The Network Administrator, Human Resources

* Set up training program for all employees on network security policies and any new changes to network security.

User ID’s, passwords, and pin numbers should not be shared for any reason between workforce members. Certain IT administration accounts are shared by administrators – these accounts are closely monitored and controlled by the IT Supervisor. All requests for granting/revoking access must follow procedures documented below.

Is used a lot in colleges and schools it provides access to the right user it also manages and develops user’s access to computing resources; every user has to make a username and a password. The admin users can search the directory and access the central and departmental file servers, apps and printers across the network. It also makes sure the IT security is in good strength. Account management lowers the computing costs by reducing the number of servers needed for their department.

“New users are assigned access based on the content of an access request. The submitter must sign the request and indicate which systems the new user will need access to and what level of access will be needed. A manager’s approval is required to grant administrator level access.”

One should never run with administrator or root privileges regardless of the operating system platform. If a hacker manages to get in, he or she will still need to find ways to perform privilege escalation to cause more harm. Hopefully, this buys enough time for security professionals within the company to notice abnormal behavior and take action.

Without proper security controls in place to monitor and secure these privileged accounts, organizations are increasing the risk of a data breach.

The attack performed on the network had the intention of making the online services provided to students unusable during a critical time of need for those systems. The attack was first performed by acquiring the Administrator password for the systems and using each system to perform a large quantity of requests for service to the web servers. By dissecting what occurred steps can be put in place to prevent such an attack in the future. This attack can be summarized in a few bullets:

internal and external users to whom access to the organization’s network, data or other sensitive

34. What command-line toll can be used with a standard user account to reduce the risks associated with the Administrator account? Run as

“New users are assigned access based on the content of an access request. The submitter must sign the request and indicate which systems the new user will need access to and what level of access will be needed. A manager’s approval is required

As a business becomes larger it is important to formalize certain aspects so that they can be applied similarly across all employee and situations. “Policies can be considered business rules and are mandatory, the equivalent of organization-specific law…” (quote from SANS 524.1 Security Policy awareness) Policies will vary from business to business in order to suit their needs. Here are some ideas to help a business’s create policies to defend against cyber attack.

5. Change my account type. This option allows you to change from standard user to administrative user.

2. You can automatically add a technical support user to the local Administrators group of each domain workstation by using Restricted groups . 3. The

Users accounts should be limited and not granted excessive authorizations especially ability to access to administrative functions such as read and/or write source code and source code trees.

Server administrators are required to maintain a broad range of security safeguards in order to secure a server. While backups are a valuable tool, it is not a replacement for preventative measures meant to protect the server. If the administrator is not diligent or sufficiently knowledgeable they can introduce a broad range of security issues. When an administrator does not configure and monitor logs, an attack in progress can be missed, as well as reviewing any evidence left behind after an attack to develop new procedures to block future incidences. Failing to implement a patch policy for the system and software installed can leave the server open to attack. Server administrators who do not change settings from default settings also leave the server open to unused services that are not needed being left open, and default passwords in place.