collaborating securely - community affairs committee (cac)collaborating securely protecting your...

14
Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 [email protected] [email protected] 1

Upload: others

Post on 25-Aug-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Collaborating SecurelyProtecting Your Community and YourselfBEN WOELK, CISSP

LEADERSHIP DAY

STC SUMMIT 2016

[email protected]

[email protected] 1

Page 2: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

CIA Confidentiality

Integrity

Availability

[email protected] 2

Page 3: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Top online safety practices?

3

http://googleonlinesecurity.blogspot.com/2015/07/new-research-comparing-how-security.html

[email protected]

Page 4: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Secure Your Computer AND Mobile Device• Anti-virus

• Firewalls

• Patching and updates

• Passwords/ passphrases

• Mobile Security Apps

[email protected]

Page 5: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Confidentiality Passwords◦Construct good passwords◦ Length> Complexity

◦Single site, single password

◦Sharing passwords◦ Password managers

Two-Factor Authentication◦Google Authenticator

◦Tracking Logins

[email protected] 5

Page 6: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

PassphrasesIt was a dark and stormy night

becomes

ItwasaDark215&StormyNight

Length > complexity

[email protected]

Page 7: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Password Managers

[email protected]

Page 8: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Two-Factor Authentication

[email protected]

Page 9: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Availability Cloud services

◦Generic accounts

Cautions

[email protected] 9

Page 10: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Integrity Backups◦User error (sharing settings)

◦Cryptolocker◦Cloud SLAs◦Backup Options

Tracking Changes◦Rights/Permissions (sharing settings)

[email protected] 10

Page 11: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Login Alerts

[email protected]

Page 12: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

WordPress• KEEP EVERYTHING UP TO DATE!

• Security Plugins

• Certificates?

• Manage Users

• Change Admin account name

• Use a site manager such as ManageWP

• Hardening WordPresshttp://codex.wordpress.org/Hardening_WordPress

[email protected] 12

Page 13: Collaborating Securely - Community Affairs Committee (CAC)Collaborating Securely Protecting Your Community and Yourself BEN WOELK, CISSP LEADERSHIP DAY STC SUMMIT 2016 BEN.WOELK@GMAIL.COM

Any Questions?

[email protected]