Login confirmation
A password plus a key or a card. The note under the keyboard stops deciding anything.
The set of mechanisms depends on the goal: certification needs the full complement, practical protection usually needs only part of it.
A password plus a key or a card. The note under the keyboard stops deciding anything.
Approved drives by list, everything else forbidden, a connection log.
Only what is on the list runs. Ransomware simply does not start on such a machine.
Watching system files and settings, with an alert on any change.
Restrictions on folders and devices at the level of the security product, not only of the operating system.
User actions are recorded, and the records themselves are protected against tampering.
We enable the mechanisms one at a time, so that each time it is clear how it affects people work.
We separate what the regulations require from what we take on for real benefit.
We install it on several machines from different departments: each has its own set of programs and its own behaviour.
We roll it out in stages, tuning the rules for each department.
We extend the allow-lists and review the blocks.
Keys and cards get lost, and you have to prepare for that in advance. Without a written temporary-access procedure, losing a key means the accountant cannot work for half a day. A backup way in with a limited validity period is thought through at the rollout stage, not in a moment of panic.
An allow-list of programs. Unlike antivirus it stops not known malware but everything foreign, including what is not yet in any database. The price is discipline: every new program has to be added.
Laptops are configured separately: the same mechanisms plus disk encryption and connection to the work network through a secure tunnel. Turning protection off entirely for a trip is the worst option of all.
The main costs are licences and administrator time to extend the lists. The first month is the busiest; after that the flow of requests drops sharply, because people work with the same set of programs.
Write what needs covering and how many workstations there are. We will propose a set of mechanisms and start with a pilot.
Request received
It is already with a manager. You will get an answer within the working day, and urgent requests go to the duty engineer immediately.
There is no such city in the list. Check the spelling.