05_IIBA CCA Securing the Layers

IDENTIFY-RISK ASSESSMENT (RA)-1

Asset vulnerabilities are identified and documented

PROTECT-DATA SECURITY (DS)-3

Assets are formally managed throughout removal, transfers, and dispositions

Network Segregation

Assets are grouped together based on common security requirements, and then each group is placed into its own isolated network zone, so that traffic flowing into each zone will be subject to the security policies defined by the zone's security requirements, and filtered accordingly.

Security Architecture Business Context

Attackers will typically go after the weakest point in a network or system. This weak point is rarely a security feature or function. When a secure system or network is being designed, it is important to consider the weakest link in the system and ensure it is secure enough

Full Disk Encryption

Automatic and transparent encryption of all harddrive data storage

Infrastructure as a Service (IaaS)

Offers the capability to provision processing, storage, networks and other fundamental computing resources, enabling the customer to deploy and run arbitrary software, which can include operating systems (OSs) and applications

uncontrolled

P2P applications are often designed to open an _____ channel through network boundaries, thus providing a way dangerous content, such as botnets, spyware, and viruses to enter an otherwise protected network

piracy

P2P applications, while possessing many legitimate applications, are associated with ____ and abuse of copyright and other forms of intellectual property

PROTECT-AWARENESS and TRAINING (AT)-5

Physical and information security personnel understand roles and responsibilities

IDENTIFY (ID)-ASSET MANAGEMENT (AM)-1

Physical devices and systems within the organization are inventoried; -5 Resources (hardware, devices) are prioritized based on their classification, criticality, and business value

PROTECT-INFORMATION PROTECTION (IP)-5

Policy and regulations regarding the physical operating environment for organizational assets are met; 9 Response plans (incident response and business continuity) and recovery plans (incident recovery and disaster recovery) are in place and managed

well-structured network

Security Operations Centers and threat hunting teams can be more effective in a ____. Traffic that may be normal in the user segment could be malicious in the server segment. This would be very hard to detect in a flat network

Information Asset

body of knowledge that is organized and managed as a single entity. Like any other corporate asset, an organization's these have financial value

Security Perimeter

boundary that defines the area of security concern and security policy coverage

Platform as a Service (PaaS)

built on top of the IaaS model as, in addition to providing the services from IaaS, this provider will also provide operating systems, middleware, and other runtime

Identify threat agents and possible attacks

characterize groups of potential attackers - inside and outside, malicious and inadvertent

Network Access Control (NAC)

concept of controlling access to an environment through strict adherence to, and implementation of, security policy. The goals of this are to prevent/reduce zero-day attacks, enforce security policy throughout the network, and use identities to perform access control.

Honeypot

decoy computer system for trapping or tracking hackers or new hacking methods. They are designed to intentionally engage and deceive hackers and identify malicious activities

Next Generation Firewall

deep-packet inspection firewall that moves beyond port/protocol inspection and blocking to add application-level inspection, intrusion prevention and bringing intelligence from outside the firewall

TCP/IP or DoD Model

descriptive model for modelling current internet architecture, as well as providing a set of rules that govern all forms of transmission over a network. It is comprised of four layers

Smart Meter

digital data collection and communication device used in the energy sector. Energy consumption data is tracked and made available to the provider and customer

Security Perimeter

first line of protection between networks of different zones. In general, it can include firewalls as well as proxies and devices such as intrusion detection systems (IDS) to warn of suspicious traffic

Identify exploitable vulnerabilities

focus on those that connect the identified possible attacks to the identified negative consequences

Prioritize identified risks

for each threat, estimate a number of likelihood and impact factors to determine overall risk/severity level

Sandboxing

form of software virtualization that lets programs and processes run in their own isolated environments

ring, bus, star and mesh

four basic physical topologies

Risk Management, Benchmarking and Good Practice, Financial, Legal and Regulatory

four factors which should drive architectural decisions

Hardware Security Module (HSM)

physical device that safeguards the cryptographic infrastructure by securely managing, processing and storing cryptographic keys inside a tamper-resistant external device that attaches directly to a computer

Network Topology

physical layout and organization of computers and networking devices.

Assets

pieces of IT equipment, including network infrastructure components, security infrastructure components, physical buildings/rooms/racks, laptops and personal computers, mobile devices, etc.

Whitelisting

practice of explicitly allowing identified people, groups, or services access to a particular privilege, service, or recognition

Defence in Depth

practice of layering defenses to provide added protection. It increases security by raising the effort needed in an attack. This strategy places multiple barriers between an attacker and an enterprise's computing and information resources

OSI Reference Model

prescriptive model that characterizes and standardizes the communication functions of a telecommunication or computing system without regard for its underlying internal structure and technology. It is comprised of seven layers

Threat Modelling

procedure for optimizing network/application/internet security by identifying objectives and vulnerabilities and then defining countermeasures to prevent, or mitigate the effects of, threats to the system

Encryption

process of taking an unencrypted message (plaintext), applying a mathematical function to it (encryption algorithm with a key) and producing an encrypted message (ciphertext).

Worm

program that is capable of copying itself onto other computers or devices without user interaction

Trojan

program that pretends to be legitimate code but conceals other unwanted functions

Dynamic Host Configuration Protocol (DHCP)

protocol used by networked computers (clients) to obtain IP addresses and other parameters such as the default gateway, subnet mask and IP addresses of domain name system (DNS) servers from a DHCP server; ensures that all IP addresses are unique

Internet of Things (IoT)

refers to systems that involve computation, sensing, communication, and actuation. Involves the connection between humans, non-human physical objects, and cyber objects, enabling monitoring, automation, and decision making.

Platform Security

security model that is used to protect an entire platform by using a centralized security architecture or system.

Rule Set

set of access control rules defined in firewalls, which control which traffic is permitted through and which must be blocked

Security Baseline

set of basic security objectives which must be met by any given service or system. Details depend on the operational environment a service/system is deployed into, and might thus, creatively use and apply any relevant security measure. Derogations from the baseline are possible and expected and must be explicitly marked

Application Programming Interface (API)

set of routines, protocols and tools referred to as "building blocks" used in business application software development; also thought of as an interface between a server and a client.

platform security

Unlike a layered security approach in which each layer/system manages its own security, this secures all components and layers within a platform.

Wrapper

Encapsulation solutions that manage, configure, and update embedded systems through a controlled channel; their security may be enhanced through addition of authentication and integrity features

Endpoint

any device through which users connect to information, systems, and networks, for example laptops, smart phones, printers, tablets.

Physical Topology

not always the same as logical topology

Network Segmentation

partitioning of a network into smaller networks

incomplete

A segregated network architecture is ____ if an organization does not have full visibility into it. This visibility is achieved by collecting, inspecting and analyzing traffic at the various security zones between segregated networks

Near-Field Communications (NFC)

A wireless technology that enables a variety of contactless and proximity-based applications, such as payments, information retrieval, mobile marketing and device pairing

Physical Access

Access into a network connection or wiring area or to proximity to LAN resources or systems

firewalls

After end-to-end application security requirements and risk factors are identified, these can be deployed as one component to help meet those security requirements

Sandbox

An isolated environment, referred to as this in this context, enables users to run programs or execute files without affecting the underlying system which they run on. In the case of PaaS, this is typically a virtualized environment

isolate

An underlying virtualization platform, such as VMware or Hyper-V, is used to do this to environments

Threat Event

Any event during which a threat element/actor acts against an asset in a manner that has the potential to directly result in harm

Attack Surface

Components available to be used by an attacker against the product itself

AV/AM

Coordination of this kind of policy enforcement across network, endpoints, and cloud services

Data Isolation

Data within partitioned applications which cannot be read or modified by other applications

Malware (Malicious Software)

Designed to infiltrate, damage or obtain information from a computer system without the owner's consent

Product Threat Models Steps

Determine Assessment scope Identify threat agents and possible attacks Understand existing countermeasures Identify exploitable vulnerabilities Prioritize identified risks Identify countermeasures to reduce threat

botnet

Due to the overlapping nature of P2P node structure, it can be very difficult to fully detect and shut down the controlling _____, allowing it to continue operating unimpeded

Pyramid of Trust

Each layer can rely on the effective security of its underlying layer without being able to verify it directly

target device

For malware to spread, it needs to be installed on this or computer. Some of the most common infection techniques are phishing, websites/drive-by attacks and removable media such as memory sticks

PROTECT (PR)-ACCESS CONTROL (AC)-1

Identities and credentials are managed for authorized devices and users; -2 Physical access to assets is managed and protected

Damage Limitation

If an attack damages a partitioned application, this damage cannot spread to other partitions/applications

firewall

If improperly managed or deployed, this can leave gaps in an organization's security that attackers can use to infiltrate your network.

platform

If this is compromised the entire infrastructure is vulnerable

IoT devices

These being connected to the internet but not adequately secured has resulted in incidents such as hackers accessing in-home monitoring devices, and botnets shutting down entire parts of the internet

IoT devices

These contain and collect a lot of sensitive information about their physical surroundings

PROTECT-MAINTENANCE (MA)-1

Maintenance and repair of organizational assets is performed and logged in a timely manner with approved and controlled tools

trust domains

Firewalls should be placed between entities that have different this

Anti-Virus/Anti-Malware

Focal Points • Be familiar with existing and emerging types of malware and their attack vectors. • Understand the types of devices and endpoints on the network and what level of Anti-Virus/Anti-Malware (AV/AM) coverage is required. • Understand the level of operational/management overhead is required to maintain the deployed AV/AM infrastructure. • Understand how the various AV/AM components interact with each other and how data can be aggregated for reporting.

Product Security: Embedded Systems

Focal Points • Understand how the technical and functional requirements meet the required security for critical embedded systems. • Understand how and where embedded systems will be deployed as part of a project. • Understand what mitigating controls can be deployed to account for embedded systems that are not secure on their own

System Security: Servers

Focal Points • Understand sensitivity and classification as it relates to server access controls. • Understand how users with a requirement for administrative access, whether IT staff or business workers, should be assigned only those privileges necessary for them to accomplish their required tasks. • Understand what is required for the server to meet technical requirements and what features are unnecessary and can be disabled. • Understand physical and technological controls required to control and monitor access to the server room or data center

Product Threat Models

Focal Points • Understand the business cases and usage scenarios that will feed into the threat modelling activity. • Understand how risks will be ranked for likelihood and impact • Understand how risks will be addressed after prioritization. • Understand how the security objectives of the organization align to the defined threat prioritization.

Internet of Things

Focal Points • Understand the data being transmitted through Internet of Things (IoT) devices, and connectivity requirements. • Understand the security objectives for the IoT product(s) and the relevant threats to those objectives. • Understand how information about IoT devices, such as serial numbers, will be protected. • Understand how firmware will be managed and updated on deployed IoT devices.

Platform Security

Focal Points • Understand the pros and cons of platform security, and its fit (or not) to business and security requirements. • Understand the platform being deployed and the applicable security controls to be applied. • Understand the use cases for the platform and if they may require additional security measures. • Understand how platforms will have required security patches applied and at what frequency.

Segregation

Focal Points • Understand the security requirements of various servers and applications on the network for them to be properly classified. • Understand the sensitivity of data and criticality of applications to facilitate the segregation activities. • Understand what data from a zone may need to be transmitted to another zone and if, based on data sensitivity, that communication flow should be permitted and under what conditions. • Understand organizational business and security requirements to ensure that any segregation strategy doesn't impede the business

Self-Encryption Device

Hard drive that self-encrypts data to a media storage device and then automatically decrypts the data from the media.

spear-phishing and social engineering

Hostile actors are increasingly targeting internal networks using techniques such as these. This, coupled with an increase in the use of mobile and remote working, provides additional attack vectors for access to a company's internal network

Access Control

Improving Server Security can have a positive impact on this security by the very nature of limiting the opportunities for potential access

embedded systems

In-vehicle computing systems can include these to monitor engine performance, optimize braking, steering and suspension, but can also include in-dash elements related to driving, environmental controls, and entertainment

Security Architecture Threat Risk and Vulnerability Assessments

Insecure systems tend to suffer from the same sorts of threats and vulnerabilities. Common vulnerabilities include poor memory management, the existence of covert channels, insufficient system redundancy, poor access control and poor protection of key components

File Level Encryption

Manual encryption of specific files where the user must initiate an action before the file is encrypted and stored

zero-day

Minimizing this kind of endpoint infections by pre-emptively blocking known, unknown, and targeted attacks at all endpoints, online and offline, on network and off.

Defence in Depth

Multiple layers or levels of access controls to provide layered security. In server defense the outer layer may often be physical access controls followed by logical and technical controls and finally administrative access controls

Physical, Data-link, Network, Transport, Session, Presentation, Application

OSI Reference Model 7 Layers

PROTECT-PROTECTIVE TECHNOLOGY (PT)-2

Removable media is protected, and its use restricted according to policy

Software as a Service (SaaS)

Software that is owned, delivered and managed remotely by one or more providers. The provider delivers software based on one set of common code and data definitions that is consumed by all contracted customers at anytime on a pay-for-use basis or as a subscription based on use metrics

Host Based Firewall

Software which is installed on individual computers, to protect the end host, or operating system, as opposed to at the network level

Cyber-physical

These types of systems integrate software technology into physical infrastructure such as smart cars or smart grids. These systems are often vulnerable to threats that manufacturers of traditional physical infrastructure may not consider

Peer-to-Peer (P2P)

Style of networking in which computers communicate directly with one another rather than routing traffic through managed central servers and networks. Typically used for sharing resources amongst each other

Link, Network, Transport, Application

TCP/IP or DoD Model Four Layers

Firmware Over-the-Air

Technology used by manufacturers of mobile devices after distribution, to remotely install software and services, or resolve issues wirelessly

Corporate Security Policy and/or Acceptable Use Policy

The definition of these are the first steps in defining the network security, application, and traffic policies that should be enforced. Without defined policies, a firewall configuration can end up being little more than an ad hoc listing of perceived needs.

Security Architecture Solution Scope

The idea behind defence in depth is to manage risk with diverse defensive strategies, so that if one layer of defense turns out to be inadequate, another layer of defense will hopefully prevent the breach

Security Architecture

The set of disciplines used to design solutions to address security requirements at a solution or system level

Embedded systems

These are often not only enabled with internet access but also with means to remotely modify and patch software. By compromising these, the hostile actor could install malware or even replace the operating system itself

best practices

These aren't enough for securing products

platform security

This enables the elimination of individual security measures and use of multiple applications/services to secure different layers of an IT environment.

consistency

This is an important security risk consideration for PaaS

segregation

This of sensitive information, hosts and services from the environment in which users access external resources (e.g. web, email) can minimize the impact of any potential breach due to user behavior

embedded system

This provides very little, if any, allowance for security, especially for size, weight and power considerations; thus, security must not impose excessive overhead on the protected system

Micro-Segmentation

Through the use of software, placing security controls between individual servers in a virtual environment

Egress Traffic

Traffic moving away from the firewall, regardless of destination (e.g. internet or LAN)

Ingress Traffic

Traffic moving towards the firewall, regardless of destination (e.g. internet or LAN)

Emanations

Unintentional electrical, mechanical, optical or acoustical energy signals that contain information or metadata about the information being processed, stored or transmitted in a system

Stateful Firewall

Watch traffic streams from end-to-end. They are aware of communication paths and can implement various IP Security (IPsec) functions such as tunnels and encryption. These are better at identifying unauthorized and forged communications

threat modelling

When performed early in a development cycle, this can assist with identifying potential issues and reduce the effort and complexity of resolving them

network zoning

While a firewall should always be placed at internet gateways, there are also internal network considerations and conditions where a firewall could be deployed, such as this

Flat

____ networks are easy to manage and save money; however, with minimal controls between servers and data of different classification and security levels, an attacker who gains access to one system is able to use it as a staging ground for other environments across the network.

Unpatched

____ servers are another major source of security problems

Trusted Computing Base (TCB)

group of trusted system assets consisting of software, hardware, and other controls, which together enforce security policies

Network Based Firewall

hardware appliance that is deployed on the network and filters traffic going between networks (e.g. Internet and LAN). Placed at the perimeter or border of the network

Domain Name System (DNS)

hierarchical database that is distributed across the internet that allows names to be resolved into IP addresses (and vice versa) to locate services such as web and e-mail servers

Virtualization

hosting of one or more operating systems (servers) within the memory of a single host server

Trusted Platform Module (TPM)

international standard (ISO 11889) for a secure crypto-processor, a dedicated microcontroller designed to secure hardware through integrated cryptographic keys

Security Boundary

line of intersection between any two areas, subnets or environments that have different security requirements or needs.

Grey list

list of email or Internet addresses that are neither good nor bad on first glance but require additional levels of validation before communication is permitted

Whitelist

list of email or Internet addresses that someone knows as "good"

Blacklist

list of email or internet addresses that someone knows as "bad"

Network Address Translation (NAT)

methodology of modifying network address information in IP datagram packet headers while they are in transit across a traffic routing device for the purpose of remapping one IP address space into another

Flat Network

network in which all computers (hosts) are able to communicate directly with all others within it; the network is not segmented at all

Determine assessment scope

tangible assets, application capabilities, reputation and goodwill attributes

Logical Topology

the grouping of networked systems into trusted collectives

weakest link

this could expose the entire platform to vulnerabilities

platform as a service

this may be useful when An organization has periodic spikes in application usage, requiring temporary increased computing power

Identify countermeasures to reduce threat

to reduce risk to acceptable levels based on the enterprise risk appetite

Stateless Firewall

type of firewall filter that watches end-to-end traffic flow and tracks packet sources and destinations; uses network connection state information to make traffic control decisions dynamically. These can tell if packets have been forged or have broken down, and are able to perform security functions such as encryption

Exploit

use of an identified vulnerability to violate security objectives such as confidentiality, integrity and availability

Embedded System

used to provide computing services in a small form factor with limited processing power. They embed the necessary hardware, firmware, and software into a single platform that can be used to provide a limited range of computing services, usually around a single application

Zero Day

vulnerability that is unknown to those who would be interested in mitigating it. Until the vulnerability is mitigated or AV/AM software is updated to detect it, hackers can exploit it.

IoT Technology Controls

• Anti-Virus and Anti-Malware software • Firewall • Intrusion Detection and Prevention Software • Virtual Private Network (VPN) • Key Authentication • Network Segregation

Embedded Systems Technology Controls

• Anti-Virus and Anti-Malware software • Firewall • Intrusion Detection and Prevention Software • Virtual Private Network (VPN) • Key authentication • Hardware Security Modules (HSM) • Network Segregation

Platform Security Technology Controls

• Anti-Virus/Anti-Malware • Identity and Access Management • Network Segregation • Privileged Account Management • Firewalls • Virtual Private Networks (VPN) • Intrusion Detection and Prevention Systems (IDS/IPS)

Endpoint Security Focal Points

• Business case and requirements analysis for endpoint security solutions • Understanding of applicable standards, regulatory considerations, and endpoint security controls

Physical Security Risks

• Compromise of equipment functionality from malicious activity can put confidentiality, integrity and availability at risk • Damage of physical IT assets due to natural causes, such as weather events, can prevent data and system availability • Malicious access to systems • Theft

Product Threat Models Risks

• Cybersecurity teams encounter new threats constantly, and adapting to the latest threats could protect the company from a large data breach and associated impacts. • No system is 100 percent secure; every system has vulnerabilities. At any given time, a system may not have any known software flaws, but security configuration issues and software feature misuse vulnerabilities are always present. • Older systems may be vulnerable to different threats than newer systems and due to their age, they may often be overlooked when developing threat models.

AV/AM Technology Controls

• Defence in Depth • Workstation and network-based AV/AM software • Security Information and Event Management (SIEM) software • Intrusion Detection and Prevention Software

Endpoint Security Process Controls

• Device Handling and Management Policies • IAM Governance

Segregation Technology Controls

• Disabling of non-essential services on servers and workstations • Firewalls and Security Appliances • Separation of management and operational networks • Network traffic whitelisting • Physical network isolation

Endpoint Security Risks

• Exposure of mobile devices, desktops, laptops and tablets to loss or theft which leaves data on those devices vulnerable to access from unauthorized users. • Potential of Malicious software (Malware) infecting a corporate device. • Potential data breach by unscrupulous persons accessing the data on stolen devices

Firewall Technology Controls

• Firewall Analyzer • Network Segmentation • Anti-Virus • Data Backup and Disaster Recovery

AV/AM Process Controls

• Hunt Teams • Security Operations Center • Information Security Policies (Acceptable Use, AV/AM, Software, Backup, etc.) • Security Awareness Training • Principle of Least Privilege

Endpoint Security Technology Controls

• IAM - Identity and Access Management Tools • FDE - Full Disk Encryption • FLE - File Level Encryption • SED - Self-Encryption Device • AMP - Anti-Malware Protection

Firewall Related Risks

• If improperly managed or deployed, a firewall can leave gaps in an organization's security that attackers can use to infiltrate your network. Gartner has projected that in the next three years, 99% of firewall breaches would be caused by misconfigurations. • Firewalls provide only limited protection against vulnerabilities caused by application flaws in server software on other hosts. For example, a firewall will not prevent an attacker from manipulating a database to disclose confidential information

Platform Security Process Controls

• Internal and External Audit • Architecture Standards and Policies • System Hardening Policy • Patch Management Process and Policy

Embedded System Risks

• It is often not financially and/or technically feasible to retrofit security capability into a system that was not originally designed for it. This can leave older embedded systems vulnerable to attack. • Parts from multiple manufacturers may comprise a finished product which leads to the problem that no single manufacturer has any incentive, expertise or even ability to patch the software on the embedded system once it is shipped. • Many embedded systems are designed with a focus on minimizing cost and extraneous features. This often leads to a lack of security and difficulty with upgrades and patches. Because an embedded system is in control of a mechanism in the physical world, a security breach could cause harm to people and property

Security Architecture Related Risks

• Like all system layers, networks are subject to risks that arise out of constant changes in the environment, in all aspects: people, process, and technology. • Designing security for a service must consider all connected systems or sub-systems, regardless of the layer in which they reside, otherwise any that are outside of the defined architecture can introduce vulnerabilities into and architecture if data or connections from those external sources is not validated and secured. • When privileged access is provisioned to users who require special access to restricted or sensitive information, there is a risk of abused privileges; the risk increases if the access is not audited and maintained on a regular basis

Security Architecture Technology Controls

• Network Segregation • Penetration Testing • Defense in Depth

Physical Security Process Controls

• PKI Governance Certificate Policy and Certificate Practice Statements • Access Control Governance and Processes • User credential standards • Removable media policies and controls • Employee awareness

Server Security Process Controls

• Policies and Procedures related to employee behaviours • Audits and Spot Checks • Principle of Least Privilege • Segregation of Duties • Physical Access Controls • Proactive Patching and Lifecycle Management

Firewall Process Controls

• Policy • Formalized Change Control Process for Firewall Rule Management • Principle of Least Privilege • Defense in Depth

Security Architecture Process Controls

• Principle of Least Privilege • Design and Architecture Reviews • System and Security Audits

Segregation Process Controls

• Principle of Least Privilege • Need to Know

Physical Security Technology Controls

• Public Key Infrastructure (PKI) to issue and manage certificates • Identity and Access Management (IAM) Tools • Physical Access Swipe Keys • Surveillance Systems • Redundant Systems • Remote Access Controls

Server Security Technology Controls

• SSH Keys • Firewalls • VPN and Private Networks • Public Key Encryption and SSL/TLS Encryption • Service and File Auditing • Isolated Execution Environments

Product Threat Models Technology Controls

• Security Operating Center (SOC)/Security Information and Event Management (SIEM) • Intrusion Detection and Prevention Systems • Next Generation Firewalls • Audit logging

Server Security Risks

• Servers may end up running services unintentionally and not be aware of it, which introduces potential risks that do not get identified. This can happen when administrators install an operating system, which turns on additional, unwanted services automatically with the base configuration. • P2P applications, while possessing many legitimate applications, are associated with piracy and abuse of copyright and other forms of intellectual property. • P2P applications are often designed to open an uncontrolled channel through network boundaries, thus providing a way dangerous content, such as botnets, spyware, and viruses to enter an otherwise protected network. • Due to the overlapping nature of P2P node structure, it can be very difficult to fully detect and shut down the controlling botnet, allowing it to continue operating unimpeded.

Embedded Systems Process Controls

• Software Development Lifecycle • Security by Design

IoT Process Controls

• Software Development Lifecycle • Security by Design • Security Awareness Training

AV/AM Related Risks

• USB memory sticks, CDs, DVDs and other removable media devices provide an effective way of spreading malware onto additional computers. When the media is inserted into the machine, the malware will either run and infect the target or will copy itself onto the removable media in order to prepare to infect the next machine it is plugged into. • The widespread use of mobile code such as JavaScript on websites has provided attackers with another route to infect computers with malware. Increasingly, legitimate websites are being compromised and made to host malware without the owner's knowledge, making this type of attack very difficult for the user to avoid.

Network Security Focal Points

• Understand how the security architecture ties back to the organization and existing operational processes, and the impact decisions will have on stakeholders. • Understand what is within the scope of the security architecture; as it is not possible to cover all business aspects, it is important to focus and keep scope clear to avoid unnecessary complexity. • Where architecture requirements are transferred between development efforts, understand the rationale behind the original component selection decision to ensure it fits with the current security architecture. • Understand how selected security controls relate to the four factors which should drive architectural decisions

Firewalls Focal Points

• Understand the network connectivity requirements for applications being deployed behind a firewall. • Understand the logging and audit requirements for firewall deployments. • Understand the policies which form the basis for firewall rule implementation. In the absence of documented policy, defining these is the first step to a successful deployment

Physical Security Focal Points

• Understanding, development, and implementation of Physical Security Policies, Processes, and Controls • Understanding of applicable regulatory and industry-specific requirements • Requirements analysis for IAM, PKI, solutions • Disaster Recovery, Business Continuity Planning

Product Threat Models Process Controls

• Vulnerability and Threat Risk Assessment Procedures • Secure Development • Policies and Controls • Internal and External Audits

IoT Related Risks

• Where many IoT devices use embedded systems made with components from multiple manufacturers, the risk applies where no single manufacturer has any incentive, expertise or even ability to patch the software on the embedded system once it has shipped. • A compromised IoT device on a network can give an attacker a foothold within the network to attack other portions of the network and collect sensitive data. • Traditionally, Bring Your Own Device (BYOD) applied to smartphones, but as employees work away from the office and have other connected devices like digital assistants or fitness devices connected to the same network, there are new concerns around data security; if one of those devices is compromised, hackers can move laterally to compromise a connected corporate asset such as a laptop.