Network Security Plan
This document outlines the secure use, storage, and management of devices and data on the network and associated systems. The plan covers all devices such as computers, printers, switches, firewalls, and routers connected to the Internet or a local network (LAN).
Given the shared and accessible nature of networking, the emphasis of this document is to that server data is placed on physically secure servers, controlling access to data, and protecting data from unauthorized access remotely.
Physical Server Security
All servers, notably those containing sensitive departmental or personal data, are stored in a dedicated room within a locked server cabinet to which only authorized users have access.
Server security is further
…show more content…
The use of antivirus and antimalware software is enforced on all network devices, including servers, workstations, and laptops to protect both user and data from malicious code, internet popups, and viral infections.
Remote Access Protection
A Dell SonicWALL firewall is in place to control and filter both inbound and outbound access to the network. Remote server access is restricted to authorised users via encrypted Remote Desktop sessions whilst direct access to data is locked down to key users via SSL-enabled VPN software.
Network servers are optimised for their roles, ensuring that only required services and applications are installed thereby limiting security and stability risks from bundled, non-essential, or unpatched programs.
Built in network security groups such as “Everyone” or “Anonymous Users” are removed from network shares, access policies, and firewall rules and replaced with specific user groups or the “Authenticated Users” group, ensuring that only authorised logons have access to data and