Using Information Technology to Secure your Business

Why Is Computer Security Important? Establishes sound business practices Complies with International, and Industry regulations Protects corporate assets (especially information) Prevents processing interruptions

How Many People Experienced Security Incidents?

Goals of Security Program ,[object Object]

Data must be protected against unauthorized disclosure

Systems must not permit processes or data to bechanged without authorization

System hardware must be functional and changes must be authorized,[object Object]

Designed for communication, not security

Easy access to informationThreats and Attacks

Threats and Attacks Internet connection and usage increases the level of security threats on small businesses Dedicated IT personnel Organizations must understand and acknowledge threats

Consequences Interference with the intended use of IT resources Loss/theft of equipment used to store private/sensitive information Unauthorized changes made to computers or software

Consequences Loss of data Denial of Service attack Compromised user accounts Time and inconvenience Loss of image and reputation Unauthorized use of systems or data

Why Security Caterpillar, Inc. Hackers rummaged undetected through Caterpillar, Inc.’s network for two weeks - Outdated administrator's account that was never deleted - Poor password protection easily deciphered passwords no passwords at all The hacker or group of hackers accessed servers and workstations at various company sites

Benefits of effective IT security Protects an organization's valuable resources, such as information, hardware, and software Protects reputation, legal position, employees Protects computers from hackers. Protection against fraud. Protects computers from viruses, worms, spyware and other unwanted programs. Prevent against data from theft.

Ways to use IT to secure your business

Business Firewall Protects your business and your information Stands between your business network and the programs that are out there on the internet. Provides a means for allowed programs to travel through to a network through URL filtering

Anti Virus and Anti Spyware Anti-virus software is used to prevent, detect, and remove computer viruses, worms, and Trojan horses. Ensure that other types of suspicious files and network activity should also be monitored e.g. malicious code Antispyware software protects computers against pop-ups, slow performance, and security threats

Encryption Software Install encryption software to encode your online communications. Encryption is not just for the big guys. You can protect the privacy of your e-mail messages and file attachments by encrypting them. Encrypting your messages protects your information so that only those with the proper authority can decipher it. Ensures that the messages come from you and that the information has not been tampered with

Web Content Filtering Many companies block certain websites to prevent employees from unknowingly downloading malicious content Block access to sites by category such as entertainment, adult material, dating sites, chat rooms and social media If specific websites need to be available to your employees, they can be added to a “whitelist”

Email Monitoring and Spam Protection Everybody who has used email has most likely been subjected to Spam. Unwanted emails are not only bad for productivity, they can do damage to your systems and networks too. A spam filter can help to reduce unwanted emails, but don’t forget to deploy anti-virus and anti-worm software on your mail server.

Data Backup What would happen to your business if suddenly all your data is destroyed? There is a great need to have all of your essential data backed up and stored in a safe place on a regular basis. This can be accomplished one of two ways: Remote Backup – This method copies and stores your files on a secure remote server automatically and periodically. Local Backup – This can be performed using software and backs your data up to a local storage device.

Virtual Private Network (VPN) To reduce the risk associated with remote connections, many organizations set up a virtual private network. Allows employees secure access to the company network via the Internet. It is important to evaluate how much and what information the organization is willing to share over a VPN

Virtualization Virtualization combines or divides computing resources to present one or many operating environments End users can execute, develop, and test applications without having to fear causing a crash to systems Enables a user to run multiple virtual machines (VM) on a single physical machine, with each VM sharing the resources of that one physical computer The VM concept has been in existence since the 1960s when it was first developed by IBM.

Cloud Computing An emerging Internet based business model for IT services Cloud Computing represents the latest advancement in client-server technology Web Based Application Services: Platform as a Service (Paas) Software as a Service (SaaS) Infrastructure as a Service (IaaS)

Audit Logging Means by which changes to the database (inserts, updates and deletes) are recorded in a separate 'audit' database Why event data should be logged on a given system? Accountability – Identify what accounts are associated with events Reconstruction – Log data can be reviewed chronologically to determine what was happening before and during an event Intrusion Detection – Unusual or unauthorized events can be detected through the review of log data Problem Detection – It can be used to identify problems that need to be addressed (e.g. investigating failed jobs, resource utilization)

Data Loss Prevention (DLP) DLP - Systems that identify, monitor, and protect data in use , data in motion and data at rest through content inspection within a centralized management framework

Using Information Technology to Secure your Business

Recommandé

Recommandé

Contenu connexe

Dernier

Dernier (20)

En vedette

En vedette (20)

Using Information Technology to Secure your Business