Security
Securing the capability
A support platform reaches every machine by design, which is the product and is what an intruder would most want.
- 01Exposed Remote Desktop: the Standing ProblemAnalysisRemote desktop reachable from the open internet remains one of the most reliable routes into organisations. Why it persists.
- 02Authentication for Remote AccessProcedurePasswords alone are not adequate for a service that grants interactive control. What to require, in order of value.
- 03Unattended Access and Its RisksAnalysisA connection that needs no approval is a standing door. What accumulates behind it, and the review that finds it.
- 04Lateral Movement From a Support ToolAnalysisA support platform reaches every machine by design. What that means if somebody reaches the platform.
- 05Vendor Access and Standing ConnectionsAnalysisSuppliers install their own tools and keep their own doors. What to ask for instead, and what to do about what is already there.
- 06Detecting Misuse of Your Own ToolProcedureMisuse looks like work, which is the difficulty. The signals that distinguish it, and who should be watching.
- 07Incident Response When Access Was AbusedProcedureThe first hour when somebody has used remote access they should not have. Containment, assessment and the conversation.