IT Examiner School - Oct 2023

Internal Use Only

Hardening

Institutions typically use off-the-shelf software that provides more functions than are required for the institution’s purpose

Unnecessary software & services represent a potential security weakness

When deploying applications & systems, management should harden applications by determining the desired purpose & limiting the installation, configuration & access as much as possible

45

Internal Use Only

System Security

Session Timeouts (screen lock)

Password Complexity & Reuse

Logging / Audit Trail

Anti-Virus / Anti-Malware

46