You’ve been hired as a Cyber Security Architect at Ooredoo Telecom. Your role is to design a comprehensive multi-layered security architecture that ensures resiliency across endpoints, applications, networks, and people.
- EDR (Endpoint Detection & Response)
- Mobile Device Management (MDM)
- OS Patch Management
- BIOS Security & USB Control
- Web Application Firewall (WAF)
- OWASP Secure Coding Guidelines
- SAST/DAST Scanners
- OAuth 2.0 + MFA + RBAC
- Host-based Firewalls
- CIS Server Hardening Benchmarks
- Least Privilege Policy
- System Monitoring
- IDS/IPS Systems
- Firewalls & Segmentation
- HTTPS / VPN / SSH
- DDoS Mitigation
- CCTV + Biometric Access
- Mantrap Entry Systems
- Fire Suppression & Power Backup
- Information Security Policies
- Security Awareness Training
- Incident Response Plan (IRP)
- Phishing Simulations
- Periodic Vulnerability Assessments
- Penetration Testing
- SIEM for Real-Time Monitoring
- Compliance: ISO 27001 & NIST CSF
- Zero Trust Security Architecture
Defense-in-Depth ensures no single point of failure. Even if one security control is breached, others stand guard. A must-have approach in today’s advanced threat landscape.