Conduct a security assessment of your home and network
Determine and report current state
Identify areas to improve
Make at least three improvements and report your actions
Determine what you will do next
Determine sustainment and improvement plan
Report each step in your results
Here is an outline you can follow:
0. Firewall & NAT
1.Inventory
2.Access Control
3.Backup
4.Patches
5.Antivirus
6.Blocking
7.Avoid oversharing
8.Physical security
9.Regularly review
example :
1.Inventory
– You can’t secure what you cannot see.
Know what devices you have on your network.
Know what traffic you have on your network.
Know what software you have on your devices.
Try one of these and let me know how it goes: https://sourceforge.net/software/inventory-management/free-version/
Best Free Inventory Management Software – 2023 Reviews & Comparison
Compare the best Free Inventory Management software of 2023 for your business. Find the highest rated Free Inventory Management software pricing, reviews, free demos, trials, and more.
sourceforge.net
2. Access control
– Who has access to your devices and data (and online accounts)? What access do they have? What records do you have of them accessing it?
Are you running as an admin? (Don’t do that, especially while surfing.)
Are you using strong passwords? Or the same password for multiple sites and systems? Consider using a password manager like LastPass.
Got super sensitive stuff? Consider keeping it offline, or use a live boot OS that is refreshed with every use.
Are you sharing your PC with others? And your login credentials as well?
What logs are available to you and are you looking at them? (System, router, other)
3. Backup
-You will loose data. It happens to everyone. How much can you loose? (RPO & RTO)
Consider online back up like Carbonite or Mozy. Or even Google. Or perhaps AWS or Azure.
4. Patches
– If is software, it is vulnerable. If it is connected, it is exposed. (Josh Corman)
Set your system for automatic updates, but that only covers the OS.
Consider using Secunia Personal Software Inspector from Flexera Software
ww.flexerasoftware.com (As this software is no longer supported, you will need to find a replacement)
5. Anti-Virus
-Antivirus is dead, says Brian Dye, Symantec’s senior vice president for information security
-Antivirus is Dead: Long Live Antivirus!, says Brian Krebs
– Anti-virus is NOT dead. While the threats may get more sophisticated, the basic controls are still required.
I have Microsoft Security Essentials on every Windows device on my network, except for Windows 10.
In Windows 10, Windows Defender has replaced Microsoft Security Essentials.
But I am also using a home version of Mcafee client protection software (and I am blocking a lot).
6. Blocking
-Tired of popups and mal-vertising? Use some blocking moves.
•Parental controls
•OpenDNS (https://www.opendns.com/)
•Hosts file (http://winhelp2002.mvps.org/hosts.htm)
•EFF Privacy Badger (https://www.eff.org/privacybadger)
(and Web of Trust/WoT. Not a blocker, but a good indicator of DON”T CLICK THERE) https://www.mywot.com
Suggested by Michelle. I will be testing soon =)
AdBlock https://getadblock.com/
AdBlock
AdBlock is a user-supported browser extension that lets you surf the web ad-free.
getadblock.com
7. Avoid oversharing
– What are you giving away? What is on the Internet or on email is there forever (even maybe on SnapChat)
Never post that you are going on vacation or that your home will be empty.
Don’t take pictures of valuables and post them online.
Shed junk mail, especially credit card offers.
Consider turning off location services.
8. Physical security
-If I can touch it, I can own it.
Encryption is a good defense, but better if I cannot get my hands on it.
9. Regularly review
Option 2 –
Conduct a security assessment of your home and network
Determine and report current state
Identify areas to improve
Make at least three improvements and report your actions
Determine what you will do next
Determine sustainment and improvement plan
Report each step in your results
Here is an outline you can follow:
0. Firewall & NAT
1.Inventory
2.Access Control
3.Backup
4.Patches
5.Antivirus
6.Blocking
7.Avoid oversharing
8.Physical security
9.Regularly review
example :
1.Inventory
– You can’t secure what you cannot see.
Know what devices you have on your network.
Know what traffic you have on your network.
Know what software you have on your devices.
Try one of these and let me know how it goes: https://sourceforge.net/software/inventory-management/free-version/
Best Free Inventory Management Software – 2023 Reviews & Comparison
Compare the best Free Inventory Management software of 2023 for your business. Find the highest rated Free Inventory Management software pricing, reviews, free demos, trials, and more.
sourceforge.net
2. Access control
– Who has access to your devices and data (and online accounts)? What access do they have? What records do you have of them accessing it?
Are you running as an admin? (Don’t do that, especially while surfing.)
Are you using strong passwords? Or the same password for multiple sites and systems? Consider using a password manager like LastPass.
Got super sensitive stuff? Consider keeping it offline, or use a live boot OS that is refreshed with every use.
Are you sharing your PC with others? And your login credentials as well?
What logs are available to you and are you looking at them? (System, router, other)
3. Backup
-You will loose data. It happens to everyone. How much can you loose? (RPO & RTO)
Consider online back up like Carbonite or Mozy. Or even Google. Or perhaps AWS or Azure.
4. Patches
– If is software, it is vulnerable. If it is connected, it is exposed. (Josh Corman)
Set your system for automatic updates, but that only covers the OS.
Consider using Secunia Personal Software Inspector from Flexera Software
ww.flexerasoftware.com (As this software is no longer supported, you will need to find a replacement)
5. Anti-Virus
-Antivirus is dead, says Brian Dye, Symantec’s senior vice president for information security
-Antivirus is Dead: Long Live Antivirus!, says Brian Krebs
– Anti-virus is NOT dead. While the threats may get more sophisticated, the basic controls are still required.
I have Microsoft Security Essentials on every Windows device on my network, except for Windows 10.
In Windows 10, Windows Defender has replaced Microsoft Security Essentials.
But I am also using a home version of Mcafee client protection software (and I am blocking a lot).
6. Blocking
-Tired of popups and mal-vertising? Use some blocking moves.
•Parental controls
•OpenDNS (https://www.opendns.com/)
•Hosts file (http://winhelp2002.mvps.org/hosts.htm)
•EFF Privacy Badger (https://www.eff.org/privacybadger)
(and Web of Trust/WoT. Not a blocker, but a good indicator of DON”T CLICK THERE) https://www.mywot.com
Suggested by Michelle. I will be testing soon =)
AdBlock https://getadblock.com/
AdBlock
AdBlock is a user-supported browser extension that lets you surf the web ad-free.
getadblock.com
7. Avoid oversharing
– What are you giving away? What is on the Internet or on email is there forever (even maybe on SnapChat)
Never post that you are going on vacation or that your home will be empty.
Don’t take pictures of valuables and post them online.
Shed junk mail, especially credit card offers.
Consider turning off location services.
8. Physical security
-If I can touch it, I can own it.
Encryption is a good defense, but better if I cannot get my hands on it.
9. Regularly review
