Internal Security Ensure that server rooms are kept locked during off-hours

Internal Security

• Ensure that server rooms are kept locked during off-hours

• Provide extra security by using the console screen saver and Secure Console commands

• Change user password restrictions to require a password of at least eight characters that’s changed every 60 days

• Review the file system and eDirectory security to ensure that users have only the rights they need to perform their assigned tasks

Common Internal Security
Violations

• Password security is your front-line defense against internal security violations

• Despite your best planning and documentation, user accounts might be assigned unauthorized rights to the eDirectory tree or file system

• Another possible security compromise involves creating a rogue Admin account that has the Supervisor right to the eDirectory tree

• When tracing internal security violations involving excessive rights, you should follow the procedures shown on pages 457 and 458 of the textbook to track the problem to the source