1. “Everyone full control or what?” Security challenges inside a company (WSUS, Wireless, Password policies: An introduction

2. 2 n Henk Maeghs n 10 years Océ n HTS Technical computer science n System Support Engineer Who are we? n Mark Theeuwes n 8 years Océ n HTS Technical computer science n System Support Engineer

3. 3 Canon http://www.oce.com

4. 4 n Océ: n 24,000 employees world wide n Head office in Venlo n 30 countries n IT corporate / IT Venlo Facts & Figures

5. 5 n Océ (Venlo): n IT specialists? n Servers ? n Clients? n Storage? Facts & Figures IT

6. 6 n Océ (IT): n 100 IT specialists n Servers ? n Clients n Storage? Facts & Figures IT

7. 7 n Océ (IT): n 100 IT specialists n 500 servers n Clients n Storage? Facts & Figures IT

8. 8 n Océ (IT): n 100 IT specialists n 500 servers n 5000 workstations n Storage? Facts & Figures IT

9. 9 n Océ (IT): n 100 IT specialists n 500 servers n 5000 workstations n 200 Tb storage Facts & Figures IT

10. 10 IT security n "the right people get the right information at the right time for the right reason".

11. 11 IT Security: a short introduction The CIA triad

12. 12 CIA triad: confidentiality n About privacy and authentication

13. 13 Some examples……..

14. 14 CIA triad: Availability n After a disaster you need a recovery…..

15. 15 Availability: other examples Service Level Agreements Data Center

16. 16 CIA triad: integrity n Firewalls, antivirus software, CRC and Windows Updates

17. 17 CIA integrity: Windows Updates Exploit Wednesday

18. 18 Why updates?

19. 19 Hotfixes………..

20. 20 Patches………….

21. 21 Service packs…………

22. 22 Windows Server Updates Services (WSUS) Upstream Downstream

23. 23 Download of updates at Microsoft Express (delta) versus full

24. 24 BITS (Background Intelligent Transfer Service)

25. 25 WSUS Group Policy

26. 26 WSUS settings (applied by a group policy)

27. 27 On the desktop

28. 28 “Houston, we’ve got a problem

29. 29 Patch Tuesday n MS bulletin about new updates n Approval updates on test systems n Approval in production n Minimizing risks by phased updating

30. 30 WSUS Management Console: approval per group

31. 31 Time for a break