Multi Layered Security Plan for Richmond Investments
Security is vital to any business. This Security Play will show a general idea for each level of the IT infrastructure.
 User Domain o Security awareness training each month to give employees the rules of Richman Investments security policies o Auditing of all user activity o Training for each time a new security option is implemented
 Workstation Domain o Strict access to corporate data o Each user machine will run up to date antivirus and anti malware software o File scanner for any files copied to or from the workstation
 LAN Domain o Utilization of network switches o WPA 2 encryption on all wireless access points o The securing of server rooms from unauthorized access
 LAN to WAN Domain o Closing off unused ports via a firewall to reduce the chance of unwanted network access o Monitor inbound IP traffic o Run all networking hardware with up to date security patches, and operating systems
 WAN Domain o Enforce encryption, and VPN tunneling for remote connections o Configure routers, and network firewalls to block Ping requests to reduce chance of Denial of Service attacks o Enforce anti virus scanning of email attachments o Isolate found malicious software (virus, Trojans, etc.) when found o Deployment of redundant internet connections to maximize availability
 Remote Access Domain o Establish strict user password policies, as well as lockout policies to defend against brute force attacks o Require the use of authorization tokens, have a real-time lockout procedure if token is lost, or stolen o Encrypt the hard drives of company computers, laptops and mobile device to prevent the loss of sensitive data...