Yakaropafadzwa Access Management sebasa rekutanga mukuchengetedza ruzivo (uchishandisa muenzaniso weFudo PAM)

Pane gwaro rinonakidza CIS Controls, iyo inofunga nezveRuzivo Chengetedzo uchishandisa iyo Pareto musimboti (80/20). Iyi nheyo inotaura kuti 20% yezviyero zvekudzivirira zvinopa 80% yemigumisiro maererano nekuchengetedzwa kwekambani. Mushure mekuverenga gwaro iri, vazhinji vezvekuchengetedza vanoona kuti pakusarudza matanho ekudzivirira, havatangi nematanho anonyanya kushanda. Gwaro rinoratidza 5 matanho ekudzivirira akakosha ane mhedzisiro huru pakuchengetedza ruzivo:

1. Inventory yemidziyo yese pane network. Zvakaoma kuchengetedza network iwe usingazive zviri mairi.
2. Inventory yeese software. Software ine vulnerabilities kazhinji inova nzvimbo yekupinda yehacker.
3. Secure Configuration - kana kushandiswa kunosungirwa kweakavakirwa-mukati-software kana mabasa ekudzivirira mudziyo. Muchidimbu - shandura mapassword ekupedzisira uye kudzikisira kuwana.
4. Kutsvaga uye kubvisa kusasimba. Kurwiswa kuzhinji kunotanga nekusagadzikana kunozivikanwa.
5. Yakaropafadzwa Access Management. Vashandisi vako vanofanira chete kuva nemvumo yavanoda chaizvo uye kuita chete zviito zvavanoda chaizvo.

Muchinyorwa chino, tichatarisa pa5th point tichishandisa muenzaniso wekushandisa Fudo PAM. Kunyanya chaizvo, isu tichatarisa akajairwa kesi uye matambudziko anogona kuwanikwa mushure mekuita kana sechikamu chekuyedzwa kwemahara kweFudo PAM.

Fudo PAM

Mashoko mashomanana chete pamusoro pemhinduro. Fudo PAM inguva itsva ine rombo rekuwana manejimendi mhinduro. Pakati pezvinhu zvakakosha:

• Kurekodha chikamu. Ona chikamu munguva chaiyo. Kubatanidza kumusangano. Gadzira humbowo hwekutongwa.
• Proactive Monitoring. Flexible policy. Tsvaga nemaitiro. Automation yezviito.
• Kudzivirira Kutyisidzira. Kusashandisa Maakaundi. Threat level assessment. Anomaly discovery.
• Tsvaga kune avo vane mhosva. Kana vashandisi vakati wandei vanoshandisa imwe login account.
• Performance analysis. Vashandisi vega, madhipatimendi kana masangano ese.
• Precise access control. Kudzikamisa traffic uye kuwana kwevashandisi pane dzimwe nguva dzenguva.

Huye, iyo inonyanya kukosha yekuwedzera ndeyekuti inoitika chaizvo mukati memaawa akati wandei, mushure meizvozvo iyo system yakagadzirira kushandiswa.

Kune avo vanofarira chigadzirwa, mu... Webinar ichaitwa ine ongororo yakadzama uye ratidziro yekushanda. Tichaenderera mberi kumatambudziko chaiwo anogona kuwanikwa mumapurojekiti ekuedza emasisitimu ekuwana akasarudzika.

1. Network administrators vanogara vachizvipa mukana kune zviwanikwa zvinorambidzwa

Zvinoshamisa kuti, zviitiko zvekutanga zvinogona kuonekwa ndezvekutyorwa nevatungamiriri. Kazhinji kazhinji, kuchinjika zvisiri pamutemo kwezvinyorwa zvekuwana pamidziyo yetiweki. Semuenzaniso, kuvhura kupinda kune inorambidzwa saiti kana kune yakarambidzwa application. Izvo zvinofanirwa kucherechedzwa kuti shanduko dzakadai dzinogona kuramba dziri mukugadziriswa kwehardware kwemakore.

2. Kushandiswa kweakaundi imwe chete nevatungamiriri vakati wandei panguva imwe chete

Rimwe dambudziko rakajairika rine chekuita nevatungamiriri. "Kugovera" account imwe pakati pevaunoshanda navo itsika yakajairika. Zviri nyore, asi mushure meizvi zvakaoma kunzwisisa kuti ndiani ane mhosva yeichi kana icho chiito.

3. Vashandi vari kure vanoshanda pasi peawa 2 pazuva

Makambani mazhinji ane vashandi vari kure kana vadyidzani vanoda kuwana zviwanikwa zvemukati (kazhinji desktop iri kure). Fudo PAM inokutendera kuti utarise chiitiko chaicho mukati mezvikamu zvakadaro. Zvakajairika kuwana kuti vashandi vari kure vari kushanda zvishoma pane zvaitarisirwa.

4. Shandisa password imwechete kune akawanda masisitimu

Dambudziko rakakura. Kuyeuka mapassword akawanda kunogara kwakaoma, saka vashandisi vanowanzo shandisa password imwe chete kune ese masystem. Kana password yakadaro "yakaburitswa", saka anogona kutyora anozokwanisa kuwana mukana weiyo yese IT zvivakwa.

5. Vashandisi vane kodzero dzakawanda kupfuura dzinotarisirwa

Zvinowanzoonekwa kuti vashandisi vane kodzero dzinoita kunge dzakadzikiswa vanozove neropafadzo dzakakura kupfuura dzavanofanira. Semuenzaniso, vanogona kutangazve mudziyo unodzorwa. Sekutonga, uku kungave kukanganisa nemunhu akapa kodzero, kana kungokanganisa mune yakavakirwa-mukati sisitimu yekutsanangura kodzero.

Webinar

Kana iwe uchifarira nyaya yePAM, tinokukoka iwe iri kuuya webinar paFudo PAM, iyo ichaitika musi wa21 November.

Iyi haisi yekupedzisira webinar yatichabata gore rino, saka ramba wakatarisa (teregiramu, Facebook, VK, TS Solution Blog)!

Source: www.habr.com