A newly hired security specialist is asked to evaluate a company's network security. The security specialist discovers that users have installed personal software, the network OS has default settings, no patches have been installed, and passwords are not required to be changed regularly. Which of the following would be the first step to take?

Question

Quizplus · Accepted Answer

The first and the foremost task to be performed is to enforce a good security policy which covers all the security measures.
Key Takeaway: Of all the measures mentioned here, a good security policy can ensure that software patches are installed and disable all non-essential services.

A Newly Hired Security Specialist Is Asked to Evaluate a Company's