Working Sessions

Meetings, some of us are plagued by them, we have too many back to back meetings in a day to accomplish anything. Some meetings your contribution is limited or very small, and some meetings your part is the center of the entire meeting. In my personal experience and through my vast experience with attending meetings,…

NIST 800 -171 3.1.7

Prevent non-privileged users from executing privileged functions and audit the execution of such functions. Here is where the separation of admin accounts and non-admin accounts helps you with this control. Don’t allow the non-admin accounts to have any access or ability to perform any commands that a privileged account will create. If you follow the…

NIST 800 – 171 3.1.6

Use non-privileged accounts or roles when accessing nonsecurity functions. The object of this control is to set up an admin-account and a non-admin-account for privileged access and no-privileged access. This control seeks to separate admin accounts from non-admin accounts and what actions are performed by each. The best way to go about this is to…

Man looking at a action plan

How to fill out your POA&M

Your POA&M is your Plan of Action and Milestone document. Here are some key strategies and best practices that you need to observe when you are filling out your POA&M document. Through the course of your audit and your security analysis or your compliance audit, information system audit or any other IT-based audits you are…

Compliance and Regulations

NIST 800 – 171 #Part2

Control 3.1.1 Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems). What this is referring to is a system from which you are going to use to authenticate users. This will most likely need to be a Windows-based domain. Trying to use no domain…