Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 336
  • Last Modified:

potential Security Risks

i need some potential Security Risks which i can add to our Risk Register. pls forward me your ideas and recommendations,thank you!
0
DukewillNukem
Asked:
DukewillNukem
  • 3
  • 2
1 Solution
 
McKnifeCommented:
It would be kind of helpful to see what is already in there (complete list) to get an idea of where you are heading.
0
 
DukewillNukemAuthor Commented:
risk: Security breaches due to unauthorized use of private devices is one.
solution: Provide secure alternatives like RSA,Citrix and Good technology

risk:Lack of Firmwide document retention standard
solution: Create guidelines on documents which are marked to be deleted or passed the retention period


stuff like that.
0
 
Rich RumbleSecurity SamuraiCommented:
Have a look at my artilces
http://www.experts-exchange.com/members/richrumble.html
click ->Articles Published at the top.
Lot's of risks there to think/read about.

Now matter where I go for an engagement I always see some of these issues:
Insufficient backup's, Users are Local Admins, no patch management, default configurations being used, no password auditing, default passwords being used, clear-text protocols containing passwords, no pentesting being done, coding best practices ignored (lack of SDLC), no security awareness efforts, no log management, insufficient logging levels, no egress filtering... and on and on...
Lack of policies and procedures is another. If your company needs to be PCI or SOX compliant, then you can check off 90% of those requirements as not being done.
-rich
0
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

 
DukewillNukemAuthor Commented:
great! thats what im looking for,i will read thru it and let you know
0
 
DukewillNukemAuthor Commented:
but i need Infos like Gartner which list the current threats and risks for an enterprise,especially lawfirms
0
 
Rich RumbleSecurity SamuraiCommented:
The current threats haven't changed much... I'd suggest you read the Verizon/Microsoft reports and the OWASP top 10. Every year the threats are the same, they just switch places...
https://www.owasp.org/index.php/Top_10_2013-Top_10
http://www.verizonenterprise.com/DBIR/2013/
http://www.microsoft.com/security/sir/archive/default.aspx
https://www.sophos.com/en-us/threat-center/security-threat-report.aspx

Basically search for "threat report" or "risk report" maybe "enterprise risk report".
-rich
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now