Step-by-step instructions on how to create a bastion host plus how to create an audit trail by logging SSH commands.
Posts by Category:
- Security
- Access
- Auditing
- Policy
- SOC 2
- Privileged Access Management
- Compliance
- Identity and Access Management
- Zero Trust
- Compare
- Team
- DevOps
- Authentication
- Databases
- Integrations
- Product
- Podcasts
- Productivity
- AWS
- ISO 27001
- SSH
- Dynamic Access Management
- Kubernetes
- Role-Based Access Control
- Observability
- Secure Access Service Edge
- Webinars
- Events
- HIPAA
- Engineering
- NIST
- Onboarding
- Passwordless
- Offsites
- PCI
- Platform
![Daniel Leslie Director of Security Intelligence & IT Operations at Namely on the Human Side of Security](https://discover.strongdm.com/hubfs/Imported_Blog_Media/5f1d54200ba49a33eec699d7_00037-sdm-bg-2000x1000-2.jpg)
This week we are joined by Daniel Leslie at Namely who shares his take on the human side of security, and what security at scale looks like for his team. Max, Justin, and Daniel discuss the 3 core things to good company-wide security: psychological safety, vulnerability, and purpose. You have to address these things in a comprehensive manner.
![Token Security Podcast | Alan Daines Chief Information Security Officer at FactSet on Phishing](https://discover.strongdm.com/hubfs/Imported_Blog_Media/5f1d53edc892d85a0435aeab_00033-sdm-bg-2000x1000-3.jpg)
In this episode Max Saltonstall and Justin McCarthy are joined by Alan Daines, Chief Information Security Officer at FactSet to talk about phishing, educating on it, and defending against it.
![What is Data Center Security & 4 Ways to Improve](https://discover.strongdm.com/hubfs/data-center-security.jpeg)
Data center security refers to the protection of data centers against threats such as cyber-attacks, natural disasters, and human error. The number of data centers has increased significantly over the last decade, and so has the amount of security-related disasters. In 2022, the global data center ...
![Token Security Podcast | Johnathan Hunt, VP of Information Security at InVision Talks Secure Code](https://discover.strongdm.com/hubfs/Imported_Blog_Media/5f1d588c103473b642c26fc5_00119-sdm-bg-2000x1000-3.jpg)
In this episode Max Saltonstall and Justin McCarthy are joined by Johnathan Hunt, VP of Information Security at InVision to talk about pen testing, bug bounty programs, and secure code.
![How to Write Your Software Development Lifecycle Policy](https://discover.strongdm.com/hubfs/Imported_Blog_Media/5f1d5414811481dabd67dbc5_00036-sdm-bg-2000x1000.jpg)
A staggering amount of cybersecurity breaches are caused by software vulnerabilities. From the early worms of the 1980s through the early 2000s - like Blaster, Code Red, and Melissa - to the notable Petya and WannaCry of the past few years, these vulnerabilities are all rooted in software flaws that allowed systems to be exploited. A software development lifecycle (SDLC) policy helps your company not suffer a similar fate by ensuring software goes through a testing process, is built as securely
![Token Security Podcast | NYC Cyber Command](https://discover.strongdm.com/hubfs/Imported_Blog_Media/5f1d516ee73d416b8ec532e5_00013-sdm-bg-2000x1000-3.jpg)
This episode Max Saltonstall sits down in Manhattan with Quiessence Phillips, Deputy CISO and Head of Threat Management, City of New York and Colin Ahern, Deputy CISO, City of New York.
![Token Security Podcast | Andrew Mulholland, Head of Core Infrastructure at BuzzFeed](https://discover.strongdm.com/hubfs/Imported_Blog_Media/5f1d556ca5d407ad39fae6ec_00046-sdm-bg-2000x1000-3.jpg)
In this episode Justin McCarthy sits down with Andrew Mulholland, head of core infrastructure at BuzzFeed to talk about security incident response, remote access policy, and a money-back guarantee for OSS.
![5 Disaster Recovery Policy (DRP) Best Practices to Know](https://discover.strongdm.com/hubfs/disaster-recovery-policy-best-practices.png)
The first step in this policy is to define the critical processes and assets necessary for you to maintain minimum business functions after a disaster.
![Defining Your IT Vendor Management Policy](https://discover.strongdm.com/hubfs/Imported_Blog_Media/605d0088c871dd2881b66a20_soc2-vendor-management-policy-2.png)
As you work through the rigorous SOC 2 requirements, it is easy to get tunnel vision because so much of your work focuses on protecting your customers and their information. But what about the vendors you work with? Do you have a third-party IT vendor management strategy to address the risks they bring to your organization?
![5 Password Policy Best Practices You Can Implement](https://discover.strongdm.com/hubfs/Imported_Blog_Media/6075b3a4c24cb3f94a5babe7_StrongDM-password-management-for-business-3.jpeg)
Passwords are one of the most common targets for hackers, so it’s imperative that your company enforces a strong password policy. This policy will not only define the requirements of the password itself but the procedure your organization will use to select and securely manage passwords.
![4 Steps To Work Remotely While Maintaining Security | Remote Access Policy](https://discover.strongdm.com/hubfs/remote-access-policy.jpg)
The purpose of a Remote Access Policy is to keep your employees productive from anywhere without sacrificing security.
![Workstation Security Policy Best Practices](https://discover.strongdm.com/hubfs/workstation-security-policy-best-practices.png)
In the workstation security policy, you will define rules intended to reduce the risk of data loss/exposure through workstations.
![Encryption Policy Best Practices | TLS vs SSL](https://discover.strongdm.com/hubfs/Imported_Blog_Media/5f1d5770a977f737f2a6b6d8_00067-sdm-bg-2000x1000-3.jpg)
You wouldn’t leave the house without making sure your doors and windows were locked, and that any valuables were hidden or secured in a safe. That way, if you were robbed, the burglar would have a difficult time accessing your most precious assets. In the same way, you need to make sure your organization’s critical data is well protected.