logo

Refining Server Security Guidelines

   

Added on  2019-09-16

1 Pages330 Words173 Views
 | 
 | 
 | 
Hello, All,As a growing financial services company, we face multiple challenges in the area of server security which is an integral part of many guidelines on compliance and auditing. We are, therefore, refining the way we manage administrative privileges across our Development and Production environments. The primary objective is to secure our systems but this needs to be accomplished such that our normal daily workflow does not get disrupted. During the past several months, IT has designed, tested and staged our Active Directory Container Policies in order to mitigate vulnerabilities which are known and visible. As part of this initiative, we intend to implement the following guidelines with regards to Local Admin access:Advisor accounts will not be granted local administrative rights to Development servers.Advisor accounts will be granted local administrative rights to Production servers based on job functions and server class.Regular (non-advisor) accounts will be granted local administrative rights to Development servers. Regular (non-advisor) accounts will not be granted local administrative rights to Production servers.Access to Production servers will be granted to individuals with approved changes, rollout, or on-call responsibilities. Approved Domain Admins group will be an exception to the above. In Production, the NOC team will be responsible for managing all Group and User permissions for roles such as on-call support, change deployments, and rollouts. If your team has change deployments or rollouts and requires access to relevant systems, kindly ask them to contact the NOC team with a valid CCR so that all required access can be granted to your team. Our IT shared folder provided additional information about this implementation exercise. As we modify systems user account access, I will send out group emails to notify all concerned about the same.Warm regards,(YOUR NAME)
Refining Server Security Guidelines_1

End of preview

Want to access all the pages? Upload your documents or become a member.

Related Documents