{"id":10010,"date":"2018-11-07T10:58:22","date_gmt":"2018-11-07T09:58:22","guid":{"rendered":"https:\/\/www.tranquil.it\/authenticate-and-control-access-cybersecmonth\/"},"modified":"2025-07-18T11:02:54","modified_gmt":"2025-07-18T09:02:54","slug":"authenticate-and-control-access-cybersecmonth","status":"publish","type":"post","link":"https:\/\/www.tranquil.it\/en\/authenticate-and-control-access-cybersecmonth\/","title":{"rendered":"Authenticate and control access #CyberSecMonth"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ background_color=”#009EBD” custom_margin=”0px||” custom_padding=”19px||19px||false|false” hover_enabled=”0″ global_colors_info=”{}” background_enable_image=”off” sticky_enabled=”0″][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|40px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_post_title featured_image=”off” text_color=”light” _builder_version=”4.27.4″ text_orientation=”center” hover_enabled=”0″ global_colors_info=”{}” meta=”off” sticky_enabled=”0″][\/et_pb_post_title][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_padding=”0px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_padding=”40px||0px|” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]As the second thematic week of CyberSecMonth gradually ends, we continue to provide you with our CyberAdvice. We conclude this week, focused on the discovery of digital professions, with a computer graphics on the importance of authenticating and controlling access to your system. This is an opportunity to highlight the position of Chief Information Security Officer (CISO), as you will see below![\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_padding=”0|0px|0|0px” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Authenticating and controlling access, a natural reflex?<\/h2>\n

[\/et_pb_text][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]Access control has become a real challenge for organizations, each vulnerability can turn into a breach<\/strong> and be a source of a cyber attack<\/strong>. Authenticating and controlling digital access must therefore become as natural as closing the door of your home before going to sleep.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px||0px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_image src=”https:\/\/www.tranquil.it\/wp-content\/uploads\/cybersecmonth_infographie_3_HD-1.jpg” alt=”Authenticate and control access graphics” title_text=”Authenticate and control access graphics” align_tablet=”center” align_phone=”” align_last_edited=”on|desktop” _builder_version=”4.16″ global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]Despite the importance of such actions, authenticating and controlling access is not necessarily easy. However, it is possible to act effectively on two levels. First of all, it is important to set up tools to control the different accesses<\/strong>. It is then necessary to make employees aware of the protection of their data<\/a> (such as passwords) in order to effectively convey good practices internally.<\/p>\n

Good practices:<\/h3>\n

Account management:<\/h4>\n

Authentication elements must be modified as soon as they are installed<\/strong>. Indeed, default passwords are easy to obtain. Strong authentication is one more step towards a secure system. It is therefore wise to use two-factor authentication<\/strong> to prevent intrusions. So, you’ve just changed the lock on your door and you’re the only one with a key!<\/p>\n

Accounts<\/strong> accessing the information system must be nominative<\/strong> to facilitate the identification of the origin of incidents or potential vulnerabilities. The use of generic accounts<\/strong> should therefore be prohibited<\/strong>. These accounts must be subject to an even stricter data protection policy<\/strong>. Logins, passwords and connection traces<\/strong> must remain secret<\/strong>. Would you give a copy of your keys to a stranger you can’t fully trust? Do you want to answer “No” instinctively? Well, it’s the same for passwords.<\/p>\n

Password management:<\/h4>\n

Items such as directories<\/strong>, databases<\/strong> or mailboxes<\/strong> can be a source of valuable information<\/strong> and therefore subject to cyber attack<\/strong>. These elements require the utmost vigilance on the part of the Chief Iinformation Security Officier (CISO). The listing of sensitive elements is not sufficiently effective, it is necessary to define, authenticate and control access to the system<\/strong>. Duplication and dispersion of these elements must also be avoided<\/strong> to ensure the security of the information system. Without too much effort, you’ve just added a lock to your precious door! But what’s the point of having a locked door if the window was left open?<\/p>\n

The first front door for a hacker is the user’s workstation. So, even if on the admin side you have locked everything, you also need to control your users and especially their passwords. Poor password management is a huge risk for organizations, so it is important to educate your users so that their session is protected. Recycled passwords or passwords that are too easy to guess should be banned<\/strong>. In addition to awareness-raising actions, it is possible to take restrictive measures such as blocking accounts after several connection failures<\/strong> or carrying out an audit concerning password robustness<\/strong>. The storage of these passwords<\/strong> must be done through secure solutions<\/strong> including encryption mechanisms.<\/strong><\/p>\n

What means to authenticate and control access?<\/h3>\n

The CISO is the expert who guarantees the security and integrity of the information system<\/strong>. Often also in charge of data protection<\/strong> for the organisation (when there is no DPO), he is often the person to turn to when questions arise about access management.<\/p>\n

Keepass<\/a> allows you to manage passwords efficiently and securely<\/strong>. The little extra is that it is free and Open Source<\/strong>. Although optimized for Windows, Keepass also supports macOS and Linux operating systems. Encrypted files can contain user names, passwords, notes or even attachments.<\/p>\n

Your Active Directory manages the authentications and rights on your network<\/strong> since it lists all the information on the network, users, machines, groups and your system in general. You can use Microsoft Active Directory or its Open Source equivalent, Samba-AD. These two Active Directory are manageable via the same tools, namely the MMC console and RSATs. RSATs make it possible to control users’ rights<\/strong> but also their inputs and outputs<\/strong>. It is therefore easier to identify sources of vulnerability<\/strong> and act locally before a tragedy occurs.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Why Choose an Open Source Active Directory?<\/h2>\n

In France, Tranquil IT is the leading integrator of Samba Active Directory<\/a>, the Open Source equivalent of Microsoft Active Directory. With over 13 years of expertise in Samba, we efficiently conduct IT fleet audits<\/a>, Active Directory migrations<\/a>, domain mergers, and even knowledge transfers on Samba Active Directory<\/a>. Our close collaboration with the SambaTeam has enabled us to successfully complete over 270 projects throughout the years. Choosing Open Source means saving on license fees and trusting our experts!<\/p>\n

At Tranquil IT, we prioritize Open Source tools for their reliability, maintainability, and the freedom they provide. Why get locked into lengthy contracts with exorbitant licensing costs from Microsoft? Invest your money wisely in direct improvements by supporting the development of an Open Source solution.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_button button_url=”https:\/\/www.tranquil.it\/en\/securing-accesses\/discover-samba-active-directory\/” button_text=”I’m migrating for Samba-AD !” button_alignment=”center” _builder_version=”4.27.4″ custom_button=”on” button_bg_color=”#009EBD” button_border_width=”0px” background_layout=”dark” hover_enabled=”0″ global_colors_info=”{}” button_bg_enable_color=”on” button_border_color=”#009EBD” sticky_enabled=”0″][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ custom_margin=”||” custom_padding=”0px||0px” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ custom_padding=”40px||0px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_divider _builder_version=”4.16″ global_colors_info=”{}”][\/et_pb_divider][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0|0|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

France takes up the ECSC challenge!<\/h2>\n

[\/et_pb_text][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]Before getting to the heart of the matter, we would first of all like to support the French team, which is participating for the first time in the ECSC challenge. Indeed, the European CyberSecurity Challenge<\/a> takes place from 14 to 17 October<\/strong> and pits 17 national teams<\/strong> of young ethical hackers and professional trainers<\/strong>. Teams must overcome several challenges such as cryptography<\/strong>, reverse engineering<\/strong> or even vulnerability research<\/strong> to hope to win the competition. You can show your support for our national team on the networks (#ECSC2018<\/a>; #TeamFR<\/a>) or by downloading the ECSC kit<\/a> made available by ANSSI, which funds the event in association with HackerZvoice.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px|0px|0px|0px|false|false” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

What You Shouldn’t Miss:<\/h2>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”40px||0px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]Articles not to be missed:<\/p>\n