How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

How LA Investment Advisors

Use Vulnerability Testing

to Protect Their Assets

Courtesy of FPA Technology Services, Inc.

http://www.TechGuideforLAInvestmentAdvisors.com

http://www.techguideforlainvestmentadvisors.com/

Sponsored by


Craig PollackFounder & CEO

A “belt and suspenders”

approach with more layers

of defense are needed:


Sponsored by



web security solutions,

intrusion prevention services,

anti-spam, and more


Sponsored by



Vulnerability testing,

also known as vulnerability

analysis or assessment,

is a procedure


Sponsored by



that identifies and categorizes

the externally facing security

flaws in a company’s

IT infrastructure


Sponsored by



Defining and Classifying

Infrastructure Resources


Sponsored by



Cataloguing resources

that are used to deliver

online services and contain

confidential firm data


Sponsored by



makes it easier to pinpoint

the source of a DOS (Denial of

Service) attack, hack attempt,

or malware opportunity


Sponsored by



Assigning Relative Levels of

Importance to Every Resource


Sponsored by



In the case of a multi-target

attack, web servers would

take priority over smartphones


Sponsored by



Identifying Potential Threats


Sponsored by



Internet security experts

or specially designed software

packages intentionally probe

a system or network to locate

weaknesses


Sponsored by



Putting Together a Plan to Deal

with More Serious Problems First


Sponsored by



Senior managers need to:


Sponsored by



• Document the steps for

making major decisions,

such as quarantining any

areas of the network that

have been infiltrated


Sponsored by



• Identify the personnel

who are integral

to incident response

and business continuity


Sponsored by



• Ensure that response plans

are available to all

employees in the firm, and

that everyone knows what

they need to do in the event

of a security breach


Sponsored by



Defining and Implementing

Ways to Minimize Attack

Consequences


Sponsored by



The following steps are also

recommended to ensure

data integrity:


Sponsored by



• Encrypt all sensitive data

so it becomes harder for

attackers to steal


Sponsored by



• Provide employees with

access only to the files and

applications they need

to do their jobs


Sponsored by



• Implement a two-factor

authentication process:

do not rely on passwords

alone


How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Technology

Transcript of How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)