Risk Management Week3 Essay Example | Topics and Well Written Essays - 750 words

Risk Management Week3 - Essay Example on that ought to be proactively and effectively managed for a firm to identify and be able to react to new vulnerabilities, emerging threats, and a firm’s continuously changing enterprise operational and architecture atmosphere. Over the years, several security requirements and standards constructions have been developed in an effort to address enterprise systems together with important data inside them. Nonetheless most of these attempts have basically become exercises on just reporting on conformity and have in actuality redirected security programme supplies from the continuously changing attacks that must be dealt with. The Critical Security Control aims first on making it a main concern on security responsibilities that are efficient against the very latest Advanced Targeted Threats that has got a very tough emphasis on â€Å"what actually works†-security controls whereby processes, products, services and architecture are being used and have actually proved real world efficiency. Automation and standardisation is yet a further top main concern, to increase operational competences while at the same time improving efficiency (Hossein, 2006). There are several critical security controls that this paper seeks to address .Some of these include; inventory of unauthorised and authorised devices or software, making sure there is secure configurations for software and hardware on laptops, servers, mobile devices and workstations, continuous vulnerability assessment and remediation, application software security, malware defenses, wireless access control, appropriate training and security assessment to fill in gaps, data recovery capabilities and finally secure configurations for network tools such as routers, switches and firewalls. In the case of inventory of unauthorised and authorised devices, there should be active management (track, inventory and correction) of all hardware devices that are on the network so that it is the only authorised devices that are