Security Best Practices

Security Best Practices

Password Policy best practices

  • Create a strong, complex and long password.
  • Use multi-factor authentication for login where possible.
  • Avoid save password in browser.

Generic best practices

  • Do not install additional software or server roles on DCs
  • Implement patch management.
  • Use secure DNS services to block malicious domains
  • Ensure business continuity plan (BCP).
  • Use security baselines and benchmarks.
  • Inform and educate users about cyber threats and attacks.
  • Avoid illegal/crack software and use genuine/free/open-source software.
  • Perform vulnerability assessment and penetration testing regularly.
  • Perform IT audit and risk assessment regularly.
  • Ensure physical security in IT infrastructure.
  • Deploy web application firewalls to protect web applications from a variety of application layer attacks.
  • Use Anti-virus and anti-malware software.
  • Actively monitor IT infrastructure for any kind of malicious activities.

Backup best practices

  • Keep regular verified and labeled backup following 3-2-1 backup rule.
  • Encrypt Backup Data.
  • Perform regular tests by restoring backup periodically.

Active Directory best practices

  • Limit the use of Domain Admins and other Privileged Groups.
  • Secure the domain administrator account.
  • Disable the local administrator account (on all computers)
  • Limit local administrative access for all domain users in end devices.
  • Enable audit policy settings with group policy to monitor malicious activities.
  • Monitor Active Directory events to detect compromise and abnormal behavior.
  • Find and remove unused user and computer accounts.

Email Server best practices

  • Keep email servers up to date.
  • Limit administrative access to internal users.
  • Deploy multi-factor authentication for users.
  • Harden the OS hosting email server.
  • Harden the email application.
  • Monitor email servers to detect abnormal activities.
  • Deploy host-based firewalls.
  • Use SSL certificates when dealing with external services.
  • Configure email server to protect your domain against spoofing, spam, email forgery and other attacks.

Network & Security Devices Best Practices

  • Place your network and security devices in proper order based on your environment.
  • Keep network and security devices OS and relevant security patch up to date.
  • Use certificate based SSH authentication.
  • Restrict administrative port from untrusted network.
  • Ensure Network and security devices hardening for secure access control complying AAA.
  • Make sure security devices policy is complying with organization strategy.
  • Network and security devices session and system log need to be preserved in separate repository.
  • Ensure Periodic backup of configuration and security policy.