A newly hired security specialist is asked to evaluate a company’s network security. The security
specialist discovers that users have installed personal software; the network OS has default
settings and no patches have been installed and passwords are not required to be changed
regularly. Which of the following would be the FIRST step to take?
A.
Disable non-essential services.
B.
Enforce the security policy.
C.
Password management
D.
Install software patches.