CISO's Guide to Securing SharePoint - owasp

More documents

Recommendations

Info

#4: Monitor and Protect the SharePoint Database • Summary: – The SharePoint database holds all configuration and content information – SharePoint administrators have full access to all SharePoint content – Whoever gains direct access to the database have full control on SharePoint • Why challenging? – The SQL Server database isn't properly secured. – No activity monitoring and audit capabilities – No built-in database policy prevention • What is Required? – Full audit trail of all activity originated from sources other than the application servers. – Protection from direct manipulation to the SharePoint internal database
Database Protection Microsoft Support: “Database modifications may results in a unsupported database state” http://support.microsoft.com/kb/841057 Gartner (Securing SharePoint, February 2009): “Fully audit all SQL Server administrative activities” Security Considerations and Best Practices for Securing SharePoint 35
Page 1 and 2: CISO’s Guide to Securing SharePoi
Page 3 and 4: Impact of SharePoint Insecurity “
Page 5 and 6: Food Brings Along Appetite External
Page 7 and 8: Source: SharePoint: Strategies and
Page 9 and 10: Source: SharePoint: Strategies and
Page 11 and 12: Type of Content Shared Other Propri
Page 13 and 14: Native SharePoint Security Capabili
Page 15 and 16: #1: Getting Permissions Right • S
Page 17 and 18: User Rights Management: Doing it Ri
Page 19 and 20: Automatic Identification of Excessi
Page 21 and 22: Reviewing User Rights with Data Own
Page 23 and 24: #2: Compliance Reporting • Summar
Page 25 and 26: SharePoint Admins Gone Wild Most po
Page 27 and 28: SharePoint Architecture - Direct Ac
Page 29 and 30: Patch Protection InfoWorld (2010):
Page 31: Google Diggity Project
Page 35 and 36: A Checklist to Securing SharePoint
Page 37 and 38: A Checklist to Securing SharePoint
Page 39: https://www.surveymonkey.com/s/Rese

CISO's Guide to Securing SharePoint - owasp

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?