2022-077-E-IT Dept-PUBLIC LIBRARY ASSOCIATION, a divison of the American Library Association-Digital learning

Browse Search

DocuSign Envelope ID:24BBAFA9-CD81-4144-ACEF-E9036E703739 vulnerabilities /threats 31. How does the cloud provider defend against malware, including but not limited to viruses, bots, spyware, spam, phishing and pharming? Jende Solutions will deploy network perimeter controls to regulate traffic moving between trusted internal resources and external, untrusted entities. Jende Solutions's virtual network security controls implementation must protect against known and unknown threats through a combination of a thorough understanding of information risks, best-practice security configurations, and an alignment with Jende Solutions's business requirements. Applicability This policy applies to all the IT staff responsible for managing, implementing, and administering the security of the Jende Solutions networks. Standards Virtual Network administrators will maintain a configuration management program for network devices that identify all key aspects of the program and its management. At a minimum, the program must encompass network controls and routers, and include exact documentation of: • The current network topography (in diagram form, representing logical and physical composition) that includes all connections to and from confidential networks. • A list of all ports and services used for business connections to and from segments carrying confidential data. • Business justification for all insecure ports in use between confidential networks and public/untrusted networks (e.g., FTP, Telnet, etc). • Roles and responsibilities for device management. • The formal process for requesting and implementing changes to network control configuration. The Chief Information Security Officer will conduct periodic reviews of the network control configuration changes to ensure compliance to documented standards and completeness of documentation. Exact standards to be deployed on network devices must adhere to the following: Perimeter Security - Jende Solutions will deploy and maintain perimeter security protection that include: Network Segmentation • All Internet facing applications will be deployed in a Demilitarized Zone (DMZ). All VPN and other secure connections to partners and clients will be routed through the Jende Solutions network controls to establish monitoring and logging controls. Outbound DNS queries from a central DNS service are not required to originate within the DMZ. • All user LAN segments will be separated from production servers through the use of a firewall or an Access Control List (ACL)on the local switch/router. • All servers storing, processing, or transmitting confidential data must be segmented away from both non-confidential servers and user segments by the use of internal routers or firewalls. Virtual Network Controls • Jende Solutions will only use network controls capable of conducting stateful packet inspection. All network controls used to technically support the network control configuration program must have this feature as part of its core technical specification. • Active network controls configurations must comply with the network control configuration program approved by the CISO and maintained in the IT Procedures Guide. Tools will be