Auditing IT Infrastructures for Compliance, 3rd Edition

Best Practices for User Domain Compliance

The best practice is a leading technique, methodology, or technology that through experience has proved to be very reliable. Best practices tend to produce consistent and quality results. The following brief list of best practices is focused on the user and should be considered in the audit scope. These best practices go a long way to protecting users and the organization. These basic best practices are as follows:

• Attachments—Never open an attachment from a source that is not trusted or known.

• Encryption—Always encrypt sensitive data that leaves the confines of a secure server. That means encrypting devices like laptops and backup tapes. It also means encrypting sensitive data in transit such as ...