Defense-in-depth · Chapter 6 247 issue.The company's data are at risk. Without management support, the program will quickly become diluted and fragmented. Without centralized management and support, this fragmented system will eventually fail. Look Beyond the Borders Now that we've defined what needs to be done in the corporate environment, it's time to expand on how to protect that environment. At this point, every desktop, server, and gateway should be protected.The logs are being reviewed and used to identify holes in the defenses. The contingency and continuity plans are being practiced, and addressing the threats as they become apparent. Even so, it maybe found that the network is still under constant, if low-level, attack. What more can be done? Cover Home/Remote Users While making sure the primary in-house defenses are up to par, any corporate protective scheme will be incomplete if users are allowed to remotely connect without being protected. For employees who work remotely, make sure to have a Home Use clause with your AV provider that includes these users in the licensing agreement.This may add cost to the contract, and some users may not like having corporate dictate what they will have on their home machines. However, remember that all potential malware entry points must be covered, and that home/remote users fall into this category.