Prevent information leakage through user accounts

Almost all technology today is connected to cyberspace. There are countless cyber-attacks on the public and private sectors every day, each of which can leak highly sensitive data. Security experts agree that the Czech Republic started building cybersecurity capacity too late. Even though the National Office for Cyber and Information Security helps secure critical information infrastructure objects against potential cyberattacks, this issue needs to be addressed at the level of each private network as well.

What recommendations should you follow, then, to prevent information leaks? 

Establish central management of user accounts and permissions

A uniform security policy is important. Select accounts that do not need special permissions, remove their extended permissions, and prohibit script execution, software installation, registry modifications, and the like.

Enforce multi-factor authentication

Multi-factor authentication is a method of protecting access to a particular resource (resource), such as an information system or a website. An effective way to authenticate a user is through tokens and biometrics, for example. In addition, when combined with a password, it takes the level of security to a much higher level. Use this type of security especially for actions requiring a higher level of authorization and critical operations such as remote access or access to sensitive information.

Separate administrator accounts

Use a dedicated systems administration account for network administration. For other work activities (handling email, web administration, etc.), use a regular account with no privileges.

Give each administrator their own systems administration account

There is a big risk in using shared accounts. Ensuring their security is far more challenging.

Secure local administrator accounts

Each local station should have a unique password. If you're using a Windows environment, LAPS (Local Administrator Password Solution) can help.

Encourage users to use strong passwords

With passwords, it's important to pay attention to the required complexity (a combination of upper and lower case letters is ideal), length (at least eight characters), and validity period (experts recommend once every ⅓ month, practice says once every six months). Avoid reusing the same passwords. If it is suspected that a password has been compromised, force it to be changed.

Check user accounts regularly

Establishing user account permissions is definitely on your agenda almost every day. So make sure you check their permissions regularly, both locally and at a centrally managed level.

If you're still looking for a person to take care of your network security, check out our site. Let us take care of your cybersecurity!