Preventive, Detective or Corrective?

Email verification

Antivirus software is designed to monitor computer systems to identify computer viruses and prevent infections

Block IP addresses of suspected threat actors based upon detected activities.

implementing a patch for a specific vulnerability, disconnecting an infected system

Lock accounts suspected of unauthorized access.

Inventory where and how personal information is used in your organization for identity verification.

Adjust help desk reset procedures as necessary to incorporate new controls.

Hiring “White Hat” Hackers to Test the System

Consider disabling internet-based reset functions if not required.

Time-delay between authentication attempts.

Anti-Keylogger Tools

measures to identify and react to security breaches and malicious action

Implement detective controls to alert on failed attempts, multiple successful resets from singular sources, and others

Require administrative unlock.

Consider technologies such as CAPTCHA to fend off attackers targeting large amounts of users.

System and network monitoring tools record log-ins and access to particular applications.

quarantining malicious files, or terminate a process.

Encrypt sensitive information at rest, including account reset questions.

Anti-Spyware Software

Plan ahead. Include a breach URL, DNS record or contact information as soon as possible.

Generic error messages. Do not confirm/deny an account’s existence in errors messages.

measures to reduce the likelihood of a recurrence of a given breach

Notify employees of this breach.

Automated voice verification systems

Managing Computer Networks

Hardware/software token (2FA).

physical, technical, or administrative measures to lower your systems’ exposure to malicious action

SMS verification (2FA)

Communicate to your clients/consumers what you are aware of the situation and monitoring things closely.

video monitoring stations, door alarms, motion detectors, smoke and fire alarms