Overview:

The Baselining and Controls on Networked Systems projectwill address several fundamental cybersecurity efforts that align with the company’sCybersecurity Strategic Plan. The company is currently allowing outdatedprotocols and configurations that were necessary to support legacy systems andbusiness processes, which have since been removed or changed. Additionally, newcontrols and tools have been released that allow the company to matureprevention, detection, and response to unwanted cyber events through automationand integration with advanced cloud technologies.

Requirements

The project will apply updated protocols to enhance thesecurity of authentication events and data transfer between users and systems;enable additional logging capabilities for increased visibility; modernizesystem configurations; and make new features available in security toolsresponsible for detecting and responding to cyber events.

Protocol Enhancements

·SMBv1 -Remove

·NTLM -Remove

·Kerberos– Update

·LDAP –Restrict (LDAPS instead)

Logging Enhancements

·PSLogging - Reconfigure existing and enable new sources

·Sysmon –Reconfigure existing and enable new sources

Baseline Configuration Enhancements

·USB -Block

·BootManager – New configuration

Tool Enhancements

·Defender– New install on servers