Economic Accounting

Information Security Governance

Risk Management

Risk management is about identifying system vulnerabilities, potential threats and security breaches. It is possible to decide how to address or treat risks when they are identified and evaluated. It is essential where risk mitigation is required, to select or designing appropriate security controls.

Access Control

Privileges are a way of manage access control to important parts of the system. Using the administrator/root account only in special situations is usually recommended to increase security and to prevent potential damage and unauthorized system changes. Kerberos and LDAP are systems and protocols to manage access control and user accounts, centralized over several platforms and services.

Keys and Certificates

Public keys and private keys helps to keep the system secure, with unique strong passwords for for every access point. Normal key server is used to store public keys. It is recommended that keys and certificates has expiration dates as part of the information system strategy. Keys are also used for mail and file encryption, and ssh/remote access access. Certificates is often used to prove the integrity of an server host, or client, and is issued by an Certificate Authority.

Monitoring

Monitoring the activities and making adjustments as necessary to address any issues goes hand in hand, in order to increase the security level. NMAP is one of several tools that can be acquired to probe networks. With tools as such it's possible to scan your own system from the outside, to see how secure your system is.

Proxy and Aliases

In computer networks, a proxy server is a server that acts as an intermediary for requests from clients seeking resources from other servers. Email alias is a proxy that forward emails form another name. To increase your security, using a public proxy.

Virtual Private Network (VPN)

A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network. Applications running across a VPN may therefore benefit from the functionality, security, and management of the private network.

Tormundsen⚭IT Corporation

Tormundsen⚭IT Corporation

Economic Accounting

STATEMENT

PREPHERAL