Risk Management Best Practices

Risk Management banner

Risk Management muMedia kuenda kuVadzidzi Kuita Mafambiro (M2DMM)

Kutarisira njodzi hakusi nyore, kwete chiitiko chenguva imwe chete kana sarudzo, asi yakakosha. Izvo zvakare ndezvekuti, sarudzo dzaunoita (kana kutadza kuita) mune imwe nzvimbo inobata iyo yese. Tinoda kukushongedzera iwe nekugovana mamwe emhando yepamusoro maitiro atakatora munzira. Ngatisundirei kumashure kutya tichizvipira kuhuchenjeri, uye dai Mwari vatipa njere dzekusiyanisa pakati pezviviri izvi.

Kana uchida kuwedzera chimwe chinhu chawadzidza, sununguka kusiya mhinduro pazasi.


Wedzera Dziviriro kumidziyo yako

Ita kuti ive chikamu chezvibvumirano zvako zvekudyidzana izvo nhengo dzeM2DMM dzinofanirwa kuchengetedza zvishandiso zvadzo (kureva, laptop, desktop, piritsi, hard drive, mbozhanhare)

nharembozha

➤ Batidza kukiya skrini (semuenzaniso, kana mudziyo wako usingashande kwemaminetsi mashanu, unokiya uye unoda password).

➤ Gadzira mapassword akasimba/biometric kuti uwane zvishandiso.

➤ Encrypt zvishandiso.

➤ Isa Antivirus application.

➤ Gara uchiisa zvigadziriso zvitsva.

➤ Dzivisa kubatidza kuzadza kwega.

➤ Usarambe wakangopinda mumaakaundi.

➤ Shandisa VPN kubasa.


Chengetedza Sockets Layer (SSL) kana HTTPS

Kana saiti isina SSL Chitupa, saka zvakakosha kuti igadziriswe. SSL inoshandiswa kuchengetedza ruzivo rwakadzama rwunotumirwa paInternet. Iyo yakavharidzirwa kuitira kuti anenge achida kuigamuchira ndiye ega anogona kuiwana. SSL yakakosha pakudzivirira kubva kune matsotsi.

Zvekare, kana iwe wakagadzira webhusaiti, ingave webhusaiti yeminamato, saiti yeevhangeri, kana a Mudzidzi.Zvishandiso semuenzaniso, iwe unofanirwa kuseta SSL.

Kana saiti iine SSL Chitupa, iyo URL inotanga nayo https://. Kana isina SSL, ichatanga http://.

Risk Management Yakanyanya Kudzidzira: Musiyano uripo pakati peSSL uye kwete

Iyo iri nyore nzira yekumisikidza SSL ndeye yako yekutambira sevhisi. Google zita rako rekugamuchira sevhisi uye nzira yekumisikidza SSL, uye iwe unofanirwa kuwana mirairo yekuti ungaita sei izvi.

Mienzaniso yemasaiti ekugamuchira uye yavo SSL yekumisikidza madhairekitori:


Chengetedza Backups

Chengetedza backups yakakosha mukutarisira njodzi. Iwe unofanirwa kuve ne backups kune ako backups kune ako ese mawebhusaiti kusanganisira yako Disciple.Tools muenzaniso. Ita izvi kune yako pachako zvishandiso zvakare!

Kana iwe uine ma backups akachengeteka munzvimbo, saka haufanirwe kunetseka nezvekuparara kwewebhusaiti, kudzima netsaona, uye kumwe kukanganisa kukuru.


Webhusaiti Backups


Amazon s3 chiratidzo

Primary Storage: Seta otomatiki backups vhiki nevhiki kunzvimbo yakachengeteka yekuchengetedza. Tinokurudzira Amazon S3.

Google Drive Logo

Chechipiri uye Chepamusoro Chekuchengetedza: Dzimwe nguva uye kunyanya mushure mekusimudzira kwakakosha, ita makopi eaya mabhapu mune akati wandei edzimwe nzvimbo dzakachengeteka dzekuchengetera (kureva, Google Drive uye/kana encrypted uye password yakachengetedzwa yekunze hard drive)


Kana uri kushandisa WordPress, funga izvi backup plugins:

UpdraftPlus logo

Tinokurudzira uye kushandisa UpraftPlus kune ma backups edu. Iyo yemahara vhezheni haina backup yeDisciple.Tools data, saka kuti ushandise plugin iyi, unofanirwa kubhadhara iyo premium account.


BackWPup Pro logo

Takaedzawo BackWPup. Iyi plugin ndeyemahara asi yakanyanya kunetsa kumisikidza.


Kusvikira Kuwana

Kuwanda kwekuwana kwaunopa kumaakaundi, kunowedzera njodzi. Haasi munhu wese anofanirwa kuve neAdmin basa rewebhusaiti. Admin anogona kuita chero chinhu kune saiti. Dzidza mabasa akasiyana esaiti yako uye ugoapa zvinoenderana nemabasa emunhu.

Kana pane kukanganisa, iwe unoda kuti ruzivo rushoma ruvepo. Usape mukana kune akakosha maakaundi kune vanhu vasingachengetedze Cybersecurity maitiro akanaka.

Shandisa musimboti uyu kumawebhusaiti, masocial media account, password mamaneja, email ekushambadzira masevhisi (kureva, Mailchimp), nezvimwe.


Kana iwe uri kushandisa WordPress saiti, unogona kushandura basa remushandisi uye marongero emvumo.

Risk Management: shandura marongero evashandisi kudzikamisa mvumo yavo


Chengetedza Mapassword

Kutanga, USAGOVA PASSWORDS nevamwe. Kana iwe uchifanira kuita chero chikonzero, shandura password yako mushure.

Chechipiri, ZVINOKOSHA kuti munhu wese ari chikamu chechikwata chako cheM2DMM ashandise mapassword akachengeteka.

Kana munhu achinge awana mukana, ndipo pavanenge vachida kuve nekuva nepassword yakachengeteka yakasiyana yeESE account.


Zvinenge zvisingaite kuyeuka mapassword aya, uye hakusi kuchenjera kunyora pasi mapassword ako munotibook kana kuti kuachengeta pakombiyuta yako. Funga kushandisa password maneja senge 1Password.


ndabatwa here? logo

Ita shuwa kuti email yako yakasainwa Ko ini ndabatwa?. Saiti ino ichakuzivisa iwe kana email yako ikabuda mune yakabiwa uye yakaburitswa dhatabhesi online. Kana izvi zvikaitika, chinja password yako nekukurumidza.


2-Nhanho Yekuratidzwa

Pese pazvinogoneka, shandisa 2-step verification. Izvi zvinopa ako edhijitari account dziviriro yakanyanya kubva kune hackers. Zvisinei, ndizvo peremptory kuti iwe unochengetedza zvakachengetedzeka macode eakaundi yega yega yaunoshandisa nayo. Izvi ndezvekuti ukangorasikirwa nechishandiso chaunoshandisa pakuongorora nhanho mbiri.

2-nhanho verification


Yakachengeteka Email

Iwe unoda email sevhisi inogara iripo pane yazvino kuchengetedza maficha. Zvakare, usashandise zita rako pachako kana ruzivo rwekuzivisa mune yako mushandisi ruzivo.


Gmail Logo

Gmail ndeimwe yeanotungamira email masevhisi ekuchengetedza email. Kana ukaishandisa, inopindirana uye haiite kuti iite senge uri kuyedza kuchengetedzwa.


Proton Mail Logo

Proton Mail iri itsva uye parizvino ine inogadziridza inoshanda. Kana uri kuishandisa, zviri pachena kuti uri kuyedza kushandisa email yakachengeteka uye haina kupindirana nemamwe maemail.



Virtual Private Networks (VPNs)

VPNs chinhu chekufunga pese paunenge uchigadzira kutarisira ngozi plan. Kana iwe uchigara munzvimbo ine njodzi huru, VPN ichava imwe nhanho yekudzivirira yebasa reM2DMM. Kana ukasadaro, zvingave kana kusakosha.

Usashandise VPN paunenge uchiwana Facebook, sezvo izvi zvingaita kuti Facebook ivhare account yako yekushambadzira.

VPNs inoshandura IP kero yekombuta uye inopa data rako imwe dura rekudzivirira. Iwe unozoda VPN kana iwe usingade hurumende yemuno kana Internet Service Provider kuona kuti ndeapi mawebhusaiti auri kushanyira.

Ramba uchifunga, VPNs inodzika pasi kasi yekubatanidza. Vanogona kukanganisa masevhisi uye mawebhusaiti asingadi maproxies, uye izvi zvinogona kuita kuti account yako imiswe.

VPN Zvishandiso


Digital Gamba

Paunomisa maakaundi edhijitari, vanozobvunza ruzivo rwemunhu senge zita, kero, nhamba dzenhare, ruzivo rwekadhi rechikwereti, nezvimwe.

Kuti uwedzere imwe danho rekuchengetedza, funga nezve kuunganidza a Digital Gamba kuchikwata chako. A Digital Gamba vanozvipira kuzivikanwa kwavo kumisikidza maakaundi edhijitari.

Gamba redhijitari rinomiririra sangano repamutemo sebhizinesi, risingabatsiri kana sangano rekumisa Meta Bhizinesi Akaundi muzita remutemo. Meta ndiyo kambani yevabereki ye Facebook ne Instagram.

Ivo vanhu vasingagari munyika vanokwanisa kuchengetedza hushumiri kubva mukutyisidzirwa kwekuchengetedzwa kwenzvimbo (kureva matsotsi, mapoka ane utsinye kana hurumende, nezvimwewo).


Encrypted Hard Drives

Kufanana neVPNs uye Digital Heros, kuva ne-yakazara-encrypted hard drives injodzi manejimendi akanakisa maitiro kune yakanyanya-njodzi minda.

Iva nechokwadi chekuvharidzira zvizere ma hard drive pamidziyo yako yese (kureva, laptop, desktop, piritsi, kunze hard drive, mbozha nhare)


iPhones uye iPads

Chero bedzi iwe uine passcode yakaiswa pane yako iOS kifaa, yakavharidzirwa.


Laptops

Ani nani ane mukana wekupinda pakombuta yako haadi password yako kuti aone mafaera. Vanogona kungobvisa hard drive voipinza mune mumwe muchina kuti vaverenge mafaera. Chinhu chega chinogona kumisa izvi kushanda ndeye yakazara-dhisiki encryption. Usakanganwa password yako, sezvo iwe usingagone kuverenga dhisiki pasina iyo.


OS X 10.11 kana kuti gare gare:

Risk Management: Tarisa OS FireVault

1. Tinya Apple menyu, uye ipapo System Preferences.

2. Dzvanya Chengetedzo & Yakavanzika.

3. Vhura iyo FileVault tab.

4. FileVault ndiro zita re OS X's full-disk encryption feature, uye inofanira kugoneswa.


Windows 10, XNUMX, XNUMX:

Nyowani Windows 10 malaptop otomatiki ane yakazara-dhisiki encryption inogoneswa kana iwe ukasaina neMicrosoft account.

Kutarisa kuti yakazara-dhisiki encryption inogoneswa:

1. Vhura iyo Zvirongwa app

2. Enda kune System > About

3. Tsvaga iyo "Device Encryption" yekuisa pazasi pePaneru yePaneru.

Ongorora: Kana iwe usina chikamu chakanzi "Chishandiso Encryption," wobva watsvaga marongero akanzi "BitLocker Settings."

4. Baya pairi, uye tarisa kuti motokari yose yakanyorwa kuti “BitLocker on.”

5. Kana iwe ukadzvanya pairi uye hapana chinoitika, iwe hauna encryption yakagoneswa, uye iwe unofanirwa kuigonesa.

Risk Management: Windows 10 encryption cheki


Kunze Kunotyaira Drives

Kana iwe ukarasikirwa nedhisiki yako yekunze, chero munhu anogona kutora uye kuverenga zvirimo. Chinhu chega chinogona kumisa izvi kuti zvisaitike ndeye yakazara-dhisiki encryption. Izvi zvinoshanda kune zvimiti zve USB zvakare, uye chero midziyo yekuchengetedza. Usakanganwa password yako, sezvo iwe usingagone kuverenga dhisiki pasina iyo.

OS X 10.11 kana kuti gare gare:

Vhura Finder, tinya-kurudyi pane drive, uye sarudza "Tora Ruzivo." Mutsetse wakanyorwa kuti "Format" unofanirwa kuti "encrypted," senge mune ino skrini:

Windows 10, XNUMX, XNUMX:

Kunyora madhiraivha ekunze anongowanikwa neBitLocker, chinhu chinongosanganisirwa mukati Windows 10 Nyanzvi kana zvirinani. Kuti uone kuti dhisiki rako rekunze rakavharirwa, tinya kiyi yeWindows, nyora "BitLocker Drive Encryption" uye vhura iyo "BitLocker Drive Encryption" app. Iyo yekunze hard disk inofanirwa kumakwa nemashoko ekuti "BitLocker on." Heino skrini yemumwe munhu anga asati anyora C: partition:


Data Pruning

Bvisa Old Data

Hungwaru kubvisa data risingakoshi risisabatsiri kana kupera nguva. Aya anogona kunge ari ekare ma backups kana mafaera kana yapfuura matsamba akachengetwa paMailchimp.

Risk Management: Bvisa mafaera ekare

Pachako paGoogle

Google zita rako nekero yeemail kamwe pamwedzi.

  • Kana iwe ukawana chero chinhu chinogona kukanganisa kuchengetedzeka kwako, nekukurumidza bvunza chero munhu aisa ruzivo pamhepo kuti abvise.
  • Mushure mekunge yadzimwa kana kuchinjwa kubvisa chitupa chako, bvisa kubva kuGoogle cache

Simbisa Chengetedzo paSocial Media Accounts

Kunyangwe iri yemunhu kana hushumiri hune hukama, enda kuburikidza nekuchengetedza zvigadziriso pasocial media account yako. Ita shuwa kuti hauna kukanganisa zvinyorwa kana mifananidzo. Yagadzirirwa zvakavanzika here? Ita shuwa kuti wechitatu bato maapps haana zvakawanda zvekusvika pane zvavanofanira.


Compartmentalize Basa uye Personal Environments

Izvi zvimwe ndizvo zvakanyanya kunetsa kuita kune vakawanda. Zvisinei, kana ukazviita kubva pakutanga, zvichava nyore.

Shandisa mabhurawuza akasiyana ebasa uye hupenyu hwemunhu. Mukati meaya mabhurawuza, shandisa yakazvimirira password maneja maakaundi. Nenzira iyi, nhoroondo yako yekutsvaga webhusaiti, uye mabhukumaki akaparadzaniswa.

Gadzira Risk Assessment uye Contingency Plan

Paunenge uchishanda munzvimbo dzine njodzi huru, magwaro eRisk Assessment uye Contingency Planning (RACP) akagadzirirwa kukubatsira kuona chero njodzi dzinogona kuitika munharaunda yako yeM2DMM uye kugadzira hurongwa hwekupindura hwakakodzera kana zvikaitika.

Iwe unogona kubvumirana sechikwata kuti uchagovana sei nezve kubatanidzwa kwako nebasa, matauriro amuchaita zvemagetsi uye nhungamiro yekuvimba kwechikwata.

Nemunamato nyora zvinogona kutyisidzira, nhanho-nhanho yekutyisidzira, tripwires uye nzira yekudzivirira kana kubata nekutyisidzira.

Rongedza Recurring Security Audit

Imwe kurudziro yekupedzisira ndeyekuti timu yako yeM2DMM ifunge kuronga kudzokororwa kwekuchengetedza kuchengetedza. Shandisa aya akanakisa maitiro pamwe neawakadzidza mushure mekuita ongororo yekutarisa njodzi yemunda uye kuronga. Ita shuwa kuti munhu wese anozadza cheki runyoro rwekuchengetedzeka kwakanyanya.


Shandisa Kingdom.Training's Risk Management Audit Checklist

Leave a Comment