This is just a fun name that has been given. These points are the ones which do not directly fit into the previous three sections:
|
Sr. no. |
Point |
Description |
|
1 |
Single Sign On |
If your organization has multiple internal applications and if it ranges more than eight, then you should consider the possibility of SSO. We can either design it with ADFS or use SaaS solutions such as Okta or JumpCloud, which are pretty easy to set up and have a lot of integrations with other providers such as AWS and Gmail. |
|
2 |
Have MFA across |
Multifactor authentication is a must specifically at entry points such as VPN and AWS. In short, any place where an attacker can log in with stolen credentials should be supported by MFA. |
|
3 |
Full disk encryption—a must for workstations |
Many developers or even system administrators have copies of access/secret keys,... |
