Internet Server Security Plan

• Risk analysis

• Legal, cost of the asset, time to recover
• What are the most likely threats
• Consider outsourcing

• Recovery plan (backups, fail-over, VMs)

• Patch management (software updates)

• (strong or no) Password, access management

• Detection & monitoring plan