IT & DATA SECURITY IT and data security can be a minefield. Every company faces both external and internal threats: your priority should be to minimise the risk of data theft and cyber attack that could undermine or even destroy your business. Your data is your prime asset and warrants the most intensive protection.


A surprisingly high percentage of companies have had their corporate systems commandeered for illegitimate purposes, at huge cost to their day to day operations. Even honest human error on the part of employees can result in serious data loss, quite apart from such well reported sources as computer viruses, corrupt files and hackers. It almost goes without saying that it is absolutely essential not only to install firewalls and spyware but to keep them constantly updated to counter newly emerging threats.


Equally important is establishing an IT security policy and insisting that it is followed diligently on a 24/7 basis.


The British Standards Institute (BSI) is an excellent source of information and advice on best practice in IT security management.


The basics of your policy should include assessing which employees should have access to which data and introducing a policy on Internet use by employees that can be properly policed. Bearing in mind how easily data can be copied or removed by means of USB sticks and memory cards, consider placing restrictions on their use. Use encryption whenever possible, but be aware that the Regulation of Investigatory Powers Act (2000) has implications for businesses and individuals who encrypt data. Endeavour to adopt a disciplined approach to backing up files and archiving data.


Always ensure complete compliance with legal data protection requirements regarding storage of personal and company data, and make sure that any data or security-sensitive information in hard copy form is securely destroyed before disposal. See the section on shredding for further information.


Finally, remember that technology changes very quickly. Keep aware of new security threats and make sure your staff are kept fully trained and appropriately equipped to face each new potential cyber hazard as it emerges.


Visit The British Standards Institute (BSI) web site at www.bsigroup.co.uk for information and advice on best practice in IT security management.


10


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24