American Secure

CURRENT STATE:- CAL uses Cisco Meraki firewalls and access points to manage the IT networks for 21assisted living communities and corporate office The Meraki devices provide strong network security, allow one-to- easily manage network- infrastructure, deploy multiple secure and separate WIFI networks, and provide remote access to client machines. CAL IT is extremely happy with Meraki-products but the devices are designed to protesfe-against external network threats and give scant attention to- asset management The Meraki devices do not ensure hardware compliance- because they do- not automatically discriminate between authorized and unauthorized devices Our hardware controls consist mostly of a very complex password- to- access the company- WIFI- (separate and firewalled the "Guest’ network) and limiting ethernet jacks to employee only areas. Furthermore, apart from checking each system individually, there is no way of ensuring that all devices are properly patched and that any software on a particular device is in compliance with company policy This creates a situation where we have to rely on the end users to assure that all machines are properly updated and that no unauthorized software has been downloaded Finally, the Meraki firewall provides very secure and easy a deploy VPN program but provides no way of tracking virtual assets H

\

PROPOSED STATE: The CIS Critical Security Controls for Effective Cyber Defense is a list of controls that everyone should be following,% The initial controls deal with Foundational Cyber Hygiene,'' or the basic things that need to be done to build an effective cyber security base. Per these recommendations, CAL needs to deploy a, dedicated client management