CISO's Guide to Securing SharePoint - owasp

More documents

Recommendations

Info

#2: Compliance Reporting • Summary: – If you store business data, you must demonstrate compliance with regulations • Why challenging? – Manual process – minimal inherent data audit capability – Native audit trail is not usable/readable – No knowledge of the identity of data owners
#2: Compliance Reporting • Summary: – If you store business data, you must demonstrate compliance with regulations • Why challenging? – Manual process – minimal inherent data audit capability – Native audit trail is not usable/readable – No knowledge of the identity of data owners • What is Required? – Human-readable activity auditing and reporting – Add enrichment data to simplify compliance process – Data owner identification – Audit Analytics • Example: In August 2011, Bloomberg reported on 300,000 healthcare records that appeared in an Excel file. No one knows where the file came from, indicating a lack of auditing.
Page 1 and 2: CISO’s Guide to Securing SharePoi
Page 3 and 4: Impact of SharePoint Insecurity “
Page 5 and 6: Food Brings Along Appetite External
Page 7 and 8: Source: SharePoint: Strategies and
Page 9 and 10: Source: SharePoint: Strategies and
Page 11 and 12: Type of Content Shared Other Propri
Page 13 and 14: Native SharePoint Security Capabili
Page 15 and 16: #1: Getting Permissions Right • S
Page 17 and 18: User Rights Management: Doing it Ri
Page 19 and 20: Automatic Identification of Excessi
Page 21: Reviewing User Rights with Data Own
Page 25 and 26: SharePoint Admins Gone Wild Most po
Page 27 and 28: SharePoint Architecture - Direct Ac
Page 29 and 30: Patch Protection InfoWorld (2010):
Page 31 and 32: Google Diggity Project
Page 33 and 34: Database Protection Microsoft Suppo
Page 35 and 36: A Checklist to Securing SharePoint
Page 37 and 38: A Checklist to Securing SharePoint
Page 39: https://www.surveymonkey.com/s/Rese

CISO's Guide to Securing SharePoint - owasp

Create successful ePaper yourself

Delete template?

Save as template?