Week 6 discussion topic

Mr. Scott seems satisfied that TechWorx has a solid plan to secure the three physical perimeters. Now he wants to transition to the cyber (logical) aspects of the organization.  He is interested in establishing sound policies and procedures and wants your input.

Part I: Watch this short video on passwords from several years ago.

Is this an issue?  Do you think this is a problem today? 

https://www.youtube.com/watch?v=PlPZ-npnGEk 

Part II:  Mr. Scott wants to know what the password policy is for TechWorx.  

1. 1. What is a brute force attack in the cyber world? 
2. 2. What is an example of a brute force attack in the physical world? (This is not a cyber attack) 
3. 3. What do you recommend Techworx use for the length and complexity of our passwords? Consider a balance between both security and functionality.
4. 4. Discuss the concept of account lockout Policy. Here is a reference (click here)Links to an external site. 
   • Explain these settings to Mr. Scott and make a recommendation on what settings Techworx should use moving forward. 
   • What is an account lockout policy?
   • Account Lockout Duration?
   • Account Lockout Threshold/Max Failures
   • Reset Account Lockout Counter

Note:  The video below is a good introduction to group policy if you are not familiar with it.   This is only one resource and you may need others to help you solve these challenges.