Presentation is loading. Please wait.

Presentation is loading. Please wait.

Network Detective Prepared For: ABC Corp Prepared By: Roger G. Best.

Published byZion Dickens Modified over 9 years ago

Similar presentations

Presentation on theme: "Network Detective Prepared For: ABC Corp Prepared By: Roger G. Best."— Presentation transcript:

1 Network Detective Prepared For: ABC Corp Prepared By: Roger G. Best

2 Agenda Environment Risk and Issue Score Issue Review Next Steps

3 Environment - Overview Domain Domain Controllers1 Number of Organizational Units13 Users # Enabled33 Last Login within 30 days13 Last Login older than 30 days20 # Disabled15 Last Login within 30 days1 Last Login older than 30 days14 Security Group Groups with Users70 # Total Groups123 Computers in Domain Total Computers40 Last Login within 30 days9 Last Login older than 30 days31

4 Environment - Patching

5 Risk and Issue Score Current Risk ScoreCurrent Issue Score Prior Risk ScorePrior Issue Score

6 Issue Review Unsupported Operating Systems (97 pts) Issue: 22 computers were found using an operating system that is no longer supported. Unsupported operating systems no longer receive vital security patches and present an inherent risk. Recommendation: Upgrade or replace computers with operating systems that are no longer supported.

7 Issue Review User has not logged in in 30 days (13 pts) Issue: Users that have not logged in in 30 days could be from a former employee or vendor and should be disabled or removed. Recommendation: Disable or remove user accounts for users that have not logged in in 30 days.

8 Issue Review User password set to never expire (80 pts) Issue: User accounts with passwords set to never expire present a risk of use by authorized users. They are more easily compromised than passwords that are routinely changed. Recommendation: Investigate all accounts with passwords set to never expire and configure them to expire regularly.

9 Issue Review Anti-virus not installed (94 pts) Issue: Anti-virus software was not detected on some computers. Without adequate anti-virus and anti-spyware protection on all workstations and servers, the risk of acquiring malicious software is significant. Recommendation: To prevent both security and productivity issues, we strongly recommend assuring anti-virus is deployed to all possible endpoints.

10 Issue Review Anti-virus not turned on (92 pts) Issue: We were unable to determine if an anti-virus software is enabled and running on some computers. Recommendation: Determine if anti-virus is enabled properly.

11 Issue Review Anti-spyware not installed (94 pts) Issue: Anti-virus software was not detected on some computers. Without adequate anti-virus and anti-spyware protection on all workstations and servers, the risk of acquiring malicious software is significant. Recommendation: To prevent both security and productivity issues, we strongly recommend assuring anti-spyware is deployed to all possible endpoints.

12 Issue Review Anti-spyware not turned on (92 pts) Issue: We were unable to determine if an anti-spyware software is enabled and running on some computers. Recommendation: Determine if anti-spyware is enabled properly.

13 Issue Review Inactive Computers (15 pts) Issue: 39 computers were found as having not checked in during the past 30 days. Recommendation: Investigate the list of inactive computers and determine if they should be removed from Active Directory, rejoined to the network, or powered on.

14 Issue Review Lack of Redundant Domain Controller (85 pts) Issue: Only one Domain Controller was found on the network. There is a heightened risk of business downtime, loss of data, or service outage due to a lack of redundancy. Recommendation: Evaluate the risk, cost, and benefits of implementing a redundant Domain Controller.

15 Issue Review Un-populated Organization Units (10 pts) Issue: Empty Organizational Units (OU) were found in Active Directory. They may not be needed and should be removed to prevent misconfiguration. Recommendation: Remove or populate empty Organizational Units.

16 Issue Review Operating System in Extended Support (20 pts) Issue: 24 computers were found using an operating system that is in extended supported. Extended support is a warning period before an operating is no longer supported by the manufacturer and will no longer receive support or patches. Recommendation: Upgrade computers that have operating systems in Extended Support before end of life.

17 Next Steps Agree on List of Issues to Resolve Present Project Estimates and Costs Establish Timelines Set Milestones Get Signoff to Begin Work

Download ppt "Network Detective Prepared For: ABC Corp Prepared By: Roger G. Best."

Similar presentations

TERMINAL SERVER DEPLOYMENT PLAN. STEP 1: PREPARATION  UTILIZE THE CURRENT SERVER FOR: ACTIVE DIRECTORY (AD) ACTIVE DIRECTORY (AD) NEEDED FOR STORAGE.

TERMINAL SERVER DEPLOYMENT PLAN. STEP 1: PREPARATION  UTILIZE THE CURRENT SERVER FOR: ACTIVE DIRECTORY (AD) ACTIVE DIRECTORY (AD) NEEDED FOR STORAGE.
P1-P2-M1-D1-D2.

P1-P2-M1-D1-D2.
1 Chapter 8 Fundamentals of System Security. 2 Objectives In this chapter, you will: Understand the trade-offs among security, performance, and ease of.

1 Chapter 8 Fundamentals of System Security. 2 Objectives In this chapter, you will: Understand the trade-offs among security, performance, and ease of.
{ Best Practice Why reinvent the wheel?.   Domain controllers   Member servers   Client computers   User accounts   Group accounts   OUs 

{ Best Practice Why reinvent the wheel?.   Domain controllers   Member servers   Client computers   User accounts   Group accounts   OUs 
Auditing Active Directory Presented to the National State Auditors Association 2014 Information Technology Conference.

Auditing Active Directory Presented to the National State Auditors Association 2014 Information Technology Conference.
Information Security Confidential Two-Factor Authentication Solution Overview Shawn Fulton January 15th, 2015.

Information Security Confidential Two-Factor Authentication Solution Overview Shawn Fulton January 15th, 2015.
Information Security 1 Information Security: Security Tools Jeffy Mwakalinga.

Information Security 1 Information Security: Security Tools Jeffy Mwakalinga.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 9: Implementing and Using Group Policy.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 9: Implementing and Using Group Policy.
Lesson 11-Virtual Private Networks. Overview Define Virtual Private Networks (VPNs). Deploy User VPNs. Deploy Site VPNs. Understand standard VPN techniques.

Lesson 11-Virtual Private Networks. Overview Define Virtual Private Networks (VPNs). Deploy User VPNs. Deploy Site VPNs. Understand standard VPN techniques.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 9: Implementing and Using Group Policy.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 9: Implementing and Using Group Policy.
Security Awareness: Applying Practical Security in Your World Chapter 6: Total Security.

Security Awareness: Applying Practical Security in Your World Chapter 6: Total Security.
Protect Your Computer Protect Your Work Computing & Communications.

Protect Your Computer Protect Your Work Computing & Communications.
Managing a computerised PO Operating environment 1.

Managing a computerised PO Operating environment 1.
Network Security. Trust Relationships (Trust Zones) High trust (internal) = f c (once you gain access); g p Low trust ( ) = more controls; fewer privileges.

Network Security. Trust Relationships (Trust Zones) High trust (internal) = f c (once you gain access); g p Low trust ( ) = more controls; fewer privileges.
Presented by Manager, MIS.  GRIDCo’s intentions for publishing an Acceptable Use Policy are not to impose restrictions that are contrary to GRIDCo’s.

Presented by Manager, MIS.  GRIDCo’s intentions for publishing an Acceptable Use Policy are not to impose restrictions that are contrary to GRIDCo’s.
Security Risk Management Marcus Murray, CISSP, MVP (Security) Senior Security Advisor, Truesec

Security Risk Management Marcus Murray, CISSP, MVP (Security) Senior Security Advisor, Truesec
Website Hardening HUIT IT Security | Sep 30 2011.

Website Hardening HUIT IT Security | Sep
Cloud Computing How secure is it? Author: Marziyeh Arabnejad Revised/Edited: James Childress April 2014 Tandy School of Computer Science.

Cloud Computing How secure is it? Author: Marziyeh Arabnejad Revised/Edited: James Childress April 2014 Tandy School of Computer Science.
Module 2: Managing User and Computer Accounts

Module 2: Managing User and Computer Accounts
Air Force Association (AFA) 1. 1.Access Control 2.Four Steps to Access 3.How Does it Work? 4.User and Guest Accounts 5.Administrator Accounts 6.Threat.

Air Force Association (AFA) 1. 1.Access Control 2.Four Steps to Access 3.How Does it Work? 4.User and Guest Accounts 5.Administrator Accounts 6.Threat.

Similar presentations

Ads by Google