Monitor system logs

IDS

Reporting

Hardening

Key stretching

TOTP

Asymmetric keys

Smart cards

Delete contractor accounts and inform the auditor of the update.

Inform the auditor that the accounts belong to the contractors.

Reset contractor accounts and inform the auditor of the update.

Disable unnecessary contractor accounts and inform the auditor of the update.

Implement time of day restrictions for all temporary employees.

Implement a password expiration policy.

Implement an account expiration date for permanent employees.

Run a last logon script to look for inactive accounts.

Disabled, regardless of the circumstances

Deleted if the employee has been terminated

Disabled if the employee has been terminated

Deleted, regardless of the circumstances

Install host-based intrusion detection software to monitor incoming DHCP Discover requests.

Block commonly used ports and forward them to higher and unused port numbers.

Install a proxy server between the users’ computers and the switch to filter inbound network traffic.

Configure the switch to allow only traffic from computers based upon their physical address.

The new virtual server’s MAC address triggered an implicit deny in the switch

The new virtual server’s MAC address was not added to the firewall rules on the switch

The new virtual server’s MAC address was not added to the ACL on the switch

The new virtual server’s MAC address triggered a port security violation on the switch

Install a RADIUS server

Enable MAC filtering

Lowering power levels on the AP

Disable SSID broadcast

Open system authentication

Disable SSID broadcast

MAC filter

Reduce power level

Password strength

802.1x

Data encryption

BGP