INF0103 How to Make Security a Positive Differentiator for Your Business

1
INF0103 How to Make Security a Positive
Differentiator for Your Business

• By Stephen Lamb, Microsoft Security Evangelist
• http//blogs.technet.com/steve_lamb

2
Our Time Today

• The Challenge of Securing Your Business
• Proactive Security
• Communication Awareness
• Make Life Easier

3
The Challenge of Securing Your Business
4
Introducing the Players
Technical people
Business people
5
Profitable Business Requires Agility
6
Proactive Security
7
What are All the Bad Things that Could Happen?
8
You Need a Sensible Security Policy

• Define what should be allowed
• Based on how your business ACTUALLY works!
• What are your Key Assets
• Appetite for Risk
• Consequences

9
You Need a Sensible Security Policy (cont)

• Who should have access
• By what means?
• Ownership
• Responsibilities
• Appropriate use
• Keep it up to date!

10
Communication Awareness
11
Answer the Recursive Question

• WHY?

12
Dont Encourage Bad Behaviour!
13
Communication is Vital
14
Make Life Easier
15
Technologies that Can Ease the Pain

• Use PassPhrases
• Use Least Privilege
• Personal Firewalls
• Secure Wireless Networking
• Network Segmentation via IPsec
• Reduce your Attack Surface
• Off by default, service profiling
• Security Configuration Wizard
• Network Quarantine / Network Access Protection

16
Resources

• Security Matters Blog
• http//blogs.technet.com/steve_lamb
• Prescriptive Guidance
• http//www.microsoft.com/technet/itsolutions/defau
  lt.mspx
• http//www.microsoft.com/security/guidance/default
  .mspx
• TechNet Security Guidance
• http//www.microsoft.com/technet/security/default.
  mspx
• How MSFT implement a secure infrastructure
• http//www.microsoft.com/technet/itsolutions/msit/
  default.mspx
• Online recordings of top infrastructure speakers
• http//www.microsoft.com/emea/itshowtime/

17
Resources (cont)

• Network Segmentation via IPsec
• http//www.microsoft.com/ipsec
• Reduce your attack surface via SCW
• http//www.microsoft.com/scw
• Secure your wireless network
• http//www.microsoft.com/wifi
• Network Quarantine
• http//www.microsoft.com/technet/security/prodtech
  /windowsserver2003/quarantineservices/default.mspx
  
• Network Access Protection
• http//www.microsoft.com/nap

18
(No Transcript)