Cyber Security Specialist

I. Introduction This document outlines the security operations center (SOC) report for [Business Name]. [Business Name] is a healthcare business that deals with customer data and prescriptions. The company has implemented security measures such as a SIEM (Securonix), endpoint protection (NinjaOne), and EDR (Trellix). This document will discuss the credentials policies in place and provide recommendations for further improving the security of customer data and prescriptions. II. Credentials Policies [Business Name] has implemented several policies in order to ensure the security of its customer data and prescriptions. These policies include: 1. Password Complexity: Passwords must be at least 8 characters in length and contain a combination of upper and lower case letters, numbers, and special characters. 2. Password Expiration: Passwords must be changed every 90 days. 3. Multi-Factor Authentication: Multi-Factor Authentication (MFA) is required for all users accessing sensitive data. III. Recommendations 1. Implement a Password Management System: A Password Management System (PMS) can help ensure that passwords are stored securely and are not shared among multiple users. 2. Implement Access Controls: Access controls should be implemented to limit the amount of data that is accessible to users. This can be done by setting up user roles and assigning different levels of access to each role. 3. Implement User Activity Monitoring: User Activity Monitoring (UAM) should be implemented in order to detect any suspicious activity. This can be done through the use of SIEM or EDR software. 4. Implement Encryption: Data should be encrypted in order to protect it from malicious actors. Encryption can be done at the file level or at the database level. 5. Implement Firewalls: Firewalls should be implemented in order to protect the network from malicious actors. Firewalls can be configured to restrict access to certain services and ports. 6. Educate Employees: Employees should be educated on the importance of security and the risks associated with sharing sensitive data. This can be done through the use of security awareness training. IV. Conclusion By implementing the above recommendations, [Business Name] can ensure that customer data and prescriptions are protected from malicious actors. The company should also continue to monitor user activity and update its security policies as needed.