10 Tips For Properly Securing Your Business Network

By Author: Sally Wigham
Total Articles: 4762
Comment this article

At the beginning of the Internet era, which is only about 20 years ago, hackers would break into computer networks for the challenge, the fun and the pleasure of showing off and boasting later. Today, there are still some hackers in it for their ego, but many more are in it for their wallets. They work solo, like Lone Rangers (only from the bad side of town), as well as in online gangs, often referred to as hacker rings. In fact, some of the attacks perpetrated on American business networks are funded by foreign governments, and it is well established that criminal enterprises also hire the best computer talent.

Good security involves more than just hardware and software devices and tools. Good security is an attitude, first of all, and then a set of actions that includes encryption, a solid backup strategy, protection against corrupted data and proactive defensive measures. There are many ways to make the following list, but here are 10 tips for properly securing your business network:

1. Conduct an audit: There is no way to secure your network unless you know what your vulnerabilities are, and what data you ...
... have (and where it is). Unless you have total IT expertise in-house, you should probably get a professional to help you audit your infrastructure, which means everything from mobile devices to PCs, iPhones to the network cabling itself. Everything counts.

2. Encrypt data: If your data is encrypted, it is not worth stealing (unless the thieves can get hold of your keys). If you do it right, encryption can save you from the negative repercussions of a lost USB thumb drive or a stolen PC.

3. Create strong passwords: Hackers can guess many passwords, and the more they know about you and your business, the more likely they can guess that passwords are your firm's name or your birthday. A so-called dictionary attack with software that combines words and numbers has much less chance of success with strong passwords. Also, memorize your passwords rather than write them down.

4. Try a multiple-security approach: It is vital to have multiple layers of security on all devices, ranging from mobile phones and PCs to the file server, mail server and network nodes. Even if one alone cannot block an attack, multiple ones can, or at least slow down the hacker enough for you to take action.

5. Back up onsite: Your data does not have to be stolen to be compromised. If you make it hard to steal, some hackers may just try destroying it from spite. Back up your data daily with easy onsite access.

6. Back up offsite: Of course, you should also back up offsite, since hackers are not the only enemy - power spikes, floods, fires and other disasters are, too.

7. Establish security policies: You cannot just ask employees to work securely, you need to have clear, easily understood policies that will ensure a secure workplace. Make sure all notebooks, company or personal, have security software. Do not allow any security info of any kind to be given out over the phone or by e-mail. Common sense is a good start, but writing down and distributing a security policy is better yet.

8. Protect the mobile folks: With the advent of iPhones, Blackberries and even iPads as workday devices, more work is going mobile than ever before. They are not covered by your in-house security blanket, and often operate on open systems in coffee shops, clients' offices and other public places. Ensure their devices are part of your security protocol.

9. Educate your employees: Make certain that your employees are fully aware of the importance of security. Your employees are your first line of defense. Since human error is a major cause of security breaches, educate your employees in security measures and keep refreshing their memories. Vigilant employees are essential.

10. Get help if you need it: It is no simple thing, if you are a non-technical type, to secure your business's network. If you do not have expertise in-house, it is essential that you get help from a certified professional consultant or company. Certainly you can implement some of the simpler measures, but do not shortchange your company and its future by skimping on network security.

Hackers and thieves like victims that put up the least resistance. Get your network secured and you will likely turn away troublemakers when they first discover you know what you are doing (or hired someone who did!). Do not be a victim. The best way to keep from becoming one is to implement, and then maintain, the best possible security you can get.
About Author:
Our Clone Guard Penetration Testing solution is among the most intrusively thorough testing regimens employed by any service provider. Our network penetration test is an endeavour performed by our expert-certified engineering team onsite and offsite, over the course of several days.