda propagates, how you might
have protected your servers, and how you can prevent such attacks in
the future. <more>
A Model Network. Pick the right domain model to optimize network security
and administration. <more>
PDCs, BDCs, and Trust Relationships. Get back to basics with smart
DC placement and boost your network's security. <more>
NT Security Fundamentals. Learn the basics about protecting your NT
domain at all levels, to avoid leaving your network open to invasion. <more>
Best Practices for Secure Web Servers. Find important best practices
for keeping your Web servers and sites safe from attack. <more>
Securing the Administrator Account. Take steps to lessen the risk of attacks that use a computer's Administrator account. <more>
Preventing Users from Disabling a Screen Saver. Use an AD or local computer GPO to hide the Screen Saver tab from users. <more>
Reducing Your Company's Attack Surface. Enhance your network's security by eliminating unneeded functionality that intruders can target. <more>
Understanding the Importance of Host Firewalls. Layer your security by using both a network firewall and firewalls on your workstations and servers. <more>
The 3 Pillars of Information Security. Every security requirement you try to meet ultimately boils down to one of three pillars: confidentiality, integrity, and availability. And every security threat you try to address ultimately threatens one of them. <more>
What IT Pros Must Know About Sarbanes-Oxley. Now’s the time to learn what part IT will play in making sure your company complies with the Sarbanes-Oxley Act's requirements for controls, documentation, testing, and records retention. <more>
Get this valuable commentary each month as soon as Microsoft releases security updates!
Free log parser scripts, a clear explanation of Microsoft's
latest security bulletin, helpful security tips, how-to's and more.
|
