Running Head: LAN/WAN COMPLIANCE AND AUDITING
Week 7: Worksheet 4: LAN/WAN Compliance and Auditing
Aalsa Caspher
Course:
Instructor:
Strayer University
November 16, 2017
LAN/WAN COMPLIANCE AND AUDITING
Week 7
Worksheet 4: LAN/WAN Compliance and Auditing
Course Learning Outcome(s)
Analyze information security systems compliance requirements within the Workstation and LAN
Domains.
Design and implement ISS compliance within the LAN-to-WAN and WAN domains with an
appropriate framework.
As auditors, we presume that no data produced on a computer is 100% secure regardless of whether it’s
a standalone device or connected to a local area network (LAN) or a wide area network (WAN).
Organizations implement controls, which are developed and implemented based on regulations and best
security practices. Security is implemented throughout an organizations enterprise – from the host the
user sits and throughout the devices data traverses or is stored. Here’s an example of a basic enterprise
and the security controls that may be implemented. Remember, controls can be physical or logical
devices, software or encryption.
Host – A host is a computer, tablet or other device that a user interfaces with to perform a function. The
device you’re reading this on is a host. The security controls that could be implemented onto a host
include a Host Based Intrusion Detection Systems (HIDS), Host Based Intrusion Prevention System
(HIPS), a software Firewall, and Antivirus protection. Policy controls implemented on a host include Role
Based Access Control (RBAC), Discretionary Access Control (DAC), Mandatory Access Control (MAC),
Login requirements, lockout settings and others that restrict what a user can and can’t do while logged
into a host and software to manage (allow and deny) policies electronically (ePo).
Local Area Network – Think of a LAN as an internal network used by an organization that allows user to
execute functions using various applications and storage while also having the ability to connect to other
organizations using the Internet or Virtual Private Networks (VPN’s). A host connects to a switch and data
is routed to a router where it either access systems on the LAN or to a router where it’s going to exchange
data with another LAN or WAN. The devices that comprise a LAN and WAN are similar with a difference
in that a WAN is built to a much larger scale. As stated, in a network, there are many devices, servers,
switches, routers, storage, Call Managers (for VoIP communications), firewalls, web content filters,
security appliances that manage Network Intrusion Detection Systems (NIDS), Network Intrusion
Prevention Systems (NIPS) and other organization unique systems.
Often as a cost savings measure, services such as security, web content filtering, storage, IP telephony,
Software licensing (SaaS) and others can be outsourced to a third party vendor. An agreement is made
between the organization and the vendor on the expected requirements and documented in the contract.
These requirements are known as Service Level Agreements (SLA).At no point does an organization
relieve itself of regulatory requirements for data protection by contracting it out to a third party or
organization external to itself. Regulatory controls must be incorporated into the SLA’s and audited by the
company contracting services out to ensure compliance. Repercussions for not meeting SLA
requirements should also be included in the SLA.
Read the scenario below and complete the associated worksheet.
Tidewater LLC is an organization that produces and sells apparel for men, women and children online.
The company has grown 70% over the past 2 years and is building a new facility to support the continued
growth. All current services with the exception of managing their website are hosted by various third party
vendors. Because of the growth, the leadership within the organization has not been able to validate
compliance of the SLA’s and feel that the vendors do not have the best interest of Tidewater LLC in mind.
Currently, there is a CIO and web developer acting as the IT staff.
Tidewater LLC is in the process of recovering all IT services into the server facility being housed in their
new facility. Tidewater LLC wishes establish and staff an IT department with a system administrator,
network administrator, two general technicians, cyber security specialist and a full time system auditor.
The new office is a 2000sqft open office with the server room located in an adjacent room. Hardware
supporting the organizations IT services include 100 desktop computers supporting the staff, network
switches, routers, a firewall, Maciffy Security Appliance to provide intrusion detection, prevention and
antivirus protection, Network Attached Storage (NAS) for users to have a home drive as well as a shared
networked drive for collaboration and sharing, an IIS server for website management and a call manager
for VoIP. Wi-Fi access points will be added as the network installation progresses. Email will be managed
by an exchange server. The only service outsourced is a100mbps connection for Internet and VPN’s
between the organization and its suppliers.
Current employees are assigned desk with computer. There are no prerequisite requirements such as
training for users to have accounts created. All data is stored by a third party vendor in a shared
environment. No controls are implemented to prevent any user from accessing any other user’s files or
folders.
You’ve been retained as an organizations auditor and your first task is to determine what controls need to
be implemented so that the organization achieves a high level of sustained security and compliance.
Utilizing the NIST 800-53A, develop a control sheet that the organization should implement and will not
impede with the organization’s mission. This control sheet should encompass controls that apply to the
users and systems within the organization. You will brief these controls to the CEO and CIO and explain
why you choose these controls and any impact it will have to the organization.
From the Access Control (AC) family of the NIST 800-53A, select three controls you would recommend
be implemented.
Control Definition Why Chosen
From the Security Awareness and Training Policy and Procedures (AT) of the NIST 800-53A, select three
controls you would recommend be implemented.
Control Definition Why Chosen
LAN/WAN COMPLIANCE AND AUDITING
From the Audit and Control (AU) section of the NIST 800-53A, select three controls you would
recommend be implemented.
Control Definition Why Chosen
From the Configuration Management (CM) section of the NIST 800-53A, select four controls you would
recommend be implemented.
Control Definition Why Chosen
From the Security Assessment and Authorization (CA) section of the NIST 800-53A, select three controls
you would recommend be implemented.
Control Definition Why Chosen
From the Contingency Planning (CP) section of the NIST 800-53A, select two controls you would
recommend be implemented.
Control Definition Why Chosen
From the Identification and Authentication Policy and Procedures (IA) section of the NIST 800-53A, select
three controls you would recommend be implemented.
Control Definition Why Chosen
Points: 50 Worksheet 4: LAN/WAN Compliance and Auditing
Criteria Unacceptable
Below 60% F
Meets
Minimum
Expectations
60-69% D
Fair
70-79% C
Proficient
80-89% B
Exemplary
90-100% A
1. All controls,
definitions and
reasons for choice
of controls are
correctly stated and
defined for Access
Control.
Weight: 14%
Not submitted or
more than three
incorrect fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with
no more than
three incorrect
fields.
Completed
table contains
controls and
definitions, as
well as reasons
for each
control’s
selection, with
no more than
two incorrect
fields
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with no
more than one
incorrect field.
Completed
table contains
correct
controls and
definitions, as
well as correct
and thorough
reasons for
each control’s
selection with
no incorrect
fields.
2. All controls,
definitions and
reasons for choice
of controls are
correctly stated and
defined for Security
Awareness Training
Policy and
Procedures.
Weight: 14%
Not submitted or
more than three
incorrect fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with
no more than
three incorrect
fields.
Completed
table contains
controls and
definitions, as
well as reasons
for each
control’s
selection, with
no more than
two incorrect
fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with no
more than one
incorrect field.
Completed
table contains
correct
controls and
definitions, as
well as correct
and thorough
reasons for
each control’s
selection with
no incorrect
fields.
3. All controls,
definitions and
reasons for choice
of controls are
correctly stated and
defined for Audit
and Control.
Weight: 14%
Not submitted or
more than three
incorrect fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with
no more than
three incorrect
fields.
Completed
table contains
controls and
definitions, as
well as reasons
for each
control’s
selection, with
no more than
two incorrect
fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with no
more than one
incorrect field.
Completed
table contains
correct
controls and
definitions, as
well as correct
and thorough
reasons for
each control’s
selection with
no incorrect
LAN/WAN COMPLIANCE AND AUDITING
fields.
4. All controls,
definitions and
reasons for choice
of controls are
correctly stated and
defined for
Configuration
Management.
Weight: 20%
Not submitted or
more than four
incorrect fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with
no more than
four incorrect
fields.
Completed
table contains
controls and
definitions, as
well as reasons
for each
control’s
selection, with
no more than
three incorrect
fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with no
more than two
incorrect fields.
Completed
table contains
correct
controls and
definitions, as
well as correct
and thorough
reasons for
each control’s
selection with
no more than
one incorrect
field.
5. All controls,
definitions and
reasons for choice
of controls are
correctly stated and
defined for Security
Assessment and
Authorization.
Weight: 14%
Not submitted or
more than three
incorrect fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with
no more than
three incorrect
fields.
Completed
table contains
controls and
definitions, as
well as reasons
for each
control’s
selection, with
no more than
two incorrect
fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with no
more than one
incorrect field.
Completed
table contains
correct
controls and
definitions, as
well as correct
and thorough
reasons for
each control’s
selection with
no incorrect
fields.
6. All controls,
definitions and
reasons for choice
of controls are
correctly stated and
defined for
Contingency
Planning.
Weight: 10 %
Not submitted or
more than two
incorrect fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with
no more than
two incorrect
fields.
Completed
table contains
controls and
definitions, as
well as reasons
for each
control’s
selection, with
no more than
one incorrect
fields.
Completed table
contains controls
and definitions,
as well as
adequate
reasons for each
control’s
selection, with no
incorrect fields.
Completed
table contains
correct
controls and
definitions, as
well as
excellent
reasons for
each control’s
selection with
no incorrect
fields.
7. All controls,
definitions and
reasons for choice
of controls are
correctly stated and
defined for
Identification and
Authentication
Policy and
Procedures.
Weight: 14%
Not submitted or
more than three
incorrect fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with
no more than
three incorrect
fields.
Completed
table contains
controls and
definitions, as
well as reasons
for each
control’s
selection, with
no more than
two incorrect
fields.
Completed table
contains controls
and definitions,
as well as
reasons for each
control’s
selection, with no
more than one
incorrect field.
Completed
table contains
correct
controls and
definitions, as
well as correct
and thorough
reasons for
each control’s
selection with
no incorrect
fields.
From the Access Control (AC) family of the NIST 800-53A, select three controls you would
recommend be implemented.
Control Definition Why Chosen
AC-1 Access Control Policy And Procedures This will help to regulate who, when or
what can be access and be viewed in
the organization’s computing
environment.
AC-2 Account Management It will enable the organization to
employ automate mechanisms that
support management of IS accounts.
AC-3 Access Enforcement It will enable the organization to
regulate access and ensure that all the
logical access to its information
systems are in accordance with ever
applicable access control practice.
From the Security Awareness and Training Policy and Procedures (AT) of the NIST 800-53A,
select three controls you would recommend be implemented.
LAN/WAN COMPLIANCE AND AUDITING
Control Definition Why Chosen
AT-3 Role-Based Security Training It will enable the organization to equip
employees with adequate skills and
knowledge on their assigned security
roles and responsibilities.
AT-4 Security Training Records It improve the organization’s basic
training awareness training.
AT-1 Security Awareness and Training Policy
and Procedures
This will enable the organization’s
employees understand their roles and
responsibilities.
From the Audit and Control (AU) section of the NIST 800-53A, select three controls you would
recommend be implemented.
Control Definition Why Chosen
AU-1 Audit and Accountability Policy and
Procedures
This is important in helping the
organization to improve the audit and
accountability of its IT systems.
AU-3 Content Audit Records It will enable the organization to
determine its compliance status.
AU-4 Audit Storage Capacity This will help to determine if the
organization has allocated adequate
audit record storage capacity as
required by law.
From the Configuration Management (CM) section of the NIST 800-53A, select four controls
you would recommend be implemented.
Control Definition Why Chosen
CM-4 Security Impact Analysis This will enable the organization to
determine its analysis for changes to
the IS. In so doing, It will be able to
determine the potential security
impacts before the actual change
implementation.
CM-3 Configuration Change Control The organization will be able to
improve its configuration-controlled
changes
CM-2 Baseline Configuration This was chosen to help the
organization develop effective baseline
configuration of information.
CM-1 Configuration Management Policy and
Policy
This will ensure the configuration
management policy developed is
LAN/WAN COMPLIANCE AND AUDITING
comprehensive enough to cover all
critical security aspects.
From the Security Assessment and Authorization (CA) section of the NIST 800-53A, select three
controls you would recommend be implemented.
Control Definition Why Chosen
CA-2 Security Assessment This was chose to help the organization
determine the scope of its security
assessment.
CA-1 Security and Authorization and
Procedures
This was chosen to help specify and
define roles and responsibilities of
various personnel.
CA-3 System Interconnections It will help the organization to
authorize connections between its
information system and other
information systems. This is made
possible using Interconnection security
agreement.
From the Contingency Planning (CP) section of the NIST 800-53A, select two controls you
would recommend be implemented.
Control Definition Why Chosen
CP-2 Contingency Plan This will help in developing all
necessary contingency activities and
operations.
CP-3 Contingency Training The organization personnel need
adequate contigency training for them
to acquire adequate skills and
knowledge.
From the Identification and Authentication Policy and Procedures (IA) section of the NIST 800-
53A, select three controls you would recommend be implemented.
Control Definition Why Chosen
IA-2 Identification and Authentication The organization needs to authenticate
its organizational users hence the
choice for this control.
IA-3 Device Identification and authentication This will enable the organization to
define the various types of devices that
are identified and authenticated by its
IS before it establishes a location
connection and other types of
LAN/WAN COMPLIANCE AND AUDITING
connections (NIST, 2016)..
IA-4 Identifier Management It will enable the organization to
effectively define personnel and roles
from whom its authorization is based
on.
Reference
NIST Special Publication 800-53A, (2016). Assessing Security and Privacy Controls in Federal
Information Systems and Organizations Building Effective Assessment Plans. Retrieved from:
http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53Ar4.pdf
Week 8 Discussion
Remote access via Virtual Private Networks (VPN's) to corporate
resources for the purposes of e-commerce, telework and remote
administration!is becoming commonplace. From an auditing
perspective, suggest two or more controls that should be in place to
prevent the loss or theft of confidential information.
Give your opinion on what you believe are the essential elements of
an acceptable use policy for remote access. Elaborate on each item
and justify its importance.
Week 8 | Discussion
"Making it Work"
1. Discuss your experience with creating a presentation recording. How is the
preparation process going and what obstacles have you faced? What
questions do you have about the process that your peers may be able to help
solve?
2. Find a helpful tip about recording audio or video and share that here (with
proper credit – a link to the source will be fine).
LAN/WAN COMPLIANCE AND AUDITING
"Remote Access"
• Remote access via Virtual Private Networks (VPN's) to corporate resources for the
purposes of e-commerce, telework, and remote administration is becoming commonplace.
From an auditing perspective, suggest two or more controls that should be in place to
prevent the loss or theft of confidential information.
Each of the organization's owned and managed device must have both a professional
class and practical full-disk encryption solution employed so that in the event of a theft or
damage, the information stored in there cannot be retrieved by an unauthorized party.
Compliance with this policy should be carefully audited and a continuous basis through a two-
factor authentication system (Landoll & Landoll, 2016). Moreover, the each and every remote
access must require a two-factor authentication in order to ensure the protection of information
the event of theft or loss of any device. Portal system that utilizes a dissolvable instrument to
create and box environment with a capability of isolating all data transactions to a virtual
memory and disk allocation that completely obliterates when the connection terminates.
Implementing controls to prevent the loss or theft of confidential information
when using Virtual Private Networks (VPNs) for remote access to corporate
resources is crucial for security. Here are two controls that should be in
place:
1. Multi-Factor Authentication (MFA):
MFA adds an extra layer of security by requiring users to provide two
or more separate authentication factors before gaining access. This
could include something they know (e.g., a password), something they
have (e.g., a mobile device with an authentication app or a hardware
token), or something they are (e.g., biometric data like fingerprints).
By implementing MFA for VPN access, even if an attacker manages to
steal or guess a user's password, they would still be unable to access
corporate resources without the additional authentication factor. This
greatly reduces the risk of unauthorized access.
2. Endpoint Security and Compliance Checks:
Ensure that all devices connecting to the corporate network via VPN
undergo thorough security and compliance checks before gaining
access. This includes verifying that the device has up-to-date antivirus
software, firewall enabled, operating system patches are current, and
it meets the company's security policy.
Non-compliant devices should be denied access or placed in a
restricted network segment until they meet the necessary security
standards. This prevents potentially vulnerable or compromised
devices from accessing confidential information.
Additional controls to consider include:
3. Logging and Monitoring:
Implement robust logging and monitoring solutions to track VPN access
and user activities. This includes monitoring for any unusual or
suspicious behavior, multiple failed login attempts, or any access to
sensitive data.
Set up real-time alerts so that security teams can respond quickly to
any potential threats or security incidents.
4. Access Control and Role-Based Permissions:
Enforce strict access controls and role-based permissions. Only grant
users the level of access necessary for their job roles, limiting their
ability to access confidential data unless it's required for their tasks.
Regularly review and update access permissions as employees change
roles or leave the organization to ensure that no unauthorized
individuals have access.
5. Encryption:
Require the use of strong encryption protocols (e.g., TLS/SSL) for VPN
connections to ensure that data transmitted between remote devices
and corporate resources remains confidential and secure.
6. Remote Wipe and Data Loss Prevention (DLP):
Implement remote wipe capabilities for mobile devices and laptops
used for remote work. This allows the organization to remotely erase
data from lost or stolen devices to prevent data breaches.
Utilize Data Loss Prevention (DLP) tools to monitor and control the
movement of sensitive data within and outside the organization, even
when accessed via VPN.
By implementing these controls, organizations can significantly reduce the
risk of loss or theft of confidential information when using VPNs for remote
access to corporate resources.
LAN/WAN COMPLIANCE AND AUDITING
1. Multi-Factor Authentication (MFA):
Types of MFA: Implement a variety of MFA methods such as SMS
codes, mobile app-generated codes (e.g., Google Authenticator or
Authy), biometrics (fingerprint or facial recognition), or hardware
tokens. This diversity adds an extra layer of security.
Adaptive Authentication: Consider using adaptive authentication
systems that analyze user behavior and risk factors to dynamically
adjust the level of authentication required. For example, if a user logs
in from an unfamiliar location or device, MFA may be triggered
automatically.
2. Endpoint Security and Compliance Checks:
NAC (Network Access Control): Network Access Control solutions
can automatically assess the security posture of devices seeking
access via VPN and grant or deny access based on predefined security
policies.
Automated Patch Management: Implement automated patch
management systems to ensure that remote devices are up-to-date
with the latest security patches and updates. This reduces
vulnerabilities.
Remote Device Management: Employ Mobile Device Management
(MDM) or Endpoint Management solutions to remotely enforce security
policies, perform device wipes if necessary, and ensure devices comply
with security standards.
3. Logging and Monitoring:
SIEM (Security Information and Event Management): SIEM
systems collect and analyze log data from various sources, including
VPN servers, to detect security incidents in real-time. They can trigger
alerts and provide valuable insights into potential threats.
User and Entity Behavior Analytics (UEBA): UEBA tools analyze
user behavior patterns to detect anomalies. They can help identify
unusual login patterns or data access behaviors that may indicate a
security breach.
4. Access Control and Role-Based Permissions:
Regular Access Reviews: Periodically review and update user access
permissions to ensure they align with employees' current roles and
responsibilities. This reduces the risk of users having unnecessary
access to sensitive information.
Least Privilege Principle: Apply the principle of least privilege,
where users are granted the minimum level of access required to
perform their job tasks. This limits the potential impact of insider
threats.
5. Encryption:
Data-at-Rest Encryption: In addition to encrypting data in transit,
consider implementing data-at-rest encryption on devices and servers
to protect data even when it's not actively being transmitted.
6. Remote Wipe and Data Loss Prevention (DLP):
Remote Wipe Protocols: Define clear procedures for remote data
wiping in case a device is lost or stolen. Ensure that these protocols
are well-documented and tested to minimize data loss and security
risks.
DLP Policies: Configure DLP tools to monitor and block the
unauthorized transmission of sensitive data over VPN connections. This
includes preventing data leaks through email, file transfers, or other
communication channels.
Remember that a holistic approach to cybersecurity involves not only
technical controls but also user education and awareness. Train employees
on best practices for remote access security, the risks associated with VPN
usage, and how to identify potential threats or phishing attempts. Regularly
update and adapt your security measures to stay ahead of evolving threats
in the remote work landscape.
7. Network Segmentation:
Implement network segmentation to isolate sensitive data and
resources from the broader network. This limits the exposure of
confidential information in case of a breach, even if an attacker gains
access to the VPN.
8. User Training and Awareness:
Conduct regular security awareness training for employees to educate
them about the importance of secure VPN usage, recognizing phishing
attempts, and reporting suspicious activities promptly.
9. Incident Response Plan:
Develop a robust incident response plan that outlines the steps to be
taken in the event of a security incident involving VPN access. This
plan should include procedures for communication, containment,
investigation, and recovery.
10. Remote Access Policies:
Establish and enforce clear remote access policies that define
acceptable use, security requirements, and consequences for policy
violations. Ensure all employees are aware of these policies.
11. Audit and Compliance Monitoring:
Regularly audit VPN logs and configurations to ensure compliance with
security policies and industry regulations (e.g., GDPR, HIPAA, or PCI
DSS). Address any discrepancies or vulnerabilities promptly.
12. Secure VPN Infrastructure:
Keep VPN servers and software up-to-date with the latest security
patches and updates to address known vulnerabilities. Regularly
review and harden VPN configurations to minimize attack surfaces.
LAN/WAN COMPLIANCE AND AUDITING
13. Secure Transmission Protocols:
Utilize strong encryption protocols, such as TLS 1.2 or higher, and
avoid outdated or vulnerable encryption methods. Disable insecure
ciphers and protocols to enhance security.
14. Centralized Authentication and Authorization:
Implement centralized authentication and authorization services, such
as LDAP or Active Directory, to manage user access and permissions
consistently across the organization.
15. Regular Security Audits and Penetration Testing:
Conduct regular security audits and penetration tests on your VPN
infrastructure to identify vulnerabilities and weaknesses that may be
exploited by attackers. Address the findings promptly.
16. Vendor Risk Assessment:
If you're using a third-party VPN service or solution, conduct a
thorough vendor risk assessment to ensure they adhere to security
best practices and maintain the confidentiality of your data.
17. Data Encryption at the Application Level:
In addition to encrypting data at the network level, consider encrypting
data at the application level. This is especially important for web
applications and databases that store sensitive information.
18. Continuous Monitoring and Threat Intelligence:
Implement continuous monitoring tools and stay updated with threat
intelligence feeds to identify emerging threats and vulnerabilities that
may affect your VPN infrastructure.
19. Backup and Disaster Recovery:
Regularly back up critical data and have a robust disaster recovery
plan in place. This ensures data recovery in case of data loss or a
security incident.
20. Secure Remote Desktop Access:
If remote administration is a common use case, ensure secure remote
desktop access by using strong encryption, secure authentication
methods, and limiting access to authorized personnel only.
Remember that cybersecurity is an ongoing process, and it's essential to
adapt your controls and policies to the evolving threat landscape. Regularly
review and update your security measures to stay ahead of potential risks
and vulnerabilities related to VPN access and remote work.
• Give your opinion on what you believe are the essential elements of an acceptable use
policy for remote access. Elaborate on each item and justify its importance.
An acceptable use policy for remote access must have three major elements. Firstly, there
is a preamble which explains the need, goals, and process of developing the policy. Secondly,
there is the definitions section which gives a definition of the words and terms used in the policy
such as computer network and education purpose. This helps to ensure user comprehension.
Lastly, there is the acceptable use section which defines the user's use of the computer network.
An Acceptable Use Policy (AUP) for remote access is a critical document that sets the guidelines
and rules for employees and authorized users when accessing an organization's network and
resources remotely. The following are essential elements of an AUP for remote access, along
with explanations for their importance:
Scope and Purpose:
Importance: Clearly defining the scope and purpose of the AUP helps set expectations. It informs
users of the policy's intent and the reasons behind the rules, promoting compliance.
Authorized Users:
Importance: Specify who is authorized to use remote access. This prevents unauthorized
individuals from gaining access and helps maintain the security of the network.
Remote Access Technologies:
Importance: Detail the approved remote access technologies and tools, such as VPNs, remote
desktop applications, or secure authentication methods. This ensures users use secure and
approved methods.
Access Permissions:
LAN/WAN COMPLIANCE AND AUDITING
Importance: Describe the levels of access users are granted, adhering to the principle of least
privilege. Only authorized personnel should have access to sensitive data and systems.
Security Requirements:
Importance: Outline security requirements for remote access, including strong password policies,
multi-factor authentication (MFA), and encryption protocols. This helps protect data during
transmission and access.
Data Handling and Protection:
Importance: Define how data should be handled, stored, and protected during remote access.
This includes prohibiting downloading sensitive data to personal devices and ensuring data
remains confidential.
Security Updates and Patching:
Importance: Emphasize the importance of keeping remote devices and software up-to-date with
security patches. This reduces vulnerabilities that attackers may exploit.
User Responsibilities:
Importance: Clearly state the responsibilities of remote users, including adhering to security
policies, reporting security incidents, and using remote access for work-related purposes only.
Prohibited Activities:
Importance: List activities that are strictly prohibited, such as unauthorized access, hacking
attempts, sharing login credentials, or using remote access for personal activities. This helps
maintain a secure environment.
Monitoring and Logging:
Importance: Inform users that remote activities may be monitored and logged for security
purposes. This acts as a deterrent to inappropriate behavior and assists in incident investigation.
Consequences of Violations:
Importance: Clearly define the consequences of policy violations, which may include
disciplinary actions, account suspension, or legal consequences. This deters users from engaging
in risky behavior.
Reporting Security Incidents:
Importance: Encourage users to promptly report any security incidents or suspicious activities.
Early detection and response can mitigate potential threats.
Privacy Considerations:
Importance: Address privacy concerns by specifying how user privacy is protected, what data is
collected, and how it's used. This helps build trust among users.
Training and Awareness:
Importance: Promote continuous education and training on security best practices for remote
access. Well-informed users are less likely to make security errors.
Policy Review and Updates:
Importance: State that the AUP will be periodically reviewed and updated to adapt to changing
security threats and technologies. This ensures the policy remains relevant.
LAN/WAN COMPLIANCE AND AUDITING
Legal Compliance:
Importance: Ensure that the AUP complies with relevant laws and regulations, such as GDPR,
HIPAA, or industry-specific requirements. Non-compliance can lead to legal consequences.
Acknowledgment and Agreement:
Importance: Require users to acknowledge that they have read, understood, and agreed to abide
by the AUP. This provides evidence of user awareness and consent.
An effective AUP for remote access not only helps protect the organization's assets and data but
also creates a culture of security awareness among employees. It's crucial to communicate the
policy clearly, provide regular training
An Acceptable Use Policy (AUP) for remote access is a critical document that sets the guidelines and
rules for employees and authorized users when accessing an organization's network and resources
remotely. The following are essential elements of an AUP for remote access, along with explanations for
their importance:
Scope and Purpose:
Importance: Clearly defining the scope and purpose of the AUP helps set expectations. It informs users of
the policy's intent and the reasons behind the rules, promoting compliance.
Authorized Users:
Importance: Specify who is authorized to use remote access. This prevents unauthorized individuals from
gaining access and helps maintain the security of the network.
Remote Access Technologies:
Importance: Detail the approved remote access technologies and tools, such as VPNs, remote desktop
applications, or secure authentication methods. This ensures users use secure and approved methods.
Access Permissions:
Importance: Describe the levels of access users are granted, adhering to the principle of least privilege.
Only authorized personnel should have access to sensitive data and systems.
Security Requirements:
Importance: Outline security requirements for remote access, including strong password policies, multi-
factor authentication (MFA), and encryption protocols. This helps protect data during transmission and
access.
Data Handling and Protection:
Importance: Define how data should be handled, stored, and protected during remote access. This
includes prohibiting downloading sensitive data to personal devices and ensuring data remains
confidential.
Security Updates and Patching:
Importance: Emphasize the importance of keeping remote devices and software up-to-date with security
patches. This reduces vulnerabilities that attackers may exploit.
User Responsibilities:
Importance: Clearly state the responsibilities of remote users, including adhering to security policies,
reporting security incidents, and using remote access for work-related purposes only.
Prohibited Activities:
LAN/WAN COMPLIANCE AND AUDITING
Importance: List activities that are strictly prohibited, such as unauthorized access, hacking attempts,
sharing login credentials, or using remote access for personal activities. This helps maintain a secure
environment.
Monitoring and Logging:
Importance: Inform users that remote activities may be monitored and logged for security purposes. This
acts as a deterrent to inappropriate behavior and assists in incident investigation.
Consequences of Violations:
Importance: Clearly define the consequences of policy violations, which may include disciplinary actions,
account suspension, or legal consequences. This deters users from engaging in risky behavior.
Reporting Security Incidents:
Importance: Encourage users to promptly report any security incidents or suspicious activities. Early
detection and response can mitigate potential threats.
Privacy Considerations:
Importance: Address privacy concerns by specifying how user privacy is protected, what data is collected,
and how it's used. This helps build trust among users.
Training and Awareness:
Importance: Promote continuous education and training on security best practices for remote access.
Well-informed users are less likely to make security errors.
Policy Review and Updates:
Importance: State that the AUP will be periodically reviewed and updated to adapt to changing security
threats and technologies. This ensures the policy remains relevant.
Legal Compliance:
Importance: Ensure that the AUP complies with relevant laws and regulations, such as GDPR, HIPAA, or
industry-specific requirements. Non-compliance can lead to legal consequences.
Acknowledgment and Agreement:
Importance: Require users to acknowledge that they have read, understood, and agreed to abide by the
AUP. This provides evidence of user awareness and consent.
An effective AUP for remote access not only helps protect the organization's assets and data but also
creates a culture of security awareness among employees. It's crucial to communicate the policy clearly,
provide regular training and
Remote Device Management:
Importance: Specify whether remote devices used for work purposes should be managed through Mobile
Device Management (MDM) or Endpoint Management solutions. This allows the organization to enforce
security policies on remote devices, such as remote wipes and security configurations.
Incident Response Procedures:
Importance: Outline the procedures users should follow in the event of a security incident while using
remote access. This helps ensure that incidents are reported promptly and handled effectively.
Data Backup and Recovery:
Importance: Emphasize the importance of regular data backup, especially for remote workers who may be
working on their own devices. Highlight the procedures for data recovery in case of data loss.
Remote Work Environment Security:
LAN/WAN COMPLIANCE AND AUDITING
Importance: Encourage users to maintain a secure remote work environment, which includes securing
home Wi-Fi networks, using updated antivirus software, and implementing physical security measures to
protect work devices.
Third-Party Services and Tools:
Importance: Address the use of third-party services or tools for remote work, such as file-sharing services
or collaboration tools. Specify whether and how these should be used securely and in compliance with the
AUP.
Temporary Access Rules:
Importance: If applicable, define rules for temporary or guest access to the organization's network and
resources. Ensure that temporary users adhere to security requirements.
User Training Records:
Importance: Maintain records of user training and awareness activities related to remote access security.
This helps demonstrate compliance with security training requirements.
Escalation Points:
Importance: Provide contact information and escalation points for users who have questions or need
assistance with remote access issues or security concerns.
Remote Access Risk Assessment:
Importance: Periodically assess the risks associated with remote access and update the AUP accordingly.
This demonstrates a commitment to adapting security measures to evolving threats.
Access Revocation Process:
Importance: Define the process for revoking remote access privileges when employees leave the
organization or when access is no longer required. This helps prevent unauthorized access.
Communication of Policy Changes:
Importance: Specify how users will be informed of policy changes and updates. This ensures that users
are aware of any modifications to the AUP that may affect their remote access.
Testing and Validation:
Importance: Periodically test the effectiveness of the AUP through security assessments, penetration
testing, or simulated phishing attacks to identify potential weaknesses and improve security measures.
Employee Offboarding:
Importance: Detail the procedures for securely offboarding employees who no longer require remote
access, including the retrieval of company-owned devices and the revocation of access.
Remote Access Logs Retention:
Importance: Specify the retention period for remote access logs. This ensures that log data is retained for
a sufficient duration to support incident investigations and compliance requirements.
Crisis Management:
Importance: Address how remote access may be impacted during crisis situations, such as natural
disasters or cybersecurity incidents, and how remote work continuity will be ensured.
An AUP for remote access should be a dynamic document that evolves with the organization's needs and
the changing threat landscape. Regularly review, update, and communicate the policy to maintain a secure
and compliant remote access environment.
Week 8 | Discussion
LAN/WAN COMPLIANCE AND AUDITING
"Making it Work"
1. Discuss your experience with creating a presentation recording. How is the preparation
process going and what obstacles have you faced? What questions do you have about the
process that your peers may be able to help solve?
Creating a presentation recording is both an interesting and challenging experience. The
first major challenge is deciding what to include and what to leave out in the presentation
recording. This is so because there is usually a lot of items and information that needs to be
included. The second challenge is designing the recording such that it meets all the needs or
characteristics of the audience. Every audience consists of individuals with different needs,
expectations, and interests. Meeting all these dynamics was a major challenge.
Creating a presentation recording can involve several steps, and the experience can vary
depending on the purpose and tools you're using. Here are some common aspects to consider:
Preparation Process:
Content Planning: Start by outlining the content and structure of your presentation. Decide on the
main points you want to cover and create a clear and logical flow.
Script or Outline: Write a script or create an outline that guides your presentation. Having a well-
structured script helps you stay on track during the recording.
Visuals: Prepare any visuals or slides you plan to include in your presentation. Ensure they are
clear and relevant to the content.
Practice: Practice your presentation multiple times to become familiar with the material and
delivery. This helps reduce errors and increases confidence.
Recording Process:
Recording Tools: Choose the recording tools that best suit your needs. This could be screen
recording software, webcam recording, or a combination of both.
Environment: Select a quiet and well-lit location for recording. Minimize background noise and
distractions.
Equipment: Ensure you have the necessary equipment, such as a good-quality microphone and
camera, if applicable. This improves the audio and video quality of your recording.
Recording Software: Familiarize yourself with the recording software you're using. Test it to
make sure it captures your screen, audio, and any other elements correctly.
Recording Session: Record your presentation while following your script or outline. Speak
clearly and at a comfortable pace. Pause or redo parts if necessary.
Obstacles and Questions:
Obstacles and questions that may arise during the presentation recording process can include:
Technical issues with recording software or equipment.
Difficulty in maintaining a natural and engaging delivery.
Challenges in creating visually appealing slides or visuals.
Uncertainty about how to edit and enhance the recording afterward.
Questions about where and how to host or share the recorded presentation.
Engagement and Delivery:
LAN/WAN COMPLIANCE AND AUDITING
Speak Clearly and Enthusiastically: A clear and enthusiastic delivery can make your presentation
more engaging. Avoid speaking too quickly, and use pauses effectively to emphasize key points.
Use Visual Aids Effectively: If you're using slides or visuals, ensure they enhance your
presentation rather than distracting from it. Use visuals sparingly and make sure they are easy to
read and understand.
Maintain Eye Contact: If you're recording yourself on camera, maintain eye contact with the
virtual audience by looking directly at the camera lens. This creates a more personal connection.
Editing and Post-Production:
Editing Tools: Familiarize yourself with video editing software to refine your recording. You can
cut out mistakes, add transitions, insert graphics, and improve audio quality during post-
production.
Video Length: Keep your video's length in mind. Shorter, more focused presentations are often
more effective than lengthy ones. Consider breaking up longer content into shorter segments if
necessary.
Accessibility: Ensure your presentation is accessible to a diverse audience. Add captions or
transcripts for the hearing impaired, and ensure that visuals are clear and readable.
Feedback and Improvement:
Peer Review: Share your recording with peers or mentors for feedback. They can provide
valuable insights and suggestions for improvement.
Self-Critique: Watch your recording critically and assess your performance. Take notes on areas
where you can improve, such as pacing, tone, or content clarity.
Distribution and Sharing:
Platform Selection: Decide where you will host and share your presentation recording. Common
platforms include YouTube, Vimeo, or internal company channels.
Privacy Settings: Consider the privacy settings of the platform you choose. Determine if the
recording should be public, private, or accessible only to specific individuals or groups.
Promotion: If your presentation is meant for a wider audience, consider promoting it through
social media, email newsletters, or other marketing channels.
Interactivity: Depending on the platform, you may be able to add interactive elements like
quizzes, surveys, or links to additional resources to engage your viewers.
Remember that creating effective presentation recordings often requires practice and refinement.
Don't be discouraged by initial challenges or imperfections. Each recording provides an
opportunity to learn and improve your skills, ultimately leading to more polished and engaging
presentations.
Engagement Techniques:
Storytelling: Incorporate storytelling elements into your presentation to make it more relatable
and memorable. Share anecdotes, case studies, or real-life examples that illustrate your points.
Audience Interaction: Encourage viewer engagement by asking questions, prompting
discussions, or including interactive elements like polls or quizzes within the recording.
LAN/WAN COMPLIANCE AND AUDITING
Visual Variety: Use a mix of visuals, such as charts, graphs, images, and video clips, to keep
your audience visually engaged. Visual variety helps break up the monotony of slides or talking
heads.
Accessibility and Inclusivity:
Closed Captions: If possible, provide closed captions or subtitles in multiple languages to make
your content accessible to a broader audience, including those who may have hearing
impairments or speak different languages.
Transcripts: Alongside your video, offer a written transcript of the presentation. Transcripts are
valuable for viewers who prefer reading or need to search for specific information.
Technical Considerations:
Backup Recordings: Always have a backup plan. Recordings can fail due to technical glitches, so
having a secondary recording source or backup equipment can save your content.
Bandwidth and Streaming Quality: If you're live-streaming your presentation, ensure you have a
stable internet connection with sufficient bandwidth to avoid interruptions and buffering issues.
Engaging Visuals:
Visual Design: Pay attention to the design of your slides or visuals. Use a consistent color
scheme, legible fonts, and a clean layout. Avoid clutter and use visuals to complement your
message, not overwhelm it.
Animations and Transitions: Use animations and slide transitions sparingly and purposefully.
Overuse can distract from your content, but strategic use can add emphasis or clarify points.
Practice and Confidence:
Practice Runs: Conduct practice runs of your presentation recording to work out any kinks,
refine your delivery, and familiarize yourself with the recording setup and tools.
Confidence-Building Techniques: If you're nervous on camera, practice relaxation techniques or
use visualization to boost your confidence. Being confident in your delivery makes for a more
engaging presentation.
Engage with Your Audience:
Respond to Comments and Questions: If you're sharing your recording on a platform with
comments or discussion threads, actively engage with viewers by responding to comments and
questions promptly.
Feedback and Analytics: Use feedback and viewer analytics to gauge the effectiveness of your
presentation. Analyze viewer engagement data to identify areas for improvement.
Remember that creating effective presentation recordings is an ongoing learning process.
Continuously seek feedback, adapt to changing audience needs, and refine your skills over time.
With dedication and practice, you can create engaging and impactful presentation recordings.
Engagement Strategies:
Engage Emotionally: Appeal to emotions in your presentation to create a more profound impact.
Share stories, anecdotes, or examples that connect with the audience on a personal level.
Use Visual Metaphors: Incorporate visual metaphors or analogies to help explain complex
concepts. Visual aids that resonate with viewers can make your message more memorable.
LAN/WAN COMPLIANCE AND AUDITING
Technical Excellence:
Quality Audio: Invest in a high-quality microphone to ensure clear and crisp audio. Good audio
quality is essential for viewers to understand and engage with your content.
Professional Lighting: Pay attention to lighting when recording video. Proper lighting can
significantly improve the quality of your video and make you look more professional.
Content Organization:
Clear Outlines: Ensure your presentation has a clear introduction, main content, and conclusion.
Use signposts to guide viewers through your presentation and help them understand its structure.
Effective Transitions: Use smooth transitions between sections or slides to maintain a cohesive
flow. Transitions help prevent viewer disorientation.
Engagement Metrics:
Analyze Viewer Behavior: Utilize analytics tools provided by hosting platforms to track viewer
behavior. Analyze metrics like audience retention, click-through rates, and engagement levels to
understand what parts of your presentation are most engaging and where improvements are
needed.
Interactive Elements:
Annotations and Highlights: Depending on the platform or tools you're using, consider using
annotations, highlights, or on-screen drawing to emphasize key points during your presentation.
Live Q&A Sessions: If possible, host live Q&A sessions or follow-up discussions after viewers
have watched your recording. This allows for direct engagement and clarification of any
questions or concerns.
Promotion and Distribution:
Social Media Sharing: Promote your presentation recording on relevant social media platforms,
using appropriate hashtags and keywords to reach a broader audience.
Email Campaigns: Send targeted email campaigns to your audience, sharing the recording and
highlighting its value.
Continual Improvement:
Feedback Loops: Establish a feedback loop with your audience to gather insights into their
preferences and needs. Use this feedback to refine your future presentation recordings.
A/B Testing: Experiment with different presentation styles, content formats, or delivery
techniques, and use A/B testing to assess which approaches are most effective with your
audience.
Stay Current: Keep up with trends in presentation recording and technology. New tools and
techniques may emerge that can help you improve your recordings.
Remember that creating effective presentation recordings is a skill that improves with practice
and feedback. Don't be discouraged by initial challenges, and be open to evolving your approach
based on what resonates most with your audience. The key is to continuously learn and adapt to
create compelling and engaging presentations.
LAN/WAN COMPLIANCE AND AUDITING
2. Find a helpful tip about recording audio or video and share that here (with
proper credit – a link to the source will be fine).
One of the important tips for recording a quality audio or video is being original. It is
monotonous to present the same things that have been presented by others. Therefore, the audio
or video must have a great deal of originality (Bernazzani, 2014).
Tip: "Use a Pop Filter to Reduce Plosives"
Source: Video School Online
A pop filter is a screen or shield placed in front of a microphone to reduce plosive sounds like
"p" and "b" that can cause unwanted popping sounds in your audio recordings. These pops can
be distracting and reduce the overall quality of your recording. By using a pop filter, you can
significantly improve the clarity and professionalism of your audio.
To use a pop filter effectively, position it between your mouth and the microphone, at a distance
of about 2-4 inches. This helps to diffuse the airflow and prevents the bursts of air associated
with plosive sounds from reaching the microphone diaphragm.
By using a pop filter, you can achieve smoother and more professional-sounding audio in your
video recordings.
What is a Pop Filter?
A pop filter, also known as a pop shield or windscreen, is a simple device commonly used in
audio recording to minimize plosive sounds. It consists of a thin, usually circular, screen made of
materials like fabric, nylon, or metal, stretched over a frame. This screen is placed between the
speaker's mouth and the microphone.
How Does a Pop Filter Work?
Plosive sounds, such as "p" and "b" sounds, are produced when a burst of air hits the microphone
diaphragm directly. This sudden rush of air can cause a noticeable popping or booming sound in
the recording. A pop filter works by diffusing and dispersing this burst of air before it reaches the
microphone, effectively preventing the plosive sounds from causing unwanted noise.
Positioning the Pop Filter:
To use a pop filter effectively, follow these steps:
Mounting: Secure the pop filter on a microphone stand or holder in front of the microphone. The
pop filter should be positioned between the microphone and the speaker's mouth.
Distance: Ideally, the pop filter should be placed about 2-4 inches away from the microphone.
This distance helps ensure that the plosive sounds are adequately diffused.
Angle: Angle the pop filter slightly downward so that it covers the path of your breath when
speaking into the microphone.
Benefits of Using a Pop Filter:
Improved Audio Quality: Pop filters effectively reduce or eliminate plosive sounds, resulting in
cleaner and more professional-sounding audio recordings.
Reduced Editing: Using a pop filter can reduce the need for post-production editing to remove
plosive pops, saving you time and effort.
Consistency: Pop filters help maintain consistent audio quality, especially when recording
voiceovers, podcasts, or vocals for music.
LAN/WAN COMPLIANCE AND AUDITING
Additional Tips:
Make sure the pop filter is securely attached and doesn't obstruct your view or make it
uncomfortable to speak into the microphone.
Maintain proper microphone technique by speaking slightly off-axis (at an angle) to the
microphone. This can further minimize plosive sounds.
Experiment with the positioning and distance of the pop filter to find the setup that works best
for your specific microphone and recording environment.
Overall, a pop filter is a relatively inexpensive and highly effective tool for improving the audio
quality of your recordings by minimizing plosive sounds. It's an essential accessory for anyone
involved in voice recording or podcasting.
Pop Filter Types:
Nylon Mesh Pop Filters: These are the most common type of pop filters. They consist of a
double-layered nylon mesh stretched over a circular frame. The multiple layers help diffuse
airflow and are effective at reducing plosive sounds.
Metal Mesh Pop Filters: These pop filters are made of metal mesh instead of nylon. They are
durable and can provide effective protection against plosive sounds.
Foam Pop Filters: Foam pop filters are less common but can be used in situations where space is
limited or when a more compact solution is needed. They may not be as effective as mesh pop
filters in reducing plosives.
Proper Mic Placement:
Position the microphone slightly above and angled downward towards the speaker's mouth. This
helps direct plosive airflow away from the microphone.
Distance Matters:
Maintain a consistent distance between your mouth, the pop filter, and the microphone. This
helps ensure that plosive sounds are adequately diffused without compromising audio quality.
Plosive Prevention:
Be mindful of your pronunciation when speaking. Practice enunciating "p" and "b" sounds
without producing bursts of air, which can help reduce plosives naturally.
Pop Filter Maintenance:
Pop filters can accumulate dust and debris over time, which can affect their effectiveness.
Regularly clean your pop filter by gently wiping it with a damp cloth or using a gentle brush to
remove particles.
Recording Environment:
Ensure that your recording environment is acoustically treated to minimize reflections and
background noise. This reduces the need to increase the microphone's sensitivity, which can
make plosives more pronounced.
Using Pop Filters for Multiple Microphones:
LAN/WAN COMPLIANCE AND AUDITING
If you are recording multiple sources with individual microphones, consider using a separate pop
filter for each microphone to prevent cross-contamination of plosive sounds.
Experimentation:
Don't hesitate to experiment with the placement and angle of the pop filter to find the setup that
works best for your specific microphone and vocal style.
Using a pop filter is a relatively simple yet highly effective way to improve the audio quality of
your recordings by reducing plosive sounds. It's an essential tool for voice recording, podcasting,
singing, and any situation where clear and professional audio is desired.
Positioning for Singing and Vocal Performance:
When recording vocals or singing, adjust the position of the pop filter based on the singer's mic
technique. Ensure that the pop filter is in front of the microphone and positioned to catch
plosives effectively without interfering with the singer's performance.
Recording Instruments:
Pop filters are not limited to vocal recording. They can also be used when recording instruments
like acoustic guitars or wind instruments, where air bursts and plosive sounds may occur.
Experiment with pop filter placement to reduce unwanted noise.
DIY Pop Filters:
If you're on a budget or in a pinch, you can create a DIY pop filter using materials like pantyhose
or a wire coat hanger and a hoop. While not as effective as commercial pop filters, they can
provide some level of plosive reduction.
Acoustic Treatment:
Consider implementing additional acoustic treatment in your recording space, such as bass traps
and diffusers, to further minimize plosives and create a more acoustically controlled
environment.
Windshields vs. Pop Filters:
While pop filters are effective at reducing plosives, they may not be as effective at blocking wind
noise from outdoor recordings. In windy conditions, consider using a foam windshield or a
combination of both a windshield and a pop filter.
Recording Multiple Performers:
When recording multiple performers sharing a single microphone, use a larger pop filter or
consider individual pop filters for each performer if space allows.
Regular Inspection:
Periodically inspect your pop filter for wear and tear, especially if it's exposed to a lot of
moisture or direct airflow. Damaged pop filters may be less effective in reducing plosive sounds.
Hygiene and Maintenance:
LAN/WAN COMPLIANCE AND AUDITING
In shared recording environments, consider using disposable pop filter covers or changing out
the filter material regularly to maintain hygiene, especially for microphones used by multiple
people.
Software Solutions:
In post-production, you can use audio editing software to further reduce plosives by applying
filters or equalization. However, it's best to prevent plosives at the source (during recording) for
the cleanest sound.
Remember that while pop filters are highly effective at reducing plosive sounds, proper
microphone technique, a well-controlled recording environment, and good vocal or instrumental
skills also play significant roles in achieving high-quality audio recordings.
Dual Pop Filters:
For situations where plosives are particularly problematic, consider using two pop filters in
tandem. Position one pop filter a few inches in front of the microphone and the second one a few
inches in front of your mouth. This double layer of protection can provide extra assurance
against plosive sounds.
Angle Adjustment:
Experiment with the angle of the pop filter to find the most effective position for reducing
plosives. Tilting it slightly to the side or at a downward angle can sometimes be more effective
depending on your speaking or singing technique.
Customizing Filter Material:
Some pop filters allow you to customize the filter material. Depending on your preferences and
the nature of your recordings, you can choose different filter materials (e.g., denser foam or
fabric) to optimize plosive reduction.
Distance and Microphone Types:
Different microphones have varying sensitivity to plosive sounds. Dynamic microphones are less
sensitive than condenser microphones and may require a slightly different approach when using
pop filters. Experiment with distance and filter placement to suit your specific microphone type.
Plosive Removal Plugins:
In post-production, you can use specialized audio plugins to remove or reduce plosive sounds
from your recordings. These plugins analyze the audio and automatically attenuate plosives.
However, they should be used sparingly to avoid affecting the overall sound quality.
Advanced Windshields:
If you're recording in outdoor or windy environments, consider using advanced windshields
designed to block wind noise effectively. These often feature multiple layers of material and can
be paired with a pop filter for comprehensive protection.
Recording Techniques:
Explore various recording techniques, such as the proximity effect, which involves adjusting
your microphone distance and angle to minimize plosives. This technique can be particularly
useful when recording vocals.
Plosive Exercises:
LAN/WAN COMPLIANCE AND AUDITING
For voice actors, singers, or podcasters, consider working with a vocal coach to learn techniques
that reduce plosive sounds naturally. These exercises can help you articulate sounds more
precisely, minimizing the need for heavy reliance on pop filters.
Combining Technologies:
Combine pop filters with noise gates or expanders in your audio processing chain. These tools
can further reduce the audibility of plosive sounds during post-production.
Wind Reduction Strategies:
If recording outdoors, consider using physical barriers like windshields or wind baffles to block
or redirect wind. These can work in tandem with pop filters to maintain audio clarity.
Advanced pop filter techniques and technologies are valuable tools in achieving professional-
quality audio recordings, particularly in challenging recording environments or for performers
with unique vocal characteristics. Experimentation and adaptation to specific recording situations
will help you get the best results.
1. Microphone Placement and Angle:
Experiment with the distance and angle between your mouth and the microphone. Adjusting the
microphone's position can sometimes be as effective as the pop filter itself in reducing plosive
sounds.
2. Choose the Right Filter Material:
Pop filters come in various materials, such as foam, fabric, or metal. Different materials offer
varying degrees of plosive reduction. Consider trying different pop filters to find the one that
works best for your voice and microphone.
3. Vocal Warm-Up and Technique:
Warm up your voice and practice speaking or singing techniques that minimize plosive sounds.
Professional vocal training can help you develop techniques for clear and plosive-free vocal
delivery.
4. Use a High-Pass Filter:
During post-production, apply a high-pass filter to your audio recording. A high-pass filter can
attenuate low-frequency sounds, including some plosive artifacts. Adjust the filter's cutoff
frequency to target plosives while preserving the rest of the audio.
5. Layering Techniques:
In some situations, you can layer multiple pop filters with different characteristics to achieve
better plosive reduction. For example, you might use a foam pop filter in combination with a
metal mesh pop filter for enhanced protection.
6. Use a Reflexion Filter:
Consider using a portable acoustic shield or reflexion filter, commonly known as a "reflection
filter," to minimize room reflections and background noise. This can help reduce the impact of
plosive sounds on your recordings.
7. Address Room Acoustics:
LAN/WAN COMPLIANCE AND AUDITING
Invest in acoustic treatment for your recording space to control reflections and minimize
unwanted room noise. Well-treated rooms can reduce the need for aggressive pop filter usage.
8. Distance Miking:
For particularly plosive-prone vocalists, try using a technique called "distance miking." Position
the microphone slightly farther away and at a slight angle to reduce the direct impact of plosive
bursts.
9. Practice Breath Control:
Work on breath control techniques, which can help you modulate your airflow and reduce the
intensity of plosives. Breathing exercises and vocal coaching can be beneficial.
10. Custom Pop Filters:
vbnetCopy code
- Some audio professionals create custom pop filters by modifying commercial filters or crafting
their own. These custom solutions can be tailored to specific recording challenges.
11. Monitor Your Audio:
cssCopy code
- Use quality studio headphones to monitor your recordings in real-time. This allows you to
detect and adjust for plosives during the recording process.
Remember that the effectiveness of these techniques can vary depending on your unique
recording setup and vocal characteristics. It's often a combination of strategies that yields the
best results. Experiment with different approaches to find what works best for your specific
audio recording needs.
12. Vocal Angle and Mic Tilt:
Experiment with the angle of the microphone. Tilting the microphone slightly upward or
downward can change how plosive bursts of air interact with the microphone's diaphragm. This
can be particularly effective for reducing plosives.
13. Low-Cut Filters on Microphones:
Some microphones have built-in low-cut or high-pass filters. These filters are designed to
attenuate low-frequency sounds, including plosives. Activate the low-cut filter on your
microphone if available.
14. De-Esser Plugins:
While primarily used to reduce sibilance (sharp "s" and "sh" sounds), de-esser plugins can also
help reduce plosive bursts. They work by dynamically attenuating specific frequencies, including
those associated with plosives.
15. Use a Windsock or Windjammer:
In outdoor recording situations, use a windsock or windjammer on top of your pop filter. These
accessories can further reduce wind noise and plosive sounds, providing additional protection.
16. Mic Preamp Settings:
LAN/WAN COMPLIANCE AND AUDITING
Adjust the mic preamp's input gain carefully. Overdriving the preamp can make plosive sounds
more pronounced. Aim for a balanced input level that captures your audio clearly without
clipping.
17. Controlled Breathing:
Practice controlled breathing techniques to minimize bursts of air when speaking or singing.
Deep diaphragmatic breathing can help maintain a consistent airflow and reduce the likelihood
of plosives.
18. Multi-Microphone Setup:
For recording multiple vocalists or instruments simultaneously, use individual microphones and
pop filters for each source. This minimizes the risk of plosive interference between microphones.
19. Edit Plosives in Post-Production:
In addition to using pop filters during recording, you can also manually edit plosive sounds in
post-production using audio editing software. Techniques such as spectral editing can be used to
remove or reduce plosive artifacts.
20. Record Multiple Takes:
Record multiple takes of your audio, allowing you to choose the cleanest and least affected
recording during the editing process. This approach can be especially useful when dealing with
challenging plosives.
21. Continuous Monitoring:
Continuously monitor your audio during recording. If you notice plosives occurring, make slight
adjustments to your technique, microphone angle, or pop filter position to address the issue
immediately.
22. Vocal Coaching:
Consider working with a vocal coach or speech therapist to refine your vocal technique and
minimize plosive sounds naturally.
Remember that while these techniques can help reduce plosive sounds, some level of post-
production audio editing may still be necessary, especially when dealing with challenging
recordings. A combination of prevention during recording and precise editing during post-
production can yield the best results for clear and professional audio recordings.
LAN/WAN COMPLIANCE AND AUDITING
References
Bernazzani, S. (2014). 14 Video Production Tips to Enhance Quality and Drive Views.
Reyrieved from: https://blog.hubspot.com/blog/tabid/6307/bid/29075/12-tips-to-instantly-
enhance-video-production-quality.aspx
Landoll, D. J., & Landoll, D. (2016). The security risk assessment handbook: A complete guide
for performing security risk assessments. CRC Press.
