Protective measures are the foundational elements of any robust cyber defense strategy. They are designed to prevent unauthorized access, detect malicious activity, and minimize the attack surface. These measures are implemented across various layers of an organization’s IT infrastructure.
Access Controls #
Implementing robust mechanisms to manage and restrict access to systems, networks, and data. This includes:
- Strong Authentication: Requiring users to prove their identity through strong passwords, multi-factor authentication (MFA), or biometric verification.
- Authorization: Granting users only the necessary permissions (least privilege) to perform their job functions through role-based access control (RBAC) or attribute-based access control (ABAC).
- Identity and Access Management (IAM) Systems: Centralized systems for managing user identities and their access privileges across an organization.
Network Security Controls #
Measures implemented at the network level to control traffic flow and prevent unauthorized access.
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
