State of Play
The previous post outlined some tools and resources we provide to help you secure your instance. This is the last post in the current series, wrapping things up and providing a handy summary document (attached) for you to download and keep.
Throughout the series we've covered a lot of the basics you need to think about when securing your instance:
- The Shared Security Model
- Password Security
- Strengthening Authentication
- Access Controls
- User Account Hygiene
- Security Monitoring
- Software Updates
- Additional Tools & Resources
If you've been following the series this far and worked on the topics we’ve covered – well done! You should now have a good security foundation for your instance. If you haven’t had a chance to do it all yet, don’t worry, it is an ongoing process. But be sure to make a plan for the rest.
Power Up
All of the tips in the series are important in their own right - but even more so when combined - so please make sure you address as many areas as you can. We’ve summarized this information (plus a bit more!) in the attached Security Top Tips document, which you can use as a checklist and guide.
We've also created the ServiceNow Security Best Practice Guide, which goes well beyond the basics and is a must-read for all customers.
We appreciate that not every organization has the skills or can devote the time or resources for this… but we can help! We now offer a service for security review and optimization – Tune Up Your Security. This can be requested on the ServiceNow store, and helps you to analyze your security posture, understand potential vulnerabilities and get prescriptive guidance on security configuration changes.
You can learn more about the service in the recorded webinar TuneUp Your Security: Protect against vulnerabilities and threats. This gives an overview of the service together with:
- Security responsibilities
- How to use the Instance Security Center to understand your security posture
- Available Best Practices
Secure it like a Boss
Keeping your data safe is a responsibility we share jointly with you. We take our part very seriously, always striving to be your must trusted cloud partner. We will always do our utmost to keep our platform secure, and to provide you with the resources you need to implement your security policies. You can do your part by making sure the basics are covered, as outlined in this series. But the job doesn't end there....
Maintaining security is a continuous cycle of assessing where you are, adjusting configuration, and testing the impact. It's worth the effort, not only to prevent problems, but because security can be an enabler for your organization. With the knowledge that your data is protected, you can confidently explore new opportunities...
...and move on to the next level!
