No Love for NAC (Network Access Control)?
The main message of CIO Insight’s article is that NAC could require expensive network upgrades and is not ready for prime time. The market will ultimately decide if NAC makes an impact or falls back to earth failing to escape gravity.
Before deploying a NAC solution, ask yourself some questions to determine if you’ve even picked the low hanging security fruit:
1. Does your organization classify its information so the appropriate protection can be applied? (Policy)
2. Do you have a firewall and is it properly configured? (Perimeter Security)
3. Do you have an Intrusion Detection System (IDS) and is it properly configured? (Alarm System for Threats)
4. Do you have up-to-date virus scanning on all of your machines? (Local Threat Detection)
5. Do you practice Separation of Duties in your Information Technology (IT) Security Practices as an internal control? (Audit Control Procedures)
6. Do you actively budget for Information Security protection? (IT Budget Item)
Finally, what security problem are you trying to solve with NAC?
Because NAC has been with us two short years, test your NAC solution against that question.
