Please enable JavaScript.

Coggle requires JavaScript to display documents.

InfoSec Policies - Coggle Diagram

- - - - Internal services are public on the internet
      - Internal and external zones are not clearly partitioned
      - Access policies (Network ACLs & Security Group) are not applied accurately and overlapping with access rights.
    - - The non-standardized IAM system makes it difficult to grant and revoke admin rights
      - Do not have integrated Single Sign-On
      - Role-based access control is not clearly defined
      - The AWS resources organization and management are not strict enough
  - - - Refactoring the network diagram, Internal and External zones are clearly partitioned
      - Only public services push to internet facing
      - Strict access control policy (restructure Network ACLs and Security Groups)
    - - Implement AWS Organization, service control policy
      - Implement Single Sign-On
      - Implement role-based access control
      - Limit usage of resources