Privileged Access Management (PAM) is a system that manages access to high-privilege accounts, such as administrators, to reduce the risk of misuse. I have implemented PAM by conducting trials and testing (POC) to ensure effective access control. This process includes testing PAM solutions to ensure that only authorized users have access to sensitive systems and data.

Web Application Firewall (WAF) is a security system designed to protect web applications from malicious attacks such as SQL injection, cross-site scripting (XSS), and others by monitoring, filtering, and blocking suspicious HTTP traffic. I have implemented WAF by conducting trials and proof of concept (POC) testing to ensure the effectiveness of this protection. This process includes evaluating WAF solutions to ensure web applications remain secure from threats and accept only valid traffic.

File Integrity Monitoring (FIM) is a technology used to monitor changes to critical system files in order to detect potential threats or unauthorized modifications to those files. I have implemented FIM by conducting trials and testing (POC) to ensure the solution works effectively. This process includes evaluating and testing FIM to ensure that the integrity of important files is maintained and to detect any suspicious or unauthorized changes.

Security Awareness Enhancement Program is the practice of educating employees about potential cybersecurity risks and the best practices to avoid them, ensuring that they are prepared to recognize and respond appropriately to security threats. I have developed and implemented a security awareness program for all employees in the company. Through this program, I aimed to enhance their understanding of cybersecurity issues, reduce the likelihood of security incidents, and make them more familiar with security practices. This initiative includes training sessions, workshops, and awareness campaigns to ensure that employees are well-informed and equipped to handle security challenges.

Hardening IT Assets is the process of strengthening the security of devices and systems to protect against cyber threats by reducing existing vulnerabilities and ensuring comprehensive protection. I have performed hardening on various IT assets, including PCs, by implementing security solutions such as Kaspersky, NAC (Network Access Control), and EDR (Endpoint Detection and Response). This process aims to enhance security, ensure secure access, and maintain the integrity and operational continuity of the company’s systems.