Security Tips
Many users are under the mistaken impression that simply installing an adequate firewall and anti-virus is protection enough. This guide is designed to advise users on how to best protect and secure their IT systems, over and above these basic considerations.
PASSWORDS - Passwords are an easily implemented method of limiting access to your electronic work environment and avoiding physical theft of data. Consider using a combination of letters (upper and lowercase) numbers and punctuation marks. Set up electronic environment to require long and complex passwords, with a mandatory frequency of change.
EMAIL - The most common methods of transferring viruses is be embedding them in emails, These days they can be hidden in a variety of ways- not just in.exe attachments.Do not use the preview function for email contents and do not open any email or attachment from an unrecognised source. Set up your browser to alert you to internet module downloading and do not accept them from the sites you do not know.
UNINSTALL - software that is not used or has been unknowingly installed and default functions are a primary way for attackers to harm your system. Uninstall software and archive files that are no longer used. Frequently run a clean up of your hard drive(s) Establish a policy for removing all data when a hard drive is repurposed,discarded, donated or sold.
ACCESS - Regardless of security, if an attacker has access to a computer, they will find a way round your security measures.
Log off or apply a screen lock when computers are left unattended, control the use of data taken offsite and ensure security to the building or room is adequate. If you are using a wireless network, ensure you have set up security functions, otherwise anyone within a defined radius can gain access.
PARTITIONING - A computer virus will always seek to infect recognised and default data areas and names ( e.g. my documents) Partition your hard drive, ensuring that data areas and applications are kept separate. Do not use default folder names for your critical date.
BACK UP - Insurance will not cover cyber loss and backups are the only insurance you can rely on for your data. Automate as much as your back up schedule as possible, ensuring an incremental onsite back up daily and full offsite back up weekly. Do not rely on verification tools as these can be deceiving. Always physically restore a random selection of files to ensure integrity.
HARDWARE - A common cause of data loss is mechanical, electronic or logical hardware failure and this is easy to protect against. First ensure all your systems have a surge protector. Consider mirroring your data. If your support RAID-5, upgrade to RAID-6 (RAID -5 with a global hot spare in case two drives fail) and have your RAID controller email or text you in the event a head cleaning and annual service/refurbishment. Store all removable media at room temperature in a dry clean environment. Upgrade hardware when it becomes obsolete or end of life.
UPDATES - Software vendors routinely provide updates (also called patches) to fix problems and enhance functionality.
Ensure that you have applied all the patches to your applications. Often you will need to download this from the vendors website.
NETWORKING - Good network security requires access protection for each component including firewalls, routers,switches and all connected user devices. Access to each component should be limited to protect it from improper access. Turn off the file and printer sharing features unless it is in use. Turn off computers when not in use, knowledge of passwords for each component should be limited and ensure authentication for wireless and remote access.
SUPPORT - Get the right kind of help. Many problems are exasperated by the wrong technical expertise or diagnosis.
If you so not have the technical expertise in house seek outside help. Failure to do engage the right expertise early on may result in a vastly increased financial burden, or worse still, irreversible data loss.
