What is vital then is that there is a mechanism in place that prevents vulnerable machines from passing any threat on to the rest of the network. A mechanism that ensures the security policy does its job and that only devices in a trusted state are allowed to connect with the corporate network. Technology is now available that can do just this – ‘insist’ on the full integrity of any machine before it is allowed to connect to the network. No matter where a device is physically or how it is connected, if its security levels are not compliant with those set out in the security policy then it will be quarantined outside the network until it has automatically been brought up to the required level of protection. This keeps individual machines and the corporate network fully compliant at all times, ensuring that as long as the security policy is watertight, so is the network.
By taking responsibility away from the user and automating the enforcement of security policy, the CIO is provided with the peace of mind that policy is being implemented and maintained on every single machine and employees benefit by being able to focus more closely on their work without having to concern themselves with security matters. In this way full compliance is achieved across all users and a corporate security policy can be truly effective.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.