1.) Two types of security events and baseline anomalies that might indicate suspicious activity. If high numbers of authentication failures are being recorded on the logs or if a large number of unauthorized access attempts are made this might be a red flag to personnel that a security breach is being attempted or has occurred. Establishing a good baseline of your system showing normal everyday activity a IT professional should be able to view the logs and see if any violations or abnormality’s exist.
2.) Given a list of policy violations and security breaches, select three breaches, and consider the best options for controlling and monitoring each incident. Identify the methods to mitigate risk and minimize exposure to threats or vulnerabilities.
a. Removable storage devices that might contain malware, filtered only when passing through the network is a issue that could effectively devastate a system. Solution: Limiting the privileges of users tailoring them to the duties assigned to the individual, this while taking more time on the part of the IT personnel will have a dramatic impact on security. Banning personal storage devices for all personnel is another more drastic step, however by making it clear that if a device is essential place screening steps to ensure the device is clean of any possible malicious software.
b. Passwords minimum requirements are another area that is commonly attacked. Easley guessed or common passwords pose a huge security risk to any network. Solution: Ensure passwords are a mixture of upper case and lowercase letters, numbers, and special characters as well as implementing a stringent policy of changing passwords on a periodic basis will help secure the network security. Making sure that personnel understand and avoid what easy passwords consist of such as, common workplace items, months of the year, children’s or family members