Security Operations

Data security and encryption, system hardening and configuration management, and security policies and awareness training.

Data security protects information across its lifecycle: classification/handling, encryption (at rest and in transit), data loss prevention (DLP), and secure disposal/destruction. Logging and monitoring provide accountability.

System hardening reduces the attack surface: apply patches/updates, remove unnecessary services and default accounts, enforce secure configuration baselines, and use configuration and change management so systems stay in a known-good, secure state.

Which practice reduces a system’s attack surface?

Encrypting a laptop’s disk primarily protects which security goal if the laptop is stolen?