USA India
Home Articles UserTV Press Releases Dictionary Books Education Careers B-Channels Resources Forums Blogs Classifieds
Friday 18 Jul, 2008 eNewsletter Register Login
Articles
Today in Articles
Recent Articles
Popular Articles
Community Recommended
Most viewed Articles
View all Articles
Article Archives
Articles by Classification
Features
Opinions
How-to-Advice
News & Reviews
Local Profiles & News
E-business
CU Gamer
Articles Categories
Communications
Electronics
Hardware
Networking / Security
Operating Systems
Software
Programming
Opensource
Database
Internet
Wireless
Mobile Computing
Graphics
Multimedia
Gadgets
Others
Apple Mac
Autodesk
Cisco
Citrix
Google
IBM
Microsoft
Oracle
PHP
SUN
VoIP
Business Skills
Marketing
Linux
Printers
Games
Go Green
Cyber Security
Employment
Education
 
  Submit an Article Articles Home
Articles >> Networking / Security
Common Sense Steps for Data Security in office.
Posted by : Zarir | Tue, Dec 11 2007 | 08:12:20
Tags : security software, data theft, data security,network security
Rating :
Comments (0) Views (1738) Email Article Blogs Forums
Print Article Bookmarks
Add to More..
 

We have recently launched USB CopyNotify (www.usbcopynotify.com) , a network security software for the Small Business Segment and this in turn has got me in touch with several business owners and IT administrators who are very concerned about theft of confidential data from their networks.

There has been a lot of exchange of ideas, strategies, recommendations of software to be used but in all this I am suprised that we in general tend to forgot to implement some basic common sense procedures in office which in itself would minimize confidential data from the network being taken out of office.

I am no top notch , certified security consultant but I do know that following these simple steps would help in minising the leak of confidential data from your office

1. Educate, Educate, Educate

Your staff / employees should be educated about confidentiality of data and its importance. They should be told that this data belongs to the office or its clients and should not be used un appropriately. They should be made to understand that data is associated with a value and it is property of the company or its clients. They should be taught the professional ethics behind it too. They should also be reminded of the Non Disclosure Agreements they have signed with the your company in which it clearly indicates that unauthorized copying of data could lead to serious consequences.

You will be suprised that if you drill this into the staff regularly, a correct attitude about corporate data and its usage get automatically inculcated in a majority of the employees and often education could become one of the most effective means of securing your data.

2. Backup and delete data that is not currently required.

This happens in every office, a task/assignment/project is completed, the data is backed up but several times a copy of this data still remains on the computers. After archiving it, delete this data. The less data you have, the less you have to worry about people stealing it.

3. Avoid personal belongings being brought into the work area.

This might sound a little draconian but employees should not be allowed to bring in their hand bags, haversacks, pouches into the work area. They should leave it outside. This will at least minimize the risk of them bringing & using external devices such as CDS, DVDs and USB devices such as External Hard Drives/Flash Drives/iPODS/Digital Cameras to copy data that they are not supposed to.

Of course today, USB Flash Drives unfortunately are so small they can be put in the pocket or as a key chain and no-one would know. Other than strip searching the employee (which is not always possible as a routine policy) you wont be able to detect these devices brought into office.

In fact this was one of the reasons I use USB CopyNotify! (www.usbcopynotify.com) myself in office. It alerts me of USB Device usage on the network.

4. Use Login Names and Passwords

Very often , we tend to ignore the importance of the User Name and Password that is asked for during start up of the Operating System. Either it is not set or all computers have the same user name / password or everybody knows everyone else's password (it is public domain).

Take this security feature seriously and educate your employees to use it in the appropriate manner. Only you and the user of that machine should know the login name and password. This will at least reduce the risk of other people sitting on the machine and accessing the data inappropriately.

5. Internet Access

Ok, this is a tricky one as Internet access in several offices in available on all machines in the office for the purpose of email, research, uploads & downloads etc. Perhaps web based email should be restricted and only email access only via the office intranet should be allowed ie there is only a single point of entry/exit for email from/to the outside world. This would at least allow you to monitor what data & the amount of data being uploaded out of office via email.

Another simple way of finding out whether the web is used for Internet Research or for uploading data is by monitoring the amount of data transfer is taking place on the machine. I get this report every morning. When I see an increase of data transfer or an unnecessary amount of data transfer on a computer, it gives me a automatic indication that the Internet access is not only being used for browsing but only for upload/download of large files. This itself gives me an idea that the Internet is being used to transfer data out of the office.

So as you can see all the above steps are simple, cost effective and very easy to implement and would help in the increase of data security of your network.

Article Written by:

Mr. Zarir M. Karbhari. Managing Director, CygNET Systems Pvt. Ltd. India. (www.cyspl.com)CygNET has been offering remote programming services for over 11 years and has now also launced its own security software called USB CopyNotify! (www.usbcopynotify.com)

 
 
 
 
Comments (0) Views (1738) Email Article Blogs Forums
Print Article Bookmarks
Add to More..
 Please comment on this article. Our writers would like to hear your opinion.
Sorry!! There are no records to display
Comments
Your Name * E-mail Address * Your Website
 
Your Comments *
Enter code shown below
 
View all | Recent | Popular | Community Recommended | Most Viewed | Today in Article
Features | Opinions | How-to | News & Reviews | Local Profiles & News |
 
 
Advertisements
Sponsored Links
Copyright © 2001-2008 ComputerUser, Inc., All Rights Reserved
About us | Terms of use | Privacy Policy | Legal | Trademark/Copyright | Awards | Advertise | Writer guidelines | Sitemap | Contact | FAQ's | Feedback  | Link to us

Here are the topics we cover computer certification computer careers computer training computer games consulting data recovery data security digital entertainment emerging technology gadget reviews handheld computers hardware reviews home automation home networks home office how-to advice internet linux local companies local news local profiles macintosh mp3 players network security online music online security open-source small-business technology soho software reviews technology books technology dictionary vpn web site reviews wi-fi windows wireless technology tech articles tech news press releases tech dictionary education resources career solutions create your personal blog upload your videos become a writer usergroups special interest group SIG 3com cipts adobe adobe certified expert apc ncpi apple achds acpt acsa actc avaya bea 8.1 certified administrator 8.1 certified architect 8.1 certified developer 9 certified administrator bicsi rcdd checkpoint ccmse ccsa ccsa ngx ccse ccse ng plus with ai ccse ngx cisco access routing and lan switching ccda ccdp ccie ccip ccna ccnp ccnp old ccsp ccvp crmam ip communications optical proctored exams for validating knowledge sales specialist storage networking vpn and security wireless lan citrix cca 3.0 cca 4.0 cca 4.5 cca xp ccea 3.0 ccea 4.0 ccea xp ccia ciw ciw associate ciw certified instructor master ciw admin master ciw designer master ciw enterprise developer security analyst comptia a+ network+ security+ server+ computer associates ca cusa cuse cwna cwna cwsp dell eccouncil cea cep certified ethical hacker chfi e-commerce architect emc emc specialist implemenation technology foundations enterasys ese eta exam express exin exin itil extreme networks ena ens filemaker f7cd f8cd fortinet fortigate foundry cne fujitsu fujitsu guidance software ence hdi css hda hdm hdsa hitachi hitachi certified professional hp ais apc app aps ase certified systems developer csa cse master ase huawei hcne hyperion hcp ibm advanced deployment professional advanced technical expert application developer business process analyst certified administrator certified advanced system administrator certified advanced technical expert certified associate developer certified enterprise developer certified solution designer certified specialist certified systems expert database administrator db2 deployment professional enterprise developer eserver certified specialist ibm on demand business solution advisor solution designer solutions developer solutions expert storage administrator system administator iisfa cifi intel isaca cisa isc cissp sscp iseb itil ism cpm juniper jncia jncis legato lcaa lcea lotus clp lpi lpic level 1 lpic level 2 lpic level 3 macromedia mcafee mcdata csnd microsoft crm mbs mcad .net mcdba mcdst mcitp mcp mcpd mcsa longhorn mcsa 2003 mcsa 2008 mcsd .net mcse mcse 2000 security mcse 2000 to mcse 2003 upgrade mcse 2003 mcse 2003 messaging mcse 2003 security mcse 2008 mcts microsoft business solutions microsoft partner competency mile2 cnsa network appliance nac-na nac-nie naca nace nacp network general sniffer certified professional nokia nokia security administrator nortel ncde ncds ncse ncss ncts novell5 cna 5 cne 6 cna 6 cne 6.5 cne cne upgrade omg ocup oracle 10g dba 10g oca 11i 8i dba 9i dba 9i internet application developer oca ocp8 to ocp8i dba upgrade exam pmi project management professional polycom pcve redhat rhce rhct sair sas institute sas scp saas scp snia snia certified architect snia certified professional snia certified systems engineer snia storage networking certification program administrator professional associate symantec scse scsp scta scts teradata tca v2r5 tcad v2r5 tcda v2r5 tcis v2r5 tcm v2r5 tcp v2r5 tia ccnt ctp tibco tcp trusecure ticsa veritas infraguard chamber of commerce vcp vmware certified professional webex linkedin facebook myspace Professional page layout, image editing, vector illustration, and print production Website design, development, prototyping, and blogging Creation of rich interactive content Industry-standard visual effects and motion graphics Video capture, editing, and production; DVD titling; and digital audio, Adobe Photoshop CS3 extended, Adobe illustrator CS3,Adobe indesign CS3,Adobe Acrobat 8 Professional, Adobe Flash CS3 Professional, Adobe Dreamweaver CS3,Adobe Contribute CS3,Adobe Fireworks CS3,Adobe After Effects CS3 Professional, Adobe Premiere Pro CS3,Adobe Soundbooth CS3,Adobe Encore CS3,Adobe OnLocation,Adobe Bridge CS3,Adobe Version Cue CS3,Adobe Device Central CS3,Adobe Stock Photos, Intel Pentium 4 (1.4GHz processor for DV; 3.4GHz processor for HDV), Intel Centrino, Intel Xeon, (dual 2.8GHz processors for HD), or Intel Core, Duo (or compatible) processor; SSE2-enabled processor required for AMD systems Microsoft Windows XP with Service Pack 2 or Microsoft Windows Vista Home Premium, Business, Ultimate, or Enterprise (certified for 32-bit editions) 1GB of RAM for DV; 2GB of RAM for HDV and HD; more RAM recommended when running multiple components 10GB of available hard-disk space (additional free space required during installation) Dedicated 7,200 RPM hard drive for DV and HDV editing; striped disk array storage (RAID 0) for HD; SCSI disk subsystem preferred Microsoft DirectX compatible sound card (multichannel ASIO-compatible sound card recommended),1,280x1,024 monitor resolution with 32-bit color adapter Blu-ray burner required for Blu-ray Disc creation OHCI compatible IEEE 1394 port for DV and HDV capture, export to tape, and transmit to DV device QuickTime 7.1.2 software required to use QuickTime features Broadband Internet connection required for Adobe Stock Photos* and other services