Skip to main content

Security Best Practices

This guide provides comprehensive security best practices for NopeSight customers to maximize the security benefits of the platform while maintaining operational efficiency. Following these recommendations will help ensure your NopeSight deployment remains secure and compliant with your organizational security policies.

Account Security​

User Account Management​

Strong Authentication Practices​

Password Requirements

  • Use strong, unique passwords for NopeSight accounts
  • Minimum 12 characters with complexity requirements
  • Avoid reusing passwords from other systems
  • Consider using a password manager for unique passwords

Multi-Factor Authentication (MFA)

  • Mandatory Setup: Complete MFA setup within the 7-day grace period
  • Authenticator App Selection: Use enterprise-grade authenticator apps:
    • Google Authenticator (most common)
    • Microsoft Authenticator (enterprise integration)
    • Authy (cloud backup support)
    • 1Password (integrated with password management)

Backup Code Management

  • Store backup codes in a secure password manager
  • Print and store physical copies in a secure location
  • Never store backup codes with your primary password
  • Test backup codes periodically to ensure they work
  • Replace used backup codes immediately

Account Monitoring​

Regular Account Reviews

  • Review account activity logs monthly
  • Monitor for unauthorized access attempts
  • Verify active sessions and devices
  • Report suspicious activity immediately

Access Management

  • Request only the minimum necessary access permissions
  • Regularly review and update role assignments
  • Remove access for former team members promptly
  • Use separate accounts for different roles when required

Session Security​

Secure Session Practices​

Browser Security

  • Use updated, supported web browsers
  • Enable automatic security updates
  • Clear browser cache regularly
  • Use incognito/private mode for shared computers

Session Management

  • Log out completely when finished
  • Don't leave sessions unattended
  • Use automatic session timeout settings
  • Avoid saving passwords in shared browsers

Network Security

  • Access NopeSight only from trusted networks
  • Avoid public Wi-Fi for sensitive operations
  • Use VPN when accessing from remote locations
  • Verify SSL certificate validity before login

Discovery Agent Security​

Agent Deployment Security​

Credential Management​

Service Account Security

  • Create dedicated service accounts for discovery agents
  • Use principle of least privilege for agent permissions
  • Rotate agent credentials regularly (quarterly recommended)
  • Store credentials securely using enterprise credential managers

API Token Security

  • Generate unique API tokens for each agent
  • Rotate API tokens regularly (monthly recommended)
  • Store tokens securely in agent configuration
  • Monitor token usage for anomalies
  • Revoke unused or compromised tokens immediately

Network Security for Agents​

Network Segmentation

  • Deploy agents in appropriate network segments
  • Limit agent network access to necessary systems only
  • Use firewall rules to restrict agent communications
  • Monitor agent network traffic for anomalies

Secure Communication

  • Ensure all agent communications use HTTPS
  • Validate SSL certificates in agent configuration
  • Use corporate proxy servers when required
  • Monitor for man-in-the-middle attacks

Discovery Configuration Security​

Credential Protection​

Windows WMI Credentials

# Secure WMI configuration example
wmi_config:
  domain: CORPORATE
  username: svc_discovery
  # Password stored in secure credential store
  password_source: "credential_manager"
  encrypt_traffic: true
  use_kerberos: true

SSH Key Management

  • Use SSH keys instead of passwords when possible
  • Protect SSH private keys with passphrases
  • Limit SSH key access to necessary systems
  • Rotate SSH keys regularly
  • Use separate keys for different environments

SNMP Security

  • Use SNMPv3 with authentication and encryption
  • Avoid SNMPv1/v2c community strings
  • Change default SNMP community strings
  • Limit SNMP access by IP address
  • Monitor SNMP query activity

Data Protection​

Data Classification and Handling​

Sensitive Data Management​

Data Classification

  • Understand what data types NopeSight discovers
  • Classify discovered data according to organizational policies
  • Apply appropriate protection levels based on classification
  • Document data handling procedures

PII/PHI Protection

  • Be aware when NopeSight might discover personal information
  • Configure discovery filters to exclude sensitive data stores
  • Use role-based access for sensitive data views
  • Implement additional approval workflows for sensitive data access

Data Retention and Disposal​

Retention Policies

  • Implement data retention policies aligned with business needs
  • Regularly purge old discovery data per retention schedules
  • Archive historical data securely when required
  • Document data disposal procedures

Secure Data Disposal

  • Use NopeSight's secure deletion features
  • Verify complete data removal from all systems
  • Maintain disposal logs for compliance purposes
  • Follow organizational data disposal policies

Backup and Recovery Security​

Backup Security​

Backup Protection

  • Verify backup encryption is enabled
  • Test backup integrity regularly
  • Store backups in geographically separate locations
  • Protect backup access credentials
  • Monitor backup processes for failures

Recovery Procedures

  • Test recovery procedures regularly
  • Document recovery steps and responsibilities
  • Verify data integrity after recovery
  • Maintain offline recovery documentation
  • Train staff on recovery procedures

Network Security​

Secure Communications​

TLS/SSL Configuration​

Certificate Management

  • Use certificates from trusted Certificate Authorities
  • Monitor certificate expiration dates
  • Implement certificate renewal procedures
  • Validate certificate chains and revocation status
  • Use Extended Validation (EV) certificates when possible

Protocol Security

  • Disable older TLS versions (TLS 1.0, 1.1)
  • Use strong cipher suites
  • Enable Perfect Forward Secrecy
  • Monitor for SSL/TLS vulnerabilities
  • Regular security testing of TLS implementation

Network Access Controls​

Firewall Configuration

  • Implement network segmentation for NopeSight access
  • Use application-layer firewalls when possible
  • Regularly review and update firewall rules
  • Monitor firewall logs for security events
  • Implement intrusion detection/prevention systems

VPN and Remote Access

  • Require VPN for remote NopeSight access
  • Use multi-factor authentication for VPN access
  • Monitor VPN usage and anomalies
  • Regular VPN security assessments
  • Implement split-tunneling restrictions

Compliance and Audit​

Audit Preparation​

Documentation Management​

Security Documentation

  • Maintain current security policies and procedures
  • Document security control implementations
  • Keep evidence of security control testing
  • Maintain incident response documentation
  • Regular documentation reviews and updates

Access Documentation

  • Maintain current user access lists
  • Document role-based access control assignments
  • Keep records of access reviews and certifications
  • Document privileged user access justifications
  • Maintain termination and transfer procedures

Evidence Collection​

Audit Trails

  • Enable comprehensive audit logging
  • Protect audit logs from modification
  • Regularly review audit logs for anomalies
  • Maintain audit log retention per compliance requirements
  • Implement automated audit log analysis

Control Testing Evidence

  • Document regular testing of security controls
  • Maintain evidence of control effectiveness
  • Keep records of remediation activities
  • Document exceptions and their resolution
  • Regular independent validation of controls

Compliance Monitoring​

Continuous Compliance​

Automated Monitoring

  • Implement automated compliance monitoring
  • Set up alerts for compliance violations
  • Regular compliance status reporting
  • Trend analysis for compliance metrics
  • Continuous improvement of compliance processes

Manual Reviews

  • Quarterly access reviews and certifications
  • Annual policy and procedure reviews
  • Regular risk assessments
  • Compliance gap analyses
  • Third-party security assessments

Incident Response​

Security Incident Preparation​

Incident Response Planning​

Response Team

  • Identify incident response team members
  • Define roles and responsibilities
  • Establish communication procedures
  • Regular incident response training
  • Test incident response procedures

Detection and Analysis

  • Implement security monitoring and alerting
  • Define security incident categories
  • Establish escalation procedures
  • Document analysis procedures
  • Maintain threat intelligence sources

Evidence Preservation​

Digital Forensics

  • Implement evidence preservation procedures
  • Maintain chain of custody documentation
  • Use forensically sound data collection methods
  • Protect evidence integrity
  • Work with legal counsel on evidence handling

Incident Communication​

Internal Communication​

Stakeholder Notification

  • Define internal notification procedures
  • Establish communication timelines
  • Identify key stakeholders and their roles
  • Maintain emergency contact information
  • Regular communication during incidents

External Communication​

Regulatory Reporting

  • Understand regulatory reporting requirements
  • Maintain templates for required notifications
  • Establish timelines for regulatory reporting
  • Work with legal counsel on regulatory matters
  • Document all regulatory communications

Customer Communication

  • Develop customer notification procedures
  • Maintain customer contact information
  • Establish communication channels
  • Provide regular status updates
  • Post-incident customer debriefings

Monitoring and Maintenance​

Security Monitoring​

Continuous Monitoring​

Security Metrics

  • Monitor authentication success/failure rates
  • Track privileged user activity
  • Monitor data access patterns
  • Analyze security event trends
  • Regular security posture assessments

Alerting and Response

  • Implement real-time security alerting
  • Define alert escalation procedures
  • Regular review and tuning of alerts
  • Automated response for certain alert types
  • Regular testing of alerting systems

Vulnerability Management​

Regular Assessments

  • Conduct regular vulnerability assessments
  • Perform penetration testing annually
  • Monitor for new security vulnerabilities
  • Implement vulnerability remediation procedures
  • Track vulnerability remediation metrics

System Maintenance​

Update Management​

Security Updates

  • Implement regular security update procedures
  • Test updates in non-production environments
  • Maintain emergency update procedures
  • Document all applied updates
  • Monitor for security advisories

Configuration Management

  • Maintain secure baseline configurations
  • Regular configuration compliance checks
  • Change management for security configurations
  • Document all configuration changes
  • Regular configuration backup procedures

Training and Awareness​

Security Training​

User Training​

Security Awareness

  • Regular security awareness training for all users
  • Phishing simulation and training programs
  • Password security training
  • Multi-factor authentication training
  • Incident reporting training

Role-Specific Training

  • Administrator security training
  • Developer secure coding training
  • Compliance training for relevant staff
  • Privacy training for data handlers
  • Regular training updates and refreshers

Continuous Education​

Industry Updates

  • Stay informed about security threats and trends
  • Participate in security communities and forums
  • Attend security conferences and webinars
  • Subscribe to security advisories and bulletins
  • Regular security newsletter distribution

Support and Resources​

Getting Help​

NopeSight Security Support​

Support Channels

  • Email: security@nopesight.com
  • Emergency hotline for security incidents
  • Online support portal
  • Community forums and knowledge base
  • Professional services for security consulting

Documentation Resources

  • Comprehensive security documentation
  • Security best practices guides
  • Compliance implementation guides
  • Video tutorials and training materials
  • Regular security webinars and updates

Third-Party Resources​

Security Resources​

Industry Organizations

  • SANS Institute security training and resources
  • NIST Cybersecurity Framework guidance
  • ISO 27001 implementation guides
  • Industry-specific security guidance
  • Government security resources and advisories

Professional Development

  • Security certification programs
  • Industry security conferences
  • Local security meetups and groups
  • Security vendor training programs
  • Academic security programs and research

Security Excellence: Following these best practices will help ensure your NopeSight deployment maintains the highest security standards. Regular review and updates of these practices, combined with ongoing security training and awareness, will help protect your infrastructure data and maintain compliance with applicable regulations and standards.