security How to protect your organization's domain from security threats

[equity78]

In one example cited by CSC, a security expert lost his core domain to scammers. Even though the domain owner had a lock, the registrar succumbed to a scam and transferred his domain to another registrar. To protect against this action, the owner should have insisted on a registry lock that prevents domain transfers initiated by the registrars.

Only 20% of the global 2000 companies use enterprise-grade DNS hosting. Using a non-enterprise DNS host without redundancy can lead to potential security threats such as distributed denial of service (DDoS) attacks. If your DNS goes down, then your websites, email, remote employee access, and other services go down as well.

https://www.techrepublic.com/article/how-to-protect-your-organizations-domain-from-security-threats/

 

[tonyk2000]

A good article. By some reason, the following important points are missed:

- webhosting security

- registrar security

As a matter of fact, a number of webhosting companies (including dedicated hostings and/or datacenters) and a number of registrars are using extremely outdated server software. If they do not care about security (and they do not) - the customers will have issues, earlier or later . Some service providers do also have unclear access rights policy (who has access to stored credit card numbers, for example? Or to any other sensitive info, such as banking details or SSN? What if all outsourced support agents, who may reside in different countries and are working from home, do have access to such a sensitive information from the very first day of their job... even if the job is temporary... )? Etc, etc, etc.

/offtopic begin/

The truth:

... it is about Swiss banking. But, definitely applies to IT industry as well... ;-()

/offtopic end/

 

[equity78]

A good article. By some reason, the following important points are missed:

- webhosting security

- registrar security

As a matter of fact, a number of webhosting companies (including dedicated hostings and/or datacenters) and a number of registrars are using extremely outdated server software. If they do not care about security (and they do not) - the customers will have issues, earlier or later . Some service providers do also have unclear access rights policy (who has access to stored credit card numbers, for example? Or to any other sensitive info, such as banking details or SSN? What if all outsourced support agents, who may reside in different countries and are working from home, do have access to such a sensitive information from the very first day of their job... even if the job is temporary... )? Etc, etc, etc.

/offtopic begin/

The truth:

... it is about Swiss banking. But, definitely applies to IT industry as well... ;-()

/offtopic end/

I agree with you with all the remote work, less secure networks at home it's a problem that needs to be solved.