Windows Desktop Security Auditing.ppt

Windows Desktop Security Audit Your ORG Introductions CompuMentor Sponsored by: Designed by: Workshop Agenda Introductions Icebreaker Mentor Matching and Consulting Windows Security Issues Windows Security Resources Auditing Tools Organizational Protocol Manual Protocol Automated Protocol Reporting Conclusion Workshop Goals To provide you the information you need to audit the security of Windows desktop computers To provide you with specific protocols to accomplish this audit To provide you with information about automated tools that can simplify this process Windows Security Issues Windows Security Technologies Windows Security Resources Windows Security Resources Auditing Tools Protocol documents Windows Best Practices documents Microsoft Baseline Security Analyzer (MBSA) Audit log worksheet Report template 5 Organizational Protocol Steps 1) Prepare for desktop security audit 2) Run automated security audit tool 3) Perform manual checks 4) Consolidate audit reports 5) Plan next steps Key Components of Best Practices Security Updates,Update Rollups, and Service Packs Windows Version Automatic Updates Strong passwords * Hardware or software firewall * Internet Explorer security settings Microsoft Office security settings File system type Anti-malware * Backup software and status * Network configuration * Services * *Issues not addressed / partially addressed by MBSA 4 Parts of the Manual Protocol Security updates Defensive security software Network security configuration Local security configuration Audit Walkthrough MBSA Covers: Missing Security Updates,Update Rollups, and Service Packs. Windows Version. Automatic Updates configuration. Check for blank or simple local user account passwords. Windows Firewall check. Internet Explorer security zone settings Microsoft Office security zone settings Check for file system type on hard drives MBSA Does Not Cover: Non-MS Application software Anti-malware, non-MS defensive software Backup software and st