Getting into IT: SECURITY
IT SECURITY, is an ever expanding and rapidly growing field.
As cyber threats increase on a daily basis, information security professionals are becoming more valued and necessary across all businesses.
What do IT security professionals do?
Many things, but really we are always trying to balance these three things:
Availability, Integrity, and Confidentiality. Think of each of these as points on a triangle. You try to keep your data accessible, to the people who need access to it, but on one else. You also try to make sure no one else manipulates it incorrectly or downloads it who shouldn't have access to it.
Mostly we try to take steps to keep bad people and malicious software out of our systems.
We build and work with network teams to isolate network traffic in order to minimize exposure and mitigate risk.
We create firewalls to segment, filter, and detect malicious intent.
We monitor the inflow and outflow of data in our environments.
We test our environment for weaknesses. (Pen testing.)
We update, patch, and maintain our environments in order to proactively prevent vulnerabilities.
Some people analyze malware in labs to improve anti-virus/anti-malware software.
We review our environments to make sure users don't have to many permissions or permissions they don't need anymore because they have changed jobs.
Ensure that data is only accessed by the people who should have access to it. (Principle of least privilege)
We look at network traffic and analyze it looking for patterns of malicious behavior.
There is a lot more and I can go much deeper but that will be another series of posts. This is designed to give you some ideas if you are considering a career change.
Check out the following for more information on becoming an information security professional.
Cybrary
SANS Institute
Thanks for reading
As always please ask any questions you have in the comments and subscribe to this blog if you enjoy the content.
As cyber threats increase on a daily basis, information security professionals are becoming more valued and necessary across all businesses.
What do IT security professionals do?
Many things, but really we are always trying to balance these three things:
Availability, Integrity, and Confidentiality. Think of each of these as points on a triangle. You try to keep your data accessible, to the people who need access to it, but on one else. You also try to make sure no one else manipulates it incorrectly or downloads it who shouldn't have access to it.
Mostly we try to take steps to keep bad people and malicious software out of our systems.
We build and work with network teams to isolate network traffic in order to minimize exposure and mitigate risk.
We create firewalls to segment, filter, and detect malicious intent.
We monitor the inflow and outflow of data in our environments.
We test our environment for weaknesses. (Pen testing.)
We update, patch, and maintain our environments in order to proactively prevent vulnerabilities.
Some people analyze malware in labs to improve anti-virus/anti-malware software.
We review our environments to make sure users don't have to many permissions or permissions they don't need anymore because they have changed jobs.
Ensure that data is only accessed by the people who should have access to it. (Principle of least privilege)
We look at network traffic and analyze it looking for patterns of malicious behavior.
There is a lot more and I can go much deeper but that will be another series of posts. This is designed to give you some ideas if you are considering a career change.
Check out the following for more information on becoming an information security professional.
Cybrary
SANS Institute
Thanks for reading
As always please ask any questions you have in the comments and subscribe to this blog if you enjoy the content.
Comments
Post a Comment