The people

Staff are the weakest link

Employees are the weakest link in cyberattacks and form the access to systems and data. Make sure they know what the risks are and how to work safely. Provide awareness training in privacy and security so that employees recognize cyber threats, understand damage and respond correctly in the event of a data breach or attack.
 

Onboarding and offboarding

• Is there a policy for onboarding and offboarding employees?
• Which employee has which function, role and rights?
• Which software may be used by whom?
• Does an intern have the same rights as an experienced employee?
   

New employees

• Is there a policy regarding new employees?
• How reliable is the new employee?
• Has a certificate of conduct been requested?
   

Access

Access policy

An access policy ensures that only authorized employees have access to relevant systems and data. Also discuss access and security requirements with external parties such as suppliers and visitors. Logging of access rights management makes it possible to see later who granted the rights.
 

Privilege accounts

Accounts with more rights, such as Admin accounts, are for example used for system management. Limit access to these accounts to a small number of employees who really need them.

• Document these accounts and review them periodically
• Adjust these accounts when functions, staff or IT partner change

Authentication

Always ensure MFA! You want to be sure that the right people get access to the data and systems. Ensure a good password policy.
 

Hardware and software

Inventory

Keep track of which hardware and software systems are in use within the organization. Remove them safely when they are no longer needed to prevent data from falling into the wrong hands.

• What can happen if a sales employee's laptop is stolen?
• Are USB sticks allowed to be used?
• How is equipment destroyed?
   

Need help?

We deal with these topics on a daily basis. Want to know more? Then contact us.