You can build different secure systems. First, you need to figure out what you want to protect. It could be computers, networks, cloud applications, databases, user accounts, etc. Then, you need to apply multiple layers of security. These typically include strong authentication, access control, encryption, secure configuration, regular upgrades, backups, monitoring, and an incident-response plan.
One important framework is the NIST Cybersecurity Framework 2.0, which divides cybersecurity into six functions: Govern, Identify, Protect, Detect, Respond, and Recover.
To me, the strongest security is not dependent on one instrument. It is derived from the combination of preventive, detective and recovery controls, such that a failure in one layer does not endanger the whole system.
Secure System Types
Different contexts need different security approaches:
-
Network security protects network traffic and connected devices.
-
Application security secures software and web applications.
-
Cloud security is the protection of infrastructure, applications and data that are hosted in the cloud.
-
Endpoint security covers laptops, desktops and mobile devices.
-
Database security means the protection of information in a database.
In a Zero Trust security model, access is always verified rather than immediately trusting someone because they are inside a network.
NIST defines Zero Trust as “about protecting users, assets, and resources” and does not inherently trust based on network location.
Core Security Components
A typical well-designed secure system combines:
-
Multi-factor authentication (MFA)
-
Role-based access or least privilege
-
Data encryption
-
Firewalls and network controllers
-
Endpoint Security
-
Secure backups
-
Logging & Monitoring
-
Security updates on a regular basis
-
Incident-response processes
One notion I would really like to emphasize is minimum privilege. NIST defines it as restricting users or processes to the least privileges necessary to accomplish assigned tasks.
Security Step-by-Step
Here’s what a practical security process looks like:
-
Identify key systems, accounts and sensitive data.
-
Assess potential weaknesses and threats.
-
Implement adequate security safeguards.
-
Limit access to those who really need it.
-
Enable strong and multi-factor authentication.
-
Encrypt sensitive data where possible.
-
Keep your operating systems and applications updated.
-
Tested backups.
-
Be alert for suspicious activity.
-
Develop and test an incident-response and recovery plan.
The key point here is security needs to be risk-driven. Personal laptops and financial databases are not created equal, and security policies should not be applied equally.
Threat Protection
Secure systems should be designed to resist common attacks such as:
-
Malware and ransomware
-
Phishing (continued)
-
Theft of credentials
-
Unlawful access
-
Software errors
-
Internal threats
-
Data breaches
Zero Trust can further decrease risk by verifying and approving individuals and devices before granting them access to protected resources.
Monitoring and Maintenance
Security is a continuous process, not a one-time installation.
Often:
-
Review the security logs.
-
Apply security updates.
-
Delete unused accounts.
-
Check user permissions.
-
Backups test.
-
Scan for security holes.
-
Security policies update.
For me, I would consider monitoring and maintenance to be as vital as original security configuration, as new vulnerabilities and threats are always popping up.
Frequently Asked Questions
1. What kind of system is the most secure?
There is no single most secure system. Security is a matter of risk, architecture, controls, configuration and ongoing maintenance.
2. What is tiered security?
Layered security means that there are a lot of security controls in place so if one protection fails, then the entire system does not get compromised automatically.
3. What is Zero Trust security?
Zero Trust is built on the premise that access is not trusted by default and must be authenticated and authorized properly before resources may be accessed.
Must Read: What is Cybersecurity and Why is it so Important?
