Security Tips on How To Protect Your Company’s Data
February 08, 2010 1:40 PM
Network and cyber security is a huge issue faced by big and small organizations today, in the world dominated by varied use of information technology in businesses.
Recently, Tickle Industries LLC had its proprietary database of luxury products stolen. The reason why the data got stolen so easily was because the password for this database was known to almost everyone, from data entry clerks to temporary workers. The existence of a common, shared password and lack of access controls in the organization led to this robbery.
Access control refers to a procedure or a system in which not all the people in the organization have access to all the applications of a system. The access is provided to the extent of the work of an employee in that particular application. For example, a clerk should not have access to the system or application where critical financial data of the company is stored. The company should develop basic security protocols within the organization.
The most basic of this is that each employee should have a separate password and it should not be easy to guess. There are various protocols for setting this password also. Like the password should be alphanumeric with at least one special character; it should be at least 7 letters long; it should be set every 30 days or 90 days etc. The companies should hire professionals for designing and establishing security systems for their organizations. Some companies also use generic security systems.
For example, Verity Credit Union of Seattle uses a password management product from Imprivata Inc. Small companies are also using single sign-on tools made by TriCipher Inc, and Arcot Systems Inc, to manage and control access to popular software-as-a-service applications such as Salesforce.com (NYSE: CRM) and Google Apps (NASDAQ: GOOG). These tools are cheap and easy to use and serve the purpose of protecting the systems.


























