Recommendations (1)
Security Policy - I
- strong account management
- use difficult passwords; close accounts with weak passwords
- computers must be logged-out or locked when employees are away from offices
- account should be deactivated after a certain period of inactivity
- check traffic logs regularly; use scanning tools: tiger, SATAN, crack; install firewall and filters in routers
- install security patches from vendors, newest versions of software
- use encryption (ssh, scp, slogin)
- disable unix r-commands, finger, tftp, etc
- carefully install anonymous FTP (read only!)