IT security processes are repeatable procedures that protect systems, data, access, networks, and incident response. The best ones do not live in someone’s head or a one-off spreadsheet. They are assigned, run, documented, and reviewed.

This IT security checklist covers eight practical workflows your team can run in Process Street: privileged password management, daily network administration, network security audits, firewall audits, VPN configuration, Apache server setup, email server security, and penetration testing.

Linux server security starts with hardening the basics: patching packages, reducing exposed services, tightening SSH, enforcing sane account controls, and monitoring for suspicious changes.

This Linux server hardening checklist pairs hands-on sysadmin commands with current context for cloud and VPS environments where a small missed setting can become a production incident.

Continue Reading

In this article, we’ll take a look at the foremost standard for information security management – ISO 27001:2013, and investigate some best practices for implementing and auditing your own ISMS.

Here is a summary of what we’ll cover in this Process Street article:

• ISO 27001: The basics & why standards are important
• Who needs ISO 27001?
• How to implement ISO 27001
• Free ISO 27001 checklist
• How to get ISO 27001 certified
• Integrating your ISMS with other ISO standards

If you just want the free checklist for implementing and auditing your ISMS, you can grab that here. Otherwise, read on!
Continue Reading

Readers, I’ll let you in on a little secret…

Between you and me, I was hacked; by my best friend no less! Thankfully, it was just an irritating prank, but it served to teach me a lesson.

Despite my grandiose beliefs that I knew everything I needed to know about all things digital, I hadn’t the faintest idea about how to spot a fraudulent message from a legitimate one. And this kind of threat is one of the biggest risks businesses face today.

In 2005, 157 data breaches were reported in the U.S., with 66.9 million records exposed. From 2005-2014 there was a 500% increase in data breach frequency.

That number almost doubled in 3 years to 1,579 reported breaches in 2017.

Although data breaches have since declined (1,506 issues were reported in 2019), IBM’s 2020 Data Breach report filed a 12% rise in data breach costs over 5 years, increasing to ~$3.92 million per incident.

The growing number of breaches and associated costs seems to be consequential of continuously changing hacking methods and an expanding number of entry points (that comes from digitization).

Security audits allow organizations to set up tougher walls of safety, as an adaptive defense against data breach threats.

With this in mind, Process Street created this article as your ultimate security audit guide, with access to our free security audit checklists and processes.

We’ll be covering:

• What are security audits?
• 4 security audit checklists for preventative risk management
• Security audit best practices
• Security processes for tighter security safety

Let’s get started!
Continue Reading

This is a guest post by Sam Bocetta, a retired engineer and current freelance journalist who specializes in writing about cyber defense, data privacy, and online security.

Cybersecurity is a process, not an event.

Though there are some tools and systems that you can put in place to dramatically improve the security of your workflow, in reality the best way to protect yourself against hackers is to stay constantly vigilant for emerging threats.

For this reason, rigorous cybersecurity practices should be built into your general workflow. They should be an integral part of building a knowledge management system, and integrated into everyday business practices.

One of the most powerful ways of doing this, and one that will also ensure that you don’t miss anything important, is to use checklists to codify daily, weekly, and monthly security tasks.

This system should also clearly indicate responsibility for each task, and specify mitigation steps should any issues be found.

In this article, we’ll cover:

• Building a security checklist
• Creating a security culture
• How to use Process Street to incorporate security into your workflows
• More information security resources

Before specifying the tasks that should be part of your security workflow, let’s look at why having a regular security checklist is so important.
Continue Reading

The following is a guest post by Alex Mitchell, a cybersecurity enthusiast, WordPress guru, and data-safety tools tester with over 10 years experience.

Everybody knows Big Brother is watching. We usually imagine that surveillance happening while we sit at a desk, but business travel changes the risk. A familiar device moves through airports, hotels, conference venues, and border controls, often carrying access to company systems and sensitive information.