Test your security systems 2. Educate users on policy, e.g. do NOT tell anyone your password, dont leave your PC on accessing sensitive data. Develop User Profiles Keep file of information and applications each user is allowed to access. Implement passwords Limit the times that users can access the network Limit locations that users can access the network Promplty delete users that have been fired or moved on 3. Monitor all physical entry and exit - e.g. have special codes for cleaning crew that need to enter server rooms so you know WHEN they are there.
Background check the cleaning people.
Turn off daemons on servers that serve internet applications e.g. web servers, dont need mail daemons running. Filters should be added to prevent this. 2nd level server that must be logged into after the primary server is logged into. Application specific - programming usually required. Translates Internet addresses into local addresses.