3 ms·

So there is plenty of open guides on running a server, locking down a single server, but I do not know of guides for locking down an organisation - basically th

So there is plenty of open guides on running a server, locking down a single server, but I do not know of guides for locking down an organisation - basically the RFC on how to run a SOC/Noc. Does such a thing exist? I am not looking for a white paper on Cisco network monitoring but ... somethining opinionated. A blank sheet of paper approach that would only have Fido access, maybe limited to openBSD or whatever. Something that as a small company one could build something not embarrassing.

bob1029 5y ago
Our strategy as a startup (<10 employees) is to operate as if our entire infrastructure can disappear instantly. 99% of what we need to rebuild lives in git, which is extremely resilient considering the number of pcs and build machines involved with recent checkouts. We do not store any customer secrets or other PII that could actually require a breach disclosure. At the end of the day it would just be a stupid messy fight with the hackers and then we'd be back in business the following on a clean azure tenant. Trying to run your business like some perfect unhackable thing is probably not sustainable, especially if you are small. The next best thing is limiting blast radius and making sure you can pick yourself up off the floor quickly enough.
- adamhp 5y ago
  This is why security professionals operate based on risk and risk mitigation, not pass-fail.