Guidelines for System Hardening
75
Operating system hardening
75
Application hardening
81
Authentication hardening
84
Virtualisation hardening
89
Guidelines for System Management
92
System administration
92
System patching
93
Data backup and restoration
96
Guidelines for System Monitoring
98
Event logging and monitoring
98
Guidelines for Software Development
100
Application development
100
Web application development
102
Guidelines for Database Systems
105
Database servers
105
Database management system software
106
Databases
107
Guidelines for Email
110
Email usage
110
Email gateways and servers
111
Guidelines for Networking
115
Network design and configuration
115
Wireless networks
119
iv