How to protect 1C:Enterprise: access, backups and updates
Accounting, payroll, warehouse — for many companies everything lives in 1C. Here is how to keep that database safe and available.
Read articleMost successful attacks use vulnerabilities that already have a fix. The problem is not the lack of patches but the lack of a process: updates are postponed, forgotten or installed only on some machines. A clear routine solves this.
A simple monthly cycle
- Inventory. Keep a list of all servers, computers, network devices and important applications with their versions.
- Prioritize. Internet-facing systems (VPN, firewalls, mail, websites) and vulnerabilities known to be exploited come first — within days, not weeks.
- Test. Install updates on a test group or a copy of critical systems before rolling them out.
- Deploy in agreed maintenance windows, so users know when reboots happen.
- Verify that the update really installed, and record the result.
Do not forget
- Firmware of firewalls, routers, switches, NAS and printers.
- Third-party software: browsers, PDF readers, Java, accounting programs.
- Systems that are out of support — they need a replacement plan, because no more fixes will come.
Patching is not a project, it is a habit. Small and regular beats big and rare.
Need help with this? Contact CySec for a free consultation.