1.4 - Enable logging for important system level events and for services and proxies, and set up a log archiving facility. Systems without effective logging are blind and make it difficult to learn what happened during an attack, or even whether an attack actually was successful. That allows them to test weaknesses until they find ways to take control of those systems. 1.7 - Install a firewall and enhance the firewall rule sets to block most sources of malicious traffic. Running a network system without a firewalls is equivalent to leaving the doors of your house unlocked in a dangerous neighborhood.
Routers can provide an extra layer of protection.
1.9 - Scan the network to create and maintain a complete map of systems to which you are connected. The LevelOne vulnerabilities have been developed in conjunction with the Common Vulnerabilities and Exposures project, a partnership of Government, industry and academia. 1.14 - Select an incident response team and establish the procedures to be used to respond to various types of attacks. For many smaller organizations and for any organization whose business does not depend on the internet-based commerce or on the public trust, the actions of LevelOne may be sufficient if coupled with an ongoing monitoring system to ensure that new problems are uncovered and solved quickly. For most large organizations, however, and those for whom public trust means survival, higher levels of security action are required.