Security Controls Overview Quiz

Security Controls Overview

• Security vulnerability assessment identifies weaknesses in networks and systems, with a high risk of exploitation leading to significant losses.
• To mitigate these risks, security controls are implemented, categorized into administrative, physical, and technical controls.

Administrative Controls

• Background Checks: Essential for filtering unsuitable individuals during the hiring process.
• Role Separation: Division of responsibilities (e.g., separate individuals for purchase orders and payment approvals) to reduce fraud risk; implements the principle of “least privilege.”
• Mandatory Vacations: Enforced time off for employees to expose any potential fraudulent activities while ensuring job duties are covered during absence.

Physical Controls

• Person-trap: A controlled access point requiring individual authentication to prevent unauthorized entry; ensures accountability.
• Physical Guards: Personnel monitoring entry points enhance security by checking credentials.
• Locks: Used in various forms like securing wiring closets and devices to prevent unauthorized access.
• Sensors: Detects movement, monitors bodies, and tracks environmental parameters such as temperature and humidity.

Technical Controls

• Access Control Lists (ACLs): Define who has access to various systems (databases, servers) and manage data traffic flows within a network.

  Access Control Lists (ACLs) for a system can typically be found in several places, depending on the type of system or network device being used:

  1. Network Devices: For routers, switches, and firewalls, ACLs are usually configured and stored within the device's configuration files. You can access them through the device's command-line interface (CLI) or a graphical user interface (GUI) if available.

  2. Operating Systems: For both Windows and Unix/Linux systems, ACLs can be found and modified through the file system utilities. On Windows, you can view and edit ACLs using the File Explorer properties dialog and advanced security settings. On Unix/Linux, ACLs can be managed using commands like getfacl and setfacl.

  3. Database Systems: Databases often have their own access control mechanisms. ACLs or similar permission settings can be managed through database management tools or SQL commands. For example, in MySQL, you might use SQL statements to view or change user privileges.

  4. Cloud Services: For cloud-based services or platforms (like AWS, Azure, or Google Cloud), ACLs are often managed through the platform's management console or API, where you can define and view access permissions for different resources.

  5. Application-Level ACLs: Some applications have their own ACL configurations, which may be stored in configuration files or managed through an administrative interface within the application.

  To find the ACLs for a specific environment, consult the documentation for the specific hardware or software you are working with, as the method to access and manage ACLs can vary widely between different platforms and technologies.Traffic Filtering: Enforces security policies by allowing or blocking access to specific website categories based on administrative policies.

• Decryption: Firewalls decrypt traffic to inspect application layer data for security threats, ensuring enforcement of policies based on actual data content.

• Network Segmentation: Divides network into segments (e.g., guest Wi-Fi, corporate network) using controls to isolate and protect sensitive data.

• 802.1x Authentication: Ensures only authorized devices can connect to the network, enhancing security mechanisms.

Additional Concepts

• Zero Trust Model: Advocates skepticism regarding trust within any network segment, reinforcing controls regardless of internal and external device status.
• Microsegmentation: Fine-grained control over which devices can communicate with others within the same network, further enhancing security by limiting access to sensitive servers and resources.