Update prevention-plan.md

This commit is contained in:
Mahmoud
2026-07-27 00:10:27 +03:00
committed by GitHub
parent c328b1e4f3
commit efb1bd3ff4
+11 -11
View File
@@ -154,14 +154,14 @@ ghaymah-cli storage bucket set-object-lock \
| Priority | Control | Status |
|---|---|---|
| 🔴 Critical | SSH key-only authentication | Implement immediately |
| 🔴 Critical | MFA for cloud console | Implement immediately |
| 🔴 Critical | Least-privilege IAM roles | Implement immediately |
| 🟠 High | Automated OS patching | This week |
| 🟠 High | Network segmentation (public/private subnets) | This week |
| 🟠 High | `noexec` on Block Storage mounts | This week |
| 🟠 High | Immutable backup snapshots | This week |
| 🟡 Medium | DNS filtering / egress control | This month |
| 🟡 Medium | File Integrity Monitoring (FIM) | This month |
| 🟡 Medium | Phishing simulation program | This quarter |
| 🟢 Low | Security awareness training | This quarter |
| Critical | SSH key-only authentication | Implement immediately |
| Critical | MFA for cloud console | Implement immediately |
| Critical | Least-privilege IAM roles | Implement immediately |
| High | Automated OS patching | This week |
| High | Network segmentation (public/private subnets) | This week |
| High | `noexec` on Block Storage mounts | This week |
| High | Immutable backup snapshots | This week |
| Medium | DNS filtering / egress control | This month |
| Medium | File Integrity Monitoring (FIM) | This month |
| Medium | Phishing simulation program | This quarter |
| Low | Security awareness training | This quarter |