MahmoudMo-23/ghaymah-exam-mahmoud-secops
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update prevention-plan.md

Browse Source
This commit is contained in:
Mahmoud
2026-07-27 00:10:27 +03:00
committed by GitHub
parent c328b1e4f3
commit efb1bd3ff4
1 changed files with 11 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
q5-ransomware-response/prevention-plan.md
+11 -11
View File
@@ -154,14 +154,14 @@ ghaymah-cli storage bucket set-object-lock \
| Priority | Control | Status | | Priority | Control | Status |
|---|---|---| |---|---|---|
| 🔴 Critical | SSH key-only authentication | Implement immediately | | Critical | SSH key-only authentication | Implement immediately |
| 🔴 Critical | MFA for cloud console | Implement immediately | | Critical | MFA for cloud console | Implement immediately |
| 🔴 Critical | Least-privilege IAM roles | Implement immediately | | Critical | Least-privilege IAM roles | Implement immediately |
| 🟠 High | Automated OS patching | This week | | High | Automated OS patching | This week |
| 🟠 High | Network segmentation (public/private subnets) | This week | | High | Network segmentation (public/private subnets) | This week |
| 🟠 High | `noexec` on Block Storage mounts | This week | | High | `noexec` on Block Storage mounts | This week |
| 🟠 High | Immutable backup snapshots | This week | | High | Immutable backup snapshots | This week |
| 🟡 Medium | DNS filtering / egress control | This month | | Medium | DNS filtering / egress control | This month |
| 🟡 Medium | File Integrity Monitoring (FIM) | This month | | Medium | File Integrity Monitoring (FIM) | This month |
| 🟡 Medium | Phishing simulation program | This quarter | | Medium | Phishing simulation program | This quarter |
| 🟢 Low | Security awareness training | This quarter | | Low | Security awareness training | This quarter |