Chapter9: Implementing controls to protect assets

Access badges

Provide secure access, used in M2F such as pin/password

Types of sensors

Motion detection

Noise detection

Infrared

Pressure

Microwave

Access control vistibule

two interlocking doors allow one person at a time to avoid tailgating

Asset management

Acquisition

Assignment

Monitoring

Hardware asset management

track servers, desktop pcs, laptops, routers, switches

software asset management

tracks software licenses, installations, and usage within an org

data asset management

focuses on org’s data assets, data bases, files and other info repositories

Platform diversity

Vendor diversity, tech diversity, and control diversity

Main purpose is to have defense in depth layers

Physical attacks

Card cloning

Brute force attacks

Breaking barriers

Single point of failure

component that if it fails, can cause the entire system to collapse

Disk redundancy

Redundancy array of inexpensive disks (RAID) provides fault tolerance

RAID-0

Striping , includes 2 or more disks files are stored and spread across each of the disks

RAID-1

Mirroring, Uses 2 disks, data is written to both disks

RAID- 5

3 or more disks striped together if 2 drives fail data is lost

RAID-6

3 o more disks striped together, continues even if 2 disks fail requires a minimum of 4 disks

RAID-10

Combines striping and mirroring requires 4 disks minimum

Active load balancer

Distribute data loads across multiple computers

Hardware based load balancer

Accepts traffic and directs it to servers

Software based load balancer

uses virtual ip address clients send requests to ip address and redirects requests to one of the servers

Backup media

Disks or usb drives

Network attached storage (NAS)

Storage area network

Cloud storage

Offline backups

tapes, disks, drives in a NAS

Online backups

Cloud storage

Backup types

Full

Differential

Incremental

Snapshot/Image

Incremental backups

Best for single day backup recovery

Differential backups

Best or recovering failed systems quickly

Testing backup purpose

It validates the backup and tests its restoration , it can then be verified for integrity

Business continuity plan (BCP)

Disaster recovery elements that provide steps to return critical functions to operation after an outage

Business impact analysis

Helps org identify critical systems and components for success 

Steps of disaster recovery plan

Activate DRP

implement contingencies

recover  critical systems

test recovered systems

after action review

Capacity planning

Process of determining the resources required to meet demands of an org’s ops and growth