CHECK LIST FOR PROTECTION

A protection check list

Here is a checklist of things you can do to make password cracking more difficult:

1. Audit your organization! Do a walk through and make sure passwords are not stuck to monitors or under keyboards.
2.  Set up dummy accounts. Get rid of the administrator (or admin) account or set it up as a trap and audit it for attempts.
3.  Use strong, difficult to guess passwords, and never leave a console unlocked.
4.  Backups are necessary in case you are compromised. You need a working set of data, so make sure you have it. Keep the tapes secure too, or the data there will be compromised as well.
5.  Prevent dumpster diving. Don't throw sensitive information away; shred it or lock it up.
6.  Check IDs and question people you don't know. When you have visitors, check them out and make sure they belong.
7. Educate your end users. Make sure they aren't prone to social engineering and educate and remind internal users of the company's security policies.