An Epidemic of Security Worst Practices - Slide 6

Email     |     Share  
1 | 2 | 3 | 4 | 5 | 6 | 7
Next An Epidemic of Security Worst Practices-6 Next

Rotate SSH keys every 12 months to mitigate the risk incurred by average two-year employee turnover rates of service. Failure rate – 82 percent.

Recommendation: SSH keys provide servers and their administrators with root-level access to critical systems and data. A key-rotation period that far exceeds the average employee's lifecycle significantly increases the risk that a former employee or malicious admin can gain unfettered and unauthorized access. Enterprises that do not rotate keys fail to understand their significance and related security vulnerabilities. Deploy technologies that simplify and automate key rotation.

Venafi, the inventor of and market leader in Enterprise Key and Certificate Management (EKCM) solutions, in conjunction with Echelon One, an IT security research leader specializing in security programs and guidance, recently released the 2011 IT Security Best Practices Assessment. Echelon One led the effort to establish a set of best practices and worked closely with Venafi to evaluate how well 420 enterprises and government agencies implemented them. The assessment revealed an epidemic of security worst practices, with a majority of organizations failing to adhere to simple data protection standards. In many cases, it revealed that many organizations are critically unaware of what security practices are currently in place.

"The assessment findings were startling. We suspected we would find that many organizations were challenged, but we had no idea that failure rates would run this high," said Bob West, founder and CEO of Echelon One. "The good news is that with this information and free self assessment, organizations can see where they rank in comparison to peers, and determine where weaknesses exist. They can identify steps to significantly reduce security and compliance risks by leveraging automated processes with multi-layered data security strategies, including managed encryption."

The assessment evaluated where organizations rank in the implementation of 12 IT security and compliance best practices, ranging from how organizations leverage and manage encryption to how often they conduct security awareness and training programs. This slideshow highlights the top five best practices, their high failure rates, and recommendations for mitigation.

More Slideshows:

Five IT Career Skills on the Upswing Five IT skills getting attention from recruiters.

Twelve Finer Points of Email Etiquette A closer look at email dos and don'ts.

Ten Notable Apps for Your iPhone iPhone apps to help you get more done.


Related Topics : Unisys, Stimulus Package, Security Breaches, Symantec, Electronic Surveillance

More Slideshows

Social14-190x128.jpg 10 Ways to Improve Your Social Media Security Policy and Posture

When phone calls, video conference information, pictures, chat logs, etc. are all stored in a central location via social media, a potential hacker has access to just about everything, quickly and easily. ...  More >>

Security120-290x195 5 DDoS Myths Debunked

Unearth the real story behind five commonly held myths about distributed denial-of-service attacks. ...  More >>

Security119-190x128 8 Tips for Ensuring Employee Security Compliance

IT security ultimately depends on making sure employees use the appropriate tools and comply with policies designed to protect them and their data/applications. ...  More >>

Subscribe to our Newsletters

Sign up now and get the best business technology insights direct to your inbox.