SOC is powerful and modern. However, according to Sergey Krivoshein, it is difficult to build such an information security control system, so in most cases companies use an integrated security assessment by departments/processes/systems, which is calculated based on online-controlled indicators: the state of the IS and information security tools, the number of incidents and their criticality, the presence of vulnerabilities. Each company decides independently which of these indicators to include, with what weight and how to calculate the ranges (good/average/bad), justifying its decision, on the one hand, by the degree of influence of the parameters on the business, and on the other hand, by the complexity of measuring the parameters.
When , Elman Beibutov recommends asking yourself the following questions related to information security. How to avoid hastily providing staff with more access than necessary? How to control which devices are used for connections and block access if user behavior changes? How to ensure that VPN client account passwords are changed and additional authentication factors are introduced? How to ensure prompt response to incidents when everyone is primarily busy ensuring business continuity in the new conditions?
In his opinion, to respond to increased bahrain mobile database security risks, it is necessary to: conduct employee training on ensuring the information security of workplaces, remind them of the threats in the conditions of working on the "open" Internet and combining personal activity and work with corporate applications and data on one device; introduce control over the use of basic security measures on user devices (updates, the presence of anti-virus protection, a local firewall, prohibiting remote management of user devices); automate the implementation of corporate information security.