CISO: how automated security validation can help you enjoy your holidays

By Jérôme Beaufils, CEO of SASETY

Being a CISO is never restful. So, to make the most of a few days off and get back to work with peace of mind, here is a checklist that can help:

Before you leave

1. Check the logs and security events of the main critical systems

• Review recent activity: check changes and attempted changes, as well as any potential indicator of compromise.
• If you plan to be away for more than a week, appoint a team member to carry out a weekly review, which reduces the risk of a critical event going undetected.

2. Check whether new vulnerabilities have been identified that require urgent remediation

• Use a vulnerability scanning tool or consult one of the regularly updated databases, such as CVE Details.
• Identify whether critical components are exposed and, if a fix is needed, define a remediation plan.

3. Check whether changes have been made to IT infrastructure and the related security controls, and limit major changes while you are away (XDR, SIEM, etc.)

• Make sure you are informed of all updates planned during your absence.

When you get back

1. Review the changes that were made

• Which updates were carried out?
• Monitor their possible impact on the overall security posture and make the necessary changes to security controls.

2. Check with Human Resources for any relevant changes

• Have new employees joined the company? Do they need access to specific systems?
• Conversely, have employees left the company? Have their credentials been revoked?

3. Find out about new business directions and make sure the team is aware of the latest developments

• Has the organisation introduced new services or products that have widened the potential attack surface?
• Has a new website or mobile app gone live?
• Has a new version of a piece of software been deployed?

4. Check password policies

• In general, regularly make sure that password policies remain suited to protecting the organisation.
• Consider reviewing requirements for length, complexity and special characters, as well as expiry and reuse rules.

5. Check firewall configurations

• A configuration review every 3 to 6 months is recommended.
• Review traffic filtering rules, configuration settings and authorised administrators to make sure the appropriate configurations are in use.

Many tools exist to help carry out these checks.

What if these checks were automated?

But are all the resources in place to make sure everything gets handled?

If you are looking for a way to automate and standardise processes, or to make sure critical vulnerabilities do not slip through the net, automated security validation from Pentera can be a great help.

With real-time visibility, full attack surface management and real exploitation measures, automated security validation lets you go on holiday with peace of mind. And when you return, risk-based action plans will help build the roadmap to improve the organisation's security posture.

Acknowledgements

Omer Gafni – VP R&D, Pentera

💡 To see how effective Pentera really is, nothing beats a demo!

Book a demo →