SaaS Security

Cloud based software, Software as a Service (SaaS) allows organizations to forego the cost of servers and support services. Some SaaS providers will not take responsibility for securing user data and guaranteeing access to it. Data breaches may be regarded as the customer’s fault. Take the following steps to ensure cloud data security.

1. Use Cloud Access Security Brokers (CASB) to audit the cloud services used on a network.

2 Use role based permissions. Identity and Access Management should be used to limit the files and software that particular users in an organization can use.

3. Ensure that both data at rest and in transit is encrypted.

4. Data Loss Prevention software should be used to block malware from downloading data.

5. Monitor sharing of data through email and FTP sites.

6. Confirm that cloud service providers use MFA, and implement data segregation policies

Landspeed Violations

When inquiring about the security measures for a document repository, ask whether or not the admin will monitor user activity for landspeed violation logins. These occur when a user accesses his or her account from two different locations within a time period in which it is not possible for the user to have travelled from one location to the other.

netsh command to verify PC supports WPA3

Here's a follow-up to last night's tip, which discussed the wireless WPA3 security standard. Both the router, your operating system, and your PC will need to be able to support WPA3. In Windows command prompt you can enter the command:

netsh wlan show drivers

. . . to bring up information about your PC's wireless network adapter. If you see WPA3 listed in the section on 'Authentication and cipher supported in infrastructure mode', then your PC will support WPA3.