IT Cause Analysis Methodology

Cause analysis is often referred to as Root Cause Analysis and is the method of identifying the source of a problem. This method of discovering the source of why something has occurred is detailed here. Root Cause analysis varies slightly when dealing with IT-based issues. We will include IT-based thinking and methods in this document.…

Sales Methodology

So you think you are good at sales? Do you say you can sell fire to the Devil or ice to Eskimos? Sure maybe you have a great personality, you shoot from the hip and a majority of the time you have no problems getting a meeting, maybe you pitch your product, maybe potential customers…

Working Sessions

Meetings, some of us are plagued by them, we have too many back to back meetings in a day to accomplish anything. Some meetings your contribution is limited or very small, and some meetings your part is the center of the entire meeting. In my personal experience and through my vast experience with attending meetings,…

NIST 800 -171 3.1.7

Prevent non-privileged users from executing privileged functions and audit the execution of such functions. Here is where the separation of admin accounts and non-admin accounts helps you with this control. Don’t allow the non-admin accounts to have any access or ability to perform any commands that a privileged account will create. If you follow the…

NIST 800 – 171 3.1.6

Use non-privileged accounts or roles when accessing nonsecurity functions. The object of this control is to set up an admin-account and a non-admin-account for privileged access and no-privileged access. This control seeks to separate admin accounts from non-admin accounts and what actions are performed by each. The best way to go about this is to…

Compliance and Regulations

NIST 800 – 171 #Part2

Control 3.1.1 Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems). What this is referring to is a system from which you are going to use to authenticate users. This will most likely need to be a Windows-based domain. Trying to use no domain…