Physical Security Practices

• Do not leave passwords in the open.
• Do not leave Cencon logon keys in the reader.
• Do not write passwords on the key.
• If the system is not in use or is unattended, lock the terminal.
• Use BIOS and screensaver passwords to guard against unauthorized access.

Network Security Practices

• Insider hacks are the least preventable and the most destructive types.
• Have your HR department inform you before an employee is terminated.
• Set policies to constrain bandwidth availability for suspicious traffic. Port 80, for example, is used for HTTP, web surfing, streaming video, peer-to-peer sharing, music downloads, etc.

System Security Practices

• Change password on all default accounts.
• Remove guest and other non-used accounts.
• Give specific access to SQL, transaction logs, and backup files, as needed.
• Ensure no hierarchical group or user policies are allowed access to SQL, transaction logs, and backup files.
• Limit or remove access to FTP.
• Review network IP protocols.
• All backups, exports, import files, and scripts are possible sources of passwords/usernames. Secure access to them.
• Learn about your users. If work hours are 9:00 AM to 5:00 PM, any access at nights or weekends is suspect. Monitor and set alarms for this access.

SQL Security Practices

• Change password on all default accounts.
• Lock or delete all non-used default accounts.
• Set SQL policy to allow only 8 login attempts before lockout.
• All backups, exports, import files, and scripts are possible sources of passwords/usernames. Secure access to them.
• Check alert logs regularly for user access failures or unusual access errors.
• Always test scripts on a test server, never the live database.
• Monitor or set limits on very large queries. Hackers generally search whole databases.

Applies To

Cencon 4 Lock