Given the wide reach and impact of information systems and their inherent vulnerabilities, a company must be committed to aggressively monitoring network information security in order to minimize their risk to exposure. This is accomplished by actively performing ongoing system security reviews, ensuring company-wide security awareness at all staff levels, and adherence to established policies, clearly defining enforcement procedures and disciplinary actions associated with security breaches and the misuse of information systems.

FBI Alert
Almost nine out of ten companies had a computer-security incident last year, according to a report from the Federal Bureau of Investigation.
 
After a survey of over 2,000 companies, the FBI found that 87 percent of those polled admitted there had been some type of security attack. Within that group, 20 percent claimed they had been hit multiple times by 20 or more attacks.
 
The most common breaches were either a virus or some spyware penetrating the corporate network. More advanced attacks, including data sabotage and port scans, were less frequent, according to the report.

Attacks came from 36 different countries, with the U.S. and China marked as the source of over half the attempts, although masking technologies made it difficult to get an accurate reading.
 
The FBI said the survey is a clear sign of the urgent need for vigilance against network assaults, both internally and externally.

Network Controls
Protecting the confidentiality, integrity and availability of customer records and other confidential information is critical to a company’s success and may be required by various federal, state and local privacy laws under legislation.

Network control policies address a set of guidelines, policies and procedures that are developed based upon the analysis of degrees of risk associated with systems or services. When implementing new systems or services, risks should be identified and measured, and policies and procedures established to mitigate known risks. These policies and procedures address the controls and monitoring measures implemented based upon exposure to transactional, operational, financial, reputation, and legal risks.

OurTech can assist with development of appropriate Information Security Policies based upon industry “Best Practices” and provide on-site training where appropriate. We design policies to differentiate between organization, department, and end-user roles and responsibilities. More importantly, we can assist clients with the implementation of network applications to handle enforcement and monitoring of instituted network control policies. We can help you develop the following policies:
 

• Electronic Mail Access and Use Policy
• Record Retention and Disclosure Policy
• Internet Access and Use Policy
• Remote Access Control Policy
• Data Backup and Storage Policy
• Virus Protection Policy
• Physical and Logical Access Control Policies
• Change Control Policy
• Workstation and Server Hardening Policies 
• Personnel Security Policy
• Customer Service and Online Privacy
• Critical Data Policy
• Incident and Network Intrusion Policy

End-Point Security Services
Learn more about our security solutions!

   [Newsletter Archive]