WEBVTT

1
00:00.000 --> 00:00.860 align:middle line:84%


2
00:00.860 --> 00:01.920 align:middle line:84%
And welcome back.

3
00:01.920 --> 00:03.587 align:middle line:90%
In this video, I'd
like to chat with you

4
00:03.587 --> 00:06.020 align:middle line:90%
about something super important
regarding secure network

5
00:06.020 --> 00:06.890 align:middle line:84%
management.

6
00:06.890 --> 00:11.250 align:middle line:90%
And that is some accountability,
some support, some oversight.

7
00:11.250 --> 00:16.010 align:middle line:90%
And that all comes to play if we
follow good change management.

8
00:16.010 --> 00:19.100 align:middle line:90%
And I haven't always been
a fan of change management.

9
00:19.100 --> 00:23.060 align:middle line:90%
In my early days in the-- like
the 1985-'86 when I first got

10
00:23.060 --> 00:24.380 align:middle line:84%
into the world of IT--

11
00:24.380 --> 00:26.990 align:middle line:90%
I saw change management
as, ah, there's

12
00:26.990 --> 00:28.700 align:middle line:84%
extras steps to go through.

13
00:28.700 --> 00:31.310 align:middle line:90%
But you know what, it only
took me like six months
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

13
00:28.700 --> 00:31.310 align:middle line:90%
But you know what, it only
took me like six months

14
00:31.310 --> 00:34.010 align:middle line:90%
to realize the value
of change management

15
00:34.010 --> 00:36.620 align:middle line:90%
and having a formal
procedure before we go in

16
00:36.620 --> 00:39.350 align:middle line:90%
and start making changes
to our environment.

17
00:39.350 --> 00:41.450 align:middle line:90%
And I'd like to list a
few of those benefits that

18
00:41.450 --> 00:44.270 align:middle line:90%
are going to help us keep secure
and also keep our networks up.

19
00:44.270 --> 00:45.350 align:middle line:90%
The first thing I'd
like to chat about

20
00:45.350 --> 00:47.570 align:middle line:90%
as far as the major benefit
of change management

21
00:47.570 --> 00:51.320 align:middle line:90%
and change control is
a second set of eyes.

22
00:51.320 --> 00:52.820 align:middle line:90%
And it may not just
be a second set,

23
00:52.820 --> 00:54.605 align:middle line:84%
it may be a roomful of people.

24
00:54.605 --> 00:56.480 align:middle line:90%
And that's a good thing
because the process--

25
00:56.480 --> 00:58.010 align:middle line:84%
the change management process--

26
00:58.010 --> 01:01.430 align:middle line:90%
may require us to
have documentation.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

26
00:58.010 --> 01:01.430 align:middle line:90%
may require us to
have documentation.

27
01:01.430 --> 01:03.763 align:middle line:90%
Documentation,
specifically, of what's

28
01:03.763 --> 01:05.180 align:middle line:90%
the window going
to be where we're

29
01:05.180 --> 01:06.890 align:middle line:84%
going to implement this change?

30
01:06.890 --> 01:08.840 align:middle line:84%
What is the change itself?

31
01:08.840 --> 01:10.580 align:middle line:84%
Has it been tested?

32
01:10.580 --> 01:12.080 align:middle line:84%
Who tested it?

33
01:12.080 --> 01:14.210 align:middle line:84%
What's your rollback process?

34
01:14.210 --> 01:15.560 align:middle line:84%
Has it been tested?

35
01:15.560 --> 01:17.400 align:middle line:90%
Because when I think
about network change,

36
01:17.400 --> 01:20.240 align:middle line:90%
I also think about, I think
the doctor's creed is like,

37
01:20.240 --> 01:22.453 align:middle line:90%
do no harm, or the
physician's creed.

38
01:22.453 --> 01:23.870 align:middle line:90%
We don't want to
leave the network

39
01:23.870 --> 01:25.165 align:middle line:84%
worse off than we found it.

40
01:25.165 --> 01:26.540 align:middle line:90%
So in the change
management, we'd

41
01:26.540 --> 01:29.300 align:middle line:90%
want to identify what
we want to change, also,

42
01:29.300 --> 01:31.310 align:middle line:90%
the window we're going
to do it in, and have
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

42
01:29.300 --> 01:31.310 align:middle line:90%
the window we're going
to do it in, and have

43
01:31.310 --> 01:34.880 align:middle line:90%
a tested and verified rollback
process that we can do and have

44
01:34.880 --> 01:38.240 align:middle line:90%
it back the way it was before
we started within the change

45
01:38.240 --> 01:38.990 align:middle line:84%
window.

46
01:38.990 --> 01:42.350 align:middle line:90%
And regarding testing,
if we have some new iOS

47
01:42.350 --> 01:46.250 align:middle line:90%
image or a new patch that's
correcting a vulnerability

48
01:46.250 --> 01:48.320 align:middle line:90%
or adding some
additional functionality,

49
01:48.320 --> 01:50.540 align:middle line:90%
we definitely want to make
sure we tested that out

50
01:50.540 --> 01:53.547 align:middle line:90%
in our test environment
and then get some backup.

51
01:53.547 --> 01:56.130 align:middle line:90%
So it's not just us saying, oh,
yeah, it worked, it was great.

52
01:56.130 --> 01:58.547 align:middle line:90%
We want to have whatever that
change management process is

53
01:58.547 --> 02:01.480 align:middle line:90%
of verifying a change before
it's implemented to make sure
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

53
01:58.547 --> 02:01.480 align:middle line:90%
of verifying a change before
it's implemented to make sure

54
02:01.480 --> 02:03.680 align:middle line:90%
that it's not going to
cause harm or a security

55
02:03.680 --> 02:07.400 align:middle line:90%
vulnerability on the network
by implementing this new thing

56
02:07.400 --> 02:08.637 align:middle line:84%
or this new configuration.

57
02:08.637 --> 02:10.804 align:middle line:90%
And a few elements that are
important as they tie in

58
02:10.804 --> 02:13.500 align:middle line:90%
to change management
is inventory.

59
02:13.500 --> 02:16.040 align:middle line:90%
So if we have an inventory
system, including mobile device

60
02:16.040 --> 02:19.070 align:middle line:90%
management, where we know
exactly what's on our network

61
02:19.070 --> 02:21.980 align:middle line:90%
and who's connecting, we know
the versions of software,

62
02:21.980 --> 02:24.230 align:middle line:90%
then when we do have something
that we need to change,

63
02:24.230 --> 02:27.418 align:middle line:90%
if it's an end device or
a part of our network--

64
02:27.418 --> 02:29.210 align:middle line:90%
including where we need
to update something

65
02:29.210 --> 02:31.250 align:middle line:90%
from a security
vulnerability perspective--
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

65
02:29.210 --> 02:31.250 align:middle line:90%
from a security
vulnerability perspective--

66
02:31.250 --> 02:34.220 align:middle line:90%
we know exactly which
devices in our infrastructure

67
02:34.220 --> 02:35.280 align:middle line:84%
need that update.

68
02:35.280 --> 02:39.500 align:middle line:90%
So that concept applies to end
stations, switches, routers,

69
02:39.500 --> 02:41.610 align:middle line:90%
firewall appliances,
and so forth.

70
02:41.610 --> 02:44.570 align:middle line:90%
So my coaching would be if your
organization, large or small,

71
02:44.570 --> 02:47.190 align:middle line:90%
doesn't have a change
management process,

72
02:47.190 --> 02:50.173 align:middle line:90%
I would say gently encourage
that to start happening.

73
02:50.173 --> 02:52.340 align:middle line:90%
So in a big organization,
it's very likely in place.

74
02:52.340 --> 02:54.220 align:middle line:90%
In a small company,
maybe it's just you.

75
02:54.220 --> 02:55.280 align:middle line:84%
You're the IT person.

76
02:55.280 --> 02:56.420 align:middle line:84%
You wear all the hats.

77
02:56.420 --> 02:58.850 align:middle line:90%
Perhaps start a change
management process

78
02:58.850 --> 03:00.200 align:middle line:84%
with the checkboxes.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

78
02:58.850 --> 03:00.200 align:middle line:84%
with the checkboxes.

79
03:00.200 --> 03:02.450 align:middle line:90%
And that way, you're going
to help keep yourself out

80
03:02.450 --> 03:04.850 align:middle line:90%
of trouble when it comes
to implementing changes

81
03:04.850 --> 03:05.880 align:middle line:84%
on the network.

82
03:05.880 --> 03:07.970 align:middle line:90%
So thanks for joining
me in this set of videos

83
03:07.970 --> 03:09.890 align:middle line:90%
about some good
practices and security

84
03:09.890 --> 03:11.997 align:middle line:90%
processes regarding
network management.

85
03:11.997 --> 03:13.830 align:middle line:90%
And I look forward to
seeing you, my friend,

86
03:13.830 --> 03:15.020 align:middle line:84%
in the next set of videos.

87
03:15.020 --> 03:17.690 align:middle line:90%
Until then, I hope this has
been informative for you.

88
03:17.690 --> 03:21.040 align:middle line:90%
And I'd like to thank
you for viewing.