Security Checklist
Adequate security is one of the most important considerations for any
computer system. Information security is moving so rapidly and the media
is constantly covering breaking news stories about sites being hacked,
credit information stolen or virus infections causing damage that costs
companies millions of dollars.
As businesses gain more access to the Internet as well as other business
partners, the number of security intrusions is bound to increase and as
hardware and software becomes more complex, the possibility of security
breaches is unfortunately a reality that we all need to face.
In order to prevent unauthorized access, especially to critical systems
and sensitive information, begin by making “security” a top
priority and allocate the responsibility of maintaining and monitoring
your system to a reliable and knowledgeable person or IT company.
Security is so intense, it really requires specialists, but here are
some tips that can be implemented that will help you to secure your system.
Twelve Tips For Better Security
Update Software
A simple way to avoid serious problems is to regularly update your software.
Hackers like to find and exploit bugs and loopholes in popular software
products. Some do it for money, some to make a statement, some simply
to cause trouble, so if there's a patch available, install it and spoil
their fun. When you update software it "patches" the loophole
or bug that the hackers exploit.
Strengthen passwords
Most companies use passwords to confirm identity and protect sensitive
information, however in most cases these passwords are not used effectively.
Many are weak and rarely get changed; often they are written down and
posted next to the computer or on a calendar. It’s best to educate
your employees on the importance of their password and how to create a
secure one. Also, set a schedule to change passwords regularly.
Get Virus Protection
Viruses, Worms and Trojan Horses are malicious programs that run on your
computer, they can delete or change files, consume computer resources
and even allow outsiders to access your files. Virus-infected computers
can spread throughout your company and cause serious downtime and data
loss, virtually crippling a business.
It’s vital to make sure every company PC, server and laptop is fully
protected by doing the following:
Set-up a Firewall
Every business should consider a firewall, as it will block intruders
from getting in. Without a firewall and an “always-on broadband
connection”, your company's computer is vulnerable. Once hackers
discover a valid computer address, they take advantage of vulnerabilities
in software or try to crack passwords. Eventually they can gain unlimited
access to networks and individual machines. A “Hardware Firewall”
will block all disallowed traffic between the Internet and your network
and in most cases also hides the addresses of the computers behind your
firewall, making them virtually invisible to others outside.
Install Antivirus Software
It looks for viral signatures by scanning incoming Emails as well as files
already on your computer. If it finds a virus, it deletes or quarantines
it. All antivirus software must be updated regularly, as hundreds of viruses
are released each month. Look for software that automatically downloads
the latest definitions and program updates from the Internet.
Never Open Suspicious Files
Everyone needs to understand how important it is to delete (not open)
any files attached to an email from an unknown, suspicious or untrustworthy
source.
Use Email Security Features
Familiarize yourself with your Internet settings and adjust your security
so it will help block potentially infected Email.
Tighten Basic Security
Unfortunately your employees can cause serious damage as well as outside
intruders. Malicious or deliberate attacks can be discouraged with added
security to your physical environment. Create and enforce policies that
protect your business information and assets. Often a casual break-in
can be more damaging to a business than an unknown intruder who attacks
via the Internet.
Backup Critical Data
Scheduling regular back ups is a vital part of security. It will allow
your business to get up and running as quickly as possible. Computer downtime
will eventually cost you money and good backups will minimize your risk
and keep you operational.
Create an Internet Policy
Creating a company-wide Internet usage policy is a wise security practice.
While browsing web pages can be extremely useful, many contain programs
that are questionable, or even malicious. These types of sites can profile
your usage, install Spyware on your computer and even send destructive
worms that can enter your system through your Web browser.
Safeguard Wireless Network
Wireless networks are more vulnerable than cabled counterparts. They use
a radio link instead of cables to connect computers, so anyone within
radio range can in essence listen in or transmit data on a wireless network.
Freely available tools allow intruders to "sniff" for insecure
networks. To protect your wireless network, make sure all the configurable
encryption and access control security features are active.
Create a Security Team
Creating a designated team responsible for security will ensure that your
system remains as secure as possible. You should clearly identify who’s
responsible for security; identify the sensitive information and systems
critical to functioning; consider all relevant security laws and regulations
as well as the ethical standards of the company. Don’t forget to
ensure that the recourses are available to establish and enforce the policy.
Connect Remote Users Securely
For some companies remote network access is a business necessity, but
if it’s not set up properly it can also be a security risk. Make
sure your remote access carefully considers your security needs. You may
want to incorporate a VPN (virtual private network). It’s one of
the most secure ways for remote connections, as data is encrypted as it
travels and users are authenticated in order to connect.
By incorporating these 12 tips into your security practices you will
help your business to prevent unauthorized access as well as protect your
system and data.
Forvan Technology Services Inc specializes in security and would be pleased
to help. We offer a free consultation that will quickly identify your
needs and explain how you can create a safe and secure system. For more
information please review our services or contact
us today!
|