Strong authentication
Login by password plus a token or a card. A password on a note under the keyboard stops being a problem.
The set of mechanisms is chosen to match the requirements: certification needs the full set, practical protection usually needs only part of it.
Login by password plus a token or a card. A password on a note under the keyboard stops being a problem.
Approved drives on a list, everything else blocked, a log of connections.
Only approved programs run. Ransomware that reaches such a computer simply does not start.
Tracking changes to system files and configurations.
Permissions on folders and devices at the level of the protection mechanism, not only of the operating system.
Every user action is recorded and the logs are protected against alteration.
Deployment goes in stages: the mechanisms are switched on one at a time so their effect on the work can be tracked.
What is mandatory under the regulations and what we take for real protection.
Installation on several machines from different departments. Different software behaves differently.
In stages, with policies tuned for each department.
Adding approved programs and devices, reviewing blocked actions.
A closed software environment is the most underestimated measure. Unlike antivirus it blocks not known malware but everything that is not approved, including what is not yet in any database. The price is discipline: every new program has to be added to the list.
Exactly so, and that is the point. For workplaces with sensitive data it is the right approach. Adding a program to the list takes minutes, and the flow of requests usually dries up after the first month.
No. Strong authentication is justified for administrators, the accounts and HR departments and everyone working with personal data. For the rest a sound password policy is enough.
Modern tools of this kind are practically unnoticeable on decent hardware. Problems arise on old machines with mechanical drives, where everything is noticeable, antivirus included.
Tell us what needs covering and how many workplaces there are. We will propose a set of mechanisms and run a pilot.
Request received
We can already see it. We will reply within one business day, and for urgent matters we will bring in the on-duty engineer right away.
City not found. Please check the spelling.