{"id":3236,"date":"2015-12-01T23:26:06","date_gmt":"2015-12-01T23:26:06","guid":{"rendered":"https:\/\/www.process.st\/templates\/server-security-checklist\/"},"modified":"2024-02-28T15:53:32","modified_gmt":"2024-02-28T15:53:32","slug":"server-security-checklist","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/server-security-checklist\/","title":{"rendered":"Server Security Checklist"},"content":{"rendered":"<section id=\"introduction\">\n<h2>Introduction:<\/h2>\n<div class=\"image-content\">\n<figure>\n   <a href=\"https:\/\/www.process.st\/templates\/wp-content\/uploads\/2024\/02\/vSrZ44gdisQDTiBg3XpGzg.png\" alt=\"Introduction:\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/www.process.st\/templates\/wp-content\/uploads\/2024\/02\/vSrZ44gdisQDTiBg3XpGzg.png\"> <\/a><br \/>\n  <\/figure>\n<\/p><\/div>\n<div class=\"text-content\">\n<p>Securing each one of your servers is an important step towards total <a href=\"https:\/\/www.process.st\/templates\/network-security-management\/\" rel=\"nofollow\">network security<\/a>, and you should take some time to <strong>consider whether or not you're doing the best job you can to cover all your bases and keep your servers as secure as possible.<\/strong><\/p>\n<p>It can be difficult&nbsp;to keep track of all of that information; doing all of the research required to stay up to date with the latest best practice protocols, compliance regulations, and security threats is no small task.<\/p>\n<p>What's more, many organizations have <a href=\"https:\/\/searchsecurity.techtarget.com\/tip\/Worst-practices-Learning-from-bad-security-tips\" rel=\"nofollow\">poor processes<\/a> in place when it comes to server security, and very few of them even consider that <strong>server security is a process which should be maintained and iterated upon.<\/strong><\/p>\n<p>Worry not - we've made this checklist to catch all of the common doubts and problems that you might have when considering your process for server security; you can even <a href=\"https:\/\/www.process.st\/help\/docs\/templates\/\" rel=\"nofollow\">customize this checklist template to suit your specific needs&nbsp;<\/a>with our editor.<\/p>\n<p>Without further ado, let's get right to it.<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"server-identification\">\n<h2>Server identification:<\/h2>\n<\/section>\n<section id=\"record-basic-details\">\n<h2>Record basic details<\/h2>\n<div class=\"text-content\">\n<p>Kicking off the server security checklist, you need to<strong>&nbsp;input some details about the server setup and the person who's doing it.<\/strong>&nbsp;<\/p>\n<p>Just make sure to <strong>fill in all of the form fields below.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> First name of server setup technician <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Last name of server setup technician <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Internal server identification number <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Server MAC address <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Date of server setup <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"physical-security\">\n<h2>Physical security:<\/h2>\n<\/section>\n<section id=\"ensure-the-server-location-is-secure\">\n<h2>Ensure the server location is secure<\/h2>\n<div class=\"text-content\">\n<p>Securing the actual physical location of the server is one of most important parts of any server security process - that's why it's first in this checklist.&nbsp;<\/p>\n<p>The concept is simple - just like virtual access, physical access must be as secure as possible.<\/p>\n<p><strong>We've outlined the steps in the sub-checklist below:<\/strong><\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Make sure keys to the server room are kept secure\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Keep a record of everyone who has access to the server room\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Test the server room and locker keys\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       4\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Be sure that as few people as functionally possible have copies of these keys\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"patching-and-server-maintenance\">\n<h2>Patching and server maintenance:<\/h2>\n<\/section>\n<section id=\"update-service-packs-and-patches\">\n<h2>Update service packs and patches<\/h2>\n<div class=\"text-content\">\n<p><span>Updating in Ubuntu is as simple as running a command-line application.<\/span><\/p>\n<p><span>Just open the terminal and&nbsp;<\/span><strong><span>enter this command:<\/span><\/strong><\/p>\n<pre><span> <\/span><span>sudo apt update &amp;&amp; sudo apt upgrade<br><\/span><\/pre>\n<p><span>After updates have finished downloading and have all been applied, make sure to<\/span><strong><span>&nbsp;perform a system reset<\/span><\/strong><span>&nbsp;to apply any changes.<\/span><\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"event-logs\">\n<h2>Event logs:<\/h2>\n<\/section>\n<section id=\"check-event-log-monitoring-is-properly-configured\">\n<h2>Check event log monitoring is properly configured<\/h2>\n<div class=\"text-content\">\n<p>Event logging is extremely important for accountability - so that you can check which users did what during any given security incident.<\/p>\n<p>Almost all actions on the server should be logged, from user login times and access points, to file transfers, website access, configuration changes and application executions.<\/p>\n<p>The tasks are outlined in the sub-checklist below; <strong>c<\/strong><strong>heck off each one as you progress&nbsp;<\/strong>and <strong>state your opinion on the current event log monitoring process&nbsp;<\/strong>with the drop-down form field.<\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check that all user account logins are being recorded\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check that all system configuration changes are being recorded\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check that shut down mode is enabled for sensitive event log alerts\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       4\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check that all event log data is being securely backed up\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Is the event log monitoring process working properly? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"evaluate-event-log-monitoring-process\">\n<h2>Evaluate event log monitoring process<\/h2>\n<div class=\"text-content\">\n<p>If you feel that the current process for event log monitoring is inadequate, then you should <strong>provide feedback in this task.&nbsp;<\/strong><\/p>\n<p>Perhaps certain data was omitted from the logs; or you couldn't access the backup files; or maybe you believe a different strategy would be more effective within the current organization setup - whatever it is,<strong> record your thoughts in the form field below.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Provide feedback on the event log monitoring process <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"check-remote-access-logs\">\n<h2>Check remote access logs<\/h2>\n<div class=\"text-content\">\n<p>Remote access logs&nbsp;<strong>must be reviewed&nbsp;regularly<\/strong> to ensure that only those with relevant privileges are accessing the server remotely.<\/p>\n<p class=\"style-warning\">Unusual remote access activity could be a sign of malicious actors attempting to access your server.<\/p>\n<p><strong>K<\/strong><strong>eep<\/strong><strong>&nbsp;watch for any users logging on under suspicious circumstances<\/strong>, such as signing into the system despite already being in the office working, or accessing the server during the middle of the night.<\/p>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Did you notice any suspicious activity in the remote access logs? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"investigate-remote-access-activity\">\n<h2>Investigate remote access activity<\/h2>\n<div class=\"text-content\">\n<p>Any suspicious activity you notice in your remote access logs should be <strong>flagged and followed up with accordingly.<\/strong><\/p>\n<p>This might involve<strong> contacting the account owner and asking them about the incident<\/strong> and checking to see what kind of activity was happening at that time.<\/p>\n<p><strong>Check off all the sub-tasks in the sub-checklist below<\/strong> to make sure any suspicious activity is investigated accordingly.<\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Suspicious activity is flagged and documented\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Suspected account privileges temporarily frozen\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check what data they were accessing at that time\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       4\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check their alibi at the time of the incident\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       5\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Ask the owner of the account about the incident\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       6\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Preventative action taken to ensure data\/account security\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"system-integrity-control\">\n<h2>System integrity control:<\/h2>\n<\/section>\n<section id=\"evaluate-server-configuration-control-process\">\n<h2>Evaluate server configuration control process<\/h2>\n<div class=\"text-content\">\n<p>Next, <strong>make sure that there is a process in place for changing system configurations.<\/strong><\/p>\n<p>If that process already exists, you should <strong>consider whether or not it's adequate<\/strong>, and <strong>how you might improve upon it.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Evaluate whether current change control process is adequate\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Consider whether or not it could be improved\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Could the current server change control process be improved? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"revise-server-configuration-control-process\">\n<h2>Revise server configuration control process<\/h2>\n<div class=\"text-content\">\n<p>If you feel the current server configuration control process could be updated, you should <strong>suggest some improvements<\/strong>&nbsp;in the form field below.<\/p>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Suggest improvements to the current server configuration control process <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"limit-changes-to-startup-processes\">\n<h2>Limit changes to start-up processes<\/h2>\n<div class=\"text-content\">\n<p>Regular users should not be able to tamper with start-up processes, such as antivirus software and certain server scripts.&nbsp;<\/p>\n<p><strong>Complete the sub-checklist tasks below<\/strong>, checking each item off as you go.<\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Ensure start-up processes are configured correctly\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Remove unnecessary startup processes\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Ensure regular users cannot change system startup configuration\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"remove-unused-software-and-services\">\n<h2>Remove unused software and services<\/h2>\n<div class=\"text-content\">\n<p><span>Linux recognizes which packages it has installed that aren\u2019t being used or depended upon; just <strong>run this command in the terminal:<\/strong><\/span><\/p>\n<pre><span>&nbsp;<\/span><span>sudo apt autoremove --purge<\/span><\/pre>\n<\/p><\/div>\n<div class=\"image-content\">\n<figure>\n   <a href=\"https:\/\/www.process.st\/templates\/wp-content\/uploads\/2024\/02\/twG6EruYvTtdNmOr3rFMSA.jpg\" alt=\"Remove unused software and services\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/www.process.st\/templates\/wp-content\/uploads\/2024\/02\/twG6EruYvTtdNmOr3rFMSA.jpg\"> <\/a><br \/>\n  <\/figure>\n<\/p><\/div>\n<\/section>\n<section id=\"antivirus-and-antimalware\">\n<h2>Anti-virus and anti-malware:<\/h2>\n<\/section>\n<section id=\"run-a-full-system-antivirus-scan\">\n<h2>Run a full system anti-virus scan<\/h2>\n<div class=\"text-content\">\n<p>Launch whatever antivirus or antimalware tools you have installed and <strong>run a full system scan.&nbsp;<\/strong><\/p>\n<p>The steps are outlined below; follow and <strong>check each one off as you complete the sub-task<\/strong>.<\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Launch your antivirus software control panel\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Start a full system scan\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Isolate and quarantine threats detected\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"configure-server-firewall\">\n<h2>Configure server firewall<\/h2>\n<div class=\"text-content\">\n<p>Review your firewall security settings and make sure everything is properly configured.<\/p>\n<p>Check that all filters are enabled, as well as alerts, traffic log analysis, and user permit rules.<\/p>\n<p><strong>Review the sub-checklist below<\/strong> and be sure that you've done each task.<\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check anti-spoofing filters\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check system administrator alert settings\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check user permit rules\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       4\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check system traffic log analysis\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"authentication-and-access-controls\">\n<h2>Authentication and access controls:<\/h2>\n<\/section>\n<section id=\"enforce-strong-authentication-for-all-admins\">\n<h2>Enforce strong authentication for all admins<\/h2>\n<div class=\"text-content\">\n<p>Now you need to<strong> configure two-factor&nbsp;authentication<\/strong> for all users with root or administrator system privileges. Users that have been recently granted these privileges will need to be reminded to activate 2FA.<\/p>\n<p>You can use the Admin Control Panel in Google Apps to see who has 2FA enabled wthin&nbsp;your organization.<\/p>\n<p><strong>Follow the sub-checklist below<\/strong> to check whether there are users who aren't 2FA activated yet.<\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Sign in to your Google Admin console\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Click \"Reports\"\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Click \"Security\"\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<div class=\"text-content\">\n<p>Check if there are admin or root users who don't have 2FA enabled and <strong>record what you find below.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Do any root or admin users have 2FA disabled? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"send-a-reminder-to-activate-strong-authentication\">\n<h2>Send a reminder to activate strong authentication<\/h2>\n<div class=\"text-content\">\n<p>For any new admin or root users, you can&nbsp;<strong>send a friendly reminder email about how and why they should enable 2FA.<\/strong><\/p>\n<p>Lucky for you, this checklist contains a pre-formatted email for issuing a 2FA reminder, auto-filled with the relevant details to make your life easier.&nbsp;<\/p>\n<p>Before sending this off, make sure you <strong>s<\/strong><strong>et the deadline date for 2FA activation.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"date-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Deadline for activating strong authentication <\/label> <\/p>\n<div class=\"date-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"> <i class=\"fa fa-calendar btn-icon\"><\/i> Date will be set here <\/button>\n   <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"text-content\">\n<p>All that's left for you to do is <strong>input the emails of the users who need to be reminded<\/strong>, then once everything&nbsp;looks good, <strong>hit \"Send\".<\/strong><\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"remove-inactive-user-accounts\">\n<h2>Remove inactive user accounts<\/h2>\n<div class=\"text-content\">\n<p>Simply put, you will need to <strong>disable or remove all user accounts that haven't been active in the last 3 months.<\/strong><\/p>\n<p>On Linux systems, you can<strong>&nbsp;run this simple command in the terminal&nbsp;<\/strong>to see a list of active users from the past 90 days.<\/p>\n<pre><code><span>lastlog <\/span><span>-<\/span><span>b <\/span><span>90<\/span><\/code><\/pre>\n<p>After you've reviewed this list,&nbsp;<strong>run the following command to print the output to a text file and disable all the user accounts listed:<\/strong><\/p>\n<pre><code><span>lastlog <\/span><span>-<\/span><span>b <\/span><span>90<\/span><span> <\/span><span>|<\/span><span> tail <\/span><span>-<\/span><span>n<\/span><span>+<\/span><span>2<\/span><span> <\/span><span>|<\/span><span> grep <\/span><span>-<\/span><span>v <\/span><span>'Never log'<\/span><span> <\/span><span>|<\/span><span> awk <\/span><span>'{print $1}'<\/span><span> <\/span><span>|<\/span><span> tee <\/span><span>-<\/span><span>a <\/span><span>~\/<\/span><span>usermod<\/span><span>-<\/span><span>L<\/span><span>.<\/span><span>log <\/span><span>|<\/span><span> xargs <\/span><span>-<\/span><span>I<\/span><span>{}<\/span><span> usermod <\/span><span>-<\/span><span>L <\/span><span>{}<\/span><\/code><\/pre>\n<\/p><\/div>\n<\/section>\n<section id=\"review-administrator-access\">\n<h2>Review administrator access<\/h2>\n<div class=\"text-content\">\n<p><strong><span>Make sure that membership to both the admin and superadmin group is restricted to as few users as possible<\/span><\/strong> without causing any problems.&nbsp;<\/p>\n<p><span>It's common for sysadmins to be the ones holding admin rights in this kind of scenario, but be sure to <strong>double check exactly who in the organization does or doesn't require admin privileges.<\/strong><\/span><span><\/span><\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Consider who does not need admin or superadmin privileges\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Consult with them about why they might need these privileges\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Make changes to admin or superadmin accounts as necessary\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"backups-and-restore-points\">\n<h2>Backups and restore points:<\/h2>\n<\/section>\n<section id=\"check-server-data-is-being-routinely-backed-up\">\n<h2>Check server data is being routinely backed up<\/h2>\n<div class=\"text-content\">\n<p>Make sure server data is being completely backed up on a regular basis. Ideally,<a href=\"https:\/\/www.process.st\/templates\/client-data-backup-best-practices\/\" rel=\"nofollow\">&nbsp;this process will already be automated<\/a>, so it may just be a case of checking everything is working as it should be.<\/p>\n<p>All&nbsp;<strong>cr<\/strong><strong>itical systems data should be included in the backup process,&nbsp;<\/strong>and <strong>you should be backing up the data in at least three separate locations<\/strong> to ensure fault tolerance and contingency against accidents and unexpected damage.<\/p>\n<p>The process for securely backing up your data is as follows:<\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check backup logs to ensure regular backups are being created\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Back up server data onto local drive\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Back up server data onto secondary local drive\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       4\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Ensure secondary drive is stored at a secure separate location\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       5\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Back up server data to a cloud-based storage\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"perform-a-test-recovery-from-a-backup-image\">\n<h2>Perform a test recovery from a backup image<\/h2>\n<div class=\"text-content\">\n<p>After making sure everything is being backed up regularly, it's part of security best practice to <strong>test that your recovery images are working as expected.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Take three of the most recent backup images\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Attempt to access data from all three backup images\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<div class=\"text-content\">\n<p>Once you've tested the recovery images, <strong>r<\/strong><strong>ecord what you observe in the form field below.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"select-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Did the recovery image work as expected? <\/label><br \/>\n   <select disabled class=\"form-control\"><option value=\"An option will be selected here\">An option will be selected here<\/option><\/select>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"review-your-backup-process\">\n<h2>Review your backup process<\/h2>\n<div class=\"text-content\">\n<p>If there are problems with the test images, then you should <strong>perform extensive testing to get to the route of the problem. <\/strong><\/p>\n<p>This may include <strong>re-making and re-testing system-wide backup images or switching the <a href=\"https:\/\/www.process.st\/templates\/client-data-backup-best-practices\/\" rel=\"nofollow\">backup process<\/a> that's currently in use to a new one.<\/strong><\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Troubleshoot the whole backup process\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Evaluate what might have caused the problem\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Test alternative solutions to the problem at hand\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       4\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Update your backup process accordingly\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> What did you find was the problem with the backup process? <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"risk-management\">\n<h2>Risk management:<\/h2>\n<\/section>\n<section id=\"check-for-hardware-replacement-and-retirement\">\n<h2>Check for hardware replacement and retirement<\/h2>\n<div class=\"text-content\">\n<p>Last but not least, the hardware.<\/p>\n<p>Neglecting the machines your server systems are running on will inevitably affect performance in a bad way, and unexpected downtime or drive failures pose potential security liabilities. It's worth keeping on top of things with regular maintenance checks.<\/p>\n<p><strong>Check out our&nbsp;<a href=\"https:\/\/www.process.st\/templates\/server-maintenance-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\">Server Maintenance Checklist<\/a><\/strong>&nbsp;for the complete process, but the least you can do is <strong>check and replace any damaged or precariously aged drives<\/strong>&nbsp;in your RAID setup to ensure that byzantine fault tolerance doesn't&nbsp;<em>fail<\/em> on you.<\/p>\n<\/p><\/div>\n<div class=\"multi-select-content form-field-content\">\n<ul class=\"items\">\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       1\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Check for old or faulty local storage drives\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       2\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Remove old or faulty drives\n    <\/div>\n<\/li>\n<li class=\"item\">\n<div class=\"step-number-container\">\n<div class=\"step-number\">\n       3\n     <\/div>\n<\/p><\/div>\n<div class=\"step-checkbox-container\">\n<div class=\"step-checkbox\"><\/div>\n<\/p><\/div>\n<div class=\"item-name-static\">\n      Install compatible replacement drives\n    <\/div>\n<\/li>\n<\/ul><\/div>\n<div class=\"text-content\">\n<p>Once you've <strong>made sure all the server's hardware is up to scratch<\/strong>, you're done with this checklist.<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"sources\">\n<h2>Sources:<\/h2>\n<div class=\"text-content\">\n<ul>\n<li><a href=\"https:\/\/twitter.com\/tarmerding2\" rel=\"nofollow noopener\" target=\"_blank\">Taylor Armerding<\/a> -&nbsp;<a href=\"http:\/\/www.csoonline.com\/article\/2130877\/data-protection\/data-protection-the-15-worst-data-security-breaches-of-the-21st-century.html\" rel=\"nofollow noopener\" target=\"_blank\">The 15 worst data security breaches of the 21st Century<\/a><\/li>\n<li><a href=\"https:\/\/naya-tech.com\" rel=\"nofollow\">NayaTech<\/a> - <a href=\"https:\/\/naya-tech.com\/download\/2338\/\" rel=\"nofollow noopener\" target=\"_blank\">Database Security Checklist<\/a><\/li>\n<li><a href=\"https:\/\/blog.serverdensity.com\/\" rel=\"nofollow noopener\" target=\"_blank\">ServerDensity<\/a> - <a href=\"https:\/\/blog.serverdensity.com\/server-security-checklist-are-you-at-risk\/\" rel=\"nofollow\">Server Security: Are You At Risk?<\/a><\/li>\n<li><a href=\"https:\/\/www.pluralsight.com\" rel=\"nofollow noopener\" target=\"_blank\">Pluralsight<\/a> - <a href=\"https:\/\/www.pluralsight.com\/blog\/it-ops\/linux-hardening-secure-server-checklist\" rel=\"nofollow\">Server Hardening Checklist<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/\" rel=\"nofollow noopener\" target=\"_blank\">Process Street<\/a> - <a href=\"https:\/\/www.process.st\/server-security\/\" rel=\"nofollow\">Server Security Tips<\/a><\/li>\n<li><a href=\"https:\/\/docs.mongodb.com\/\" rel=\"nofollow noopener\" target=\"_blank\">MongoDB<\/a> -<a href=\"https:\/\/docs.mongodb.com\/manual\/administration\/security-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\"> Security Checklist<\/a><\/li>\n<li><a href=\"https:\/\/www.certifiedsecure.com\" rel=\"nofollow noopener\" target=\"_blank\">Certified Secure<\/a> - <a href=\"https:\/\/www.certifiedsecure.com\/checklists\/cs-server-configuration.pdf\" rel=\"nofollow\">Certified Secure Server Configuration Checklist<\/a><\/li>\n<li><a href=\"https:\/\/techtalk.gfi.com\/\" rel=\"nofollow noopener\" target=\"_blank\">TechTalk<\/a> - <a href=\"https:\/\/techtalk.gfi.com\/the-ultimate-network-security-checklist\/\" rel=\"nofollow\">Ultimate Network Security Checklist<\/a><\/li>\n<li><a href=\"https:\/\/technet.microsoft.com\/en-us\" rel=\"nofollow noopener\" target=\"_blank\">Microsoft<\/a> - <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/bb735870.aspx\" rel=\"nofollow\">Security Best Practices<\/a><\/li>\n<li><\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"related-checklists\">\n<h2>Related checklists:<\/h2>\n<div class=\"text-content\">\n<ul>\n<li><a href=\"https:\/\/www.process.st\/templates\/inventory-management-process\/\" rel=\"nofollow noopener\" target=\"_blank\">Inventory Management Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/network-security-management\/\" rel=\"nofollow noopener\" target=\"_blank\">Network Security Management<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/client-data-backup-best-practices\/\" rel=\"nofollow noopener\" target=\"_blank\">Client Data Backup Best Practices<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/computer-maintenance-guide\/\" rel=\"nofollow noopener\" target=\"_blank\">Computer Maintenance Guide<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/ubuntu-server-setup-process\/\" rel=\"nofollow noopener\" target=\"_blank\">Server Setup Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/virtual-private-server-setup\/\" rel=\"nofollow noopener\" target=\"_blank\">Virtual Private Server Setup<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/it-support-process\/\" rel=\"nofollow noopener\" target=\"_blank\">IT Support Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/helpdesk-management\/\" rel=\"nofollow noopener\" target=\"_blank\">Helpdesk Management<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/server-maintenance-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\">Server Maintenance Checklist<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/information-security-incident-response\/\" rel=\"nofollow noopener\" target=\"_blank\">Information Security Incident Response<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/sql-server-audit-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\">SQL Server Audit Checklist<\/a><\/li>\n<\/ul><\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Introduction: Securing each one of your servers is an important step towards total network security, and you should take some time to consider whether or not you're doing the best job you can to cover all your bases and keep your servers as secure as possible. It can be difficult&nbsp;to keep track of all of [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":3237,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"","cover_icon_url":"","tasks_count":"33","template_description":"Run this checklist when deploying a new server or doing a security audit on your existing servers.","template_id":"hVYok8q7PhzNq_9vVUdGZw","task_0":"Introduction:","task_slug_0":"introduction","task_1":"Server identification:","task_slug_1":"server-identification","task_2":"Record basic details","task_slug_2":"record-basic-details","task_3":"Physical security:","task_slug_3":"physical-security","task_4":"Ensure the server location is secure","task_slug_4":"ensure-the-server-location-is-secure","task_5":"Patching and server maintenance:","task_slug_5":"patching-and-server-maintenance","task_6":"Update service packs and patches","task_slug_6":"update-service-packs-and-patches","task_7":"Event logs:","task_slug_7":"event-logs","task_8":"Check event log monitoring is properly configured","task_slug_8":"check-event-log-monitoring-is-properly-configured","task_9":"Evaluate event log monitoring process","task_slug_9":"evaluate-event-log-monitoring-process","task_10":"Check remote access logs","task_slug_10":"check-remote-access-logs","task_11":"Investigate remote access activity","task_slug_11":"investigate-remote-access-activity","task_12":"System integrity control:","task_slug_12":"system-integrity-control","task_13":"Evaluate server configuration control process","task_slug_13":"evaluate-server-configuration-control-process","task_14":"Revise server configuration control process","task_slug_14":"revise-server-configuration-control-process","task_15":"Limit changes to start-up processes","task_slug_15":"limit-changes-to-startup-processes","task_16":"Remove unused software and services","task_slug_16":"remove-unused-software-and-services","task_17":"Anti-virus and anti-malware:","task_slug_17":"antivirus-and-antimalware","task_18":"Run a full system anti-virus scan","task_slug_18":"run-a-full-system-antivirus-scan","task_19":"Configure server firewall","task_slug_19":"configure-server-firewall","task_20":"Authentication and access controls:","task_slug_20":"authentication-and-access-controls","task_21":"Enforce strong authentication for all admins","task_slug_21":"enforce-strong-authentication-for-all-admins","task_22":"Send a reminder to activate strong authentication","task_slug_22":"send-a-reminder-to-activate-strong-authentication","task_23":"Remove inactive user accounts","task_slug_23":"remove-inactive-user-accounts","task_24":"Review administrator access","task_slug_24":"review-administrator-access","task_25":"Backups and restore points:","task_slug_25":"backups-and-restore-points","task_26":"Check server data is being routinely backed up","task_slug_26":"check-server-data-is-being-routinely-backed-up","task_27":"Perform a test recovery from a backup image","task_slug_27":"perform-a-test-recovery-from-a-backup-image","task_28":"Review your backup process","task_slug_28":"review-your-backup-process","task_29":"Risk management:","task_slug_29":"risk-management","task_30":"Check for hardware replacement and retirement","task_slug_30":"check-for-hardware-replacement-and-retirement","task_31":"Sources:","task_slug_31":"sources","task_32":"Related checklists:","task_slug_32":"related-checklists","task_33":"Check your anti-virus software","task_slug_33":"check-your-antivirus-software","task_34":"Enable host firewall","task_slug_34":"enable-host-firewall","task_35":"Activate HIPS","task_slug_35":"activate-hips","task_36":"Ensure that there is and authentication server","task_slug_36":"ensure-that-there-is-and-authentication-server","task_37":"Activate hardware-based system integrity control","task_slug_37":"activate-hardwarebased-system-integrity-control","task_38":"Vulnerability Assessment:","task_slug_38":"vulnerability-assessment","task_39":"Check for the presence of pre-production assessments","task_slug_39":"check-for-the-presence-of-preproduction-assessments","task_40":"Ensure the server has been scanned","task_slug_40":"ensure-the-server-has-been-scanned","task_41":"File the configuration reports","task_slug_41":"file-the-configuration-reports","task_42":"Update the system configuration","task_slug_42":"update-the-system-configuration","task_43":"Review system configuration vulnerability","task_slug_43":"review-system-configuration-vulnerability","task_44":"Authorize ISO vulnerability scanners","task_slug_44":"authorize-iso-vulnerability-scanners","task_45":"Authentication and Access Control:","task_slug_45":"authentication-and-access-control","task_46":"Review documentation on trust relationships","task_slug_46":"review-documentation-on-trust-relationships","task_47":"Modify all default passwords","task_slug_47":"modify-all-default-passwords","task_48":"Configure strong user authentication","task_slug_48":"configure-strong-user-authentication","task_49":"Configure Data Access Control","task_slug_49":"configure-data-access-control","task_50":"Document the access authorization process","task_slug_50":"document-the-access-authorization-process","task_51":"Activate Generic or persistent guest accounts","task_slug_51":"activate-generic-or-persistent-guest-accounts","task_52":"Backup, Restore, and Business Continuity:","task_slug_52":"backup-restore-and-business-continuity","task_53":"Back up all critical data","task_slug_53":"back-up-all-critical-data","task_54":"Document backup files","task_slug_54":"document-backup-files","task_55":"Verify backup procedures","task_slug_55":"verify-backup-procedures","task_56":"Verify offsite backups","task_slug_56":"verify-offsite-backups","task_57":"Check backup media","task_slug_57":"check-backup-media","task_58":"Applications Administration:","task_slug_58":"applications-administration","task_59":"Secure documentation of applications\/modules","task_slug_59":"secure-documentation-of-applicationsmodules","task_60":"Check there is an application admin systems administrator","task_slug_60":"check-there-is-an-application-admin-systems-administrator","task_61":"Risk Management System:","task_slug_61":"risk-management-system","task_62":"Ensure server registration","task_slug_62":"ensure-server-registration","task_63":"Check for hardware replacement and retirement","task_slug_63":"check-for-hardware-replacement-and-retirement","task_64":"Check server administration","task_slug_64":"check-server-administration","task_65":"High Performance and Distributed Computing server participation","task_slug_65":"high-performance-and-distributed-computing-server-participation","task_66":"Sources:","task_slug_66":"sources","task_67":"Relevant Checklists:","task_slug_67":"relevant-checklists","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[7,16],"tags":[],"class_list":["post-3236","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-miscellaneous","category-quality-assurance"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/3236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=3236"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/3236\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media\/3237"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=3236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=3236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=3236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}