EzineHub NoviceNews EzineReport ExactSeek GoArticles SPN Awards ROIbot Pro StartBlaze Submit Plus PocketFlier NetMechanic Free Money Magic Words

In these days of all-out combat in Afghanistan, terrorist attacks in New York and Anthrax in Washington, it's easy to lose one's perspective. I know I've become addicted to checking the major news web sites several times a day. I now listen to the news radio stations on the way to and from work instead of my normal rock and roll station. It seems like something might happen at any moment, and I want to know immediately.

Something that seemed to be mentioned in every IT related publication for the last year or so is the possibility of cyber warfare. This is the concept of attacking a country through it's information systems (specifically the internet).

Since the attacks, I've seen the number of articles go from a few per week to dozens per day. Warnings about security risks seem to be popping up all over the place. It is important that these warnings be taken seriously - it's time to wake up folks and get your systems locked down.

What could be attacked? Just about every company has an internet connection these days. Many of those companies do not have good security, as is proven by the recent Nimda and Code Red outbreaks, as well as numerous penetrations by hackers.

If you are an IT manager you probably need to ask yourself some important questions to be prepared for the possibility of attack. In fact, it is your patriotic duty to be sure your systems are safe and secure. To do otherwise not only puts your company in danger, it actually threatens, even in a small way, the security of your country.

Does your organization really need to be attached to the internet at all?
This is the first question to ask yourself. I know it seems like every workstation at every company must be attached to the internet, but is it really necessary? Does it add to the company bottom line? For many companies, the answer is yes, for others no.

Is the information that you provide to the internet community appropriate?
This question has come up on a large number of government and utility sites. Is it really necessary, for example, to include a map of a power plant? I know this might seem useful to, say, schools for educational purposes, but it may also be even more useful to terrorists and other evil-doers.

Is your backup and archive strategy sound?
The most important single task that you perform is backups. Do them regularly and check the data occasionally.

Find The Best Affiliate Programs To Earn Money From Your Website WeAreAffiliates.Net and SiteProNews are pleased to recommend the Affiliate Programs Global Directory with 1,000+ listed affiliate programs and growing. Find the program which best suits your site content and generate an easy, extra revenue stream. Be the first to submit your program and we`ll publish your link! Also check the featured practical advice of the affiliate gurus on how to boost your sales in Recommended links & Marketing tools. New to affiliate programs? Read our FAQ section on how to be a successful affiliate. Click Here for Details

Are your password policies good enough?
The weakest link in most security schemes is the user and his or her passwords. If your management will allow it, make sure your users have long, complex passwords which they change regularly. Enforce best practices with their passwords.

Is your front line security adequate?
Have you got firewalls installed? Regardless of whether you've got a home computer or a hundred million dollar complex, you'd better install a firewall if you have not done so already. A hardware firewall is the best solution, but a software one will do for a home system if money is tight.

Have you defined a DMZ?
If you manage a network for a company, you should re-examine your firewall strategy to ensure that you have a proper DMZ. What is a DMZ? To simplify it a bit, it's a way to protect your application servers even if your web servers are compromised. You have your core application systems behind a firewall. On the outside of that firewall you place your web servers. Then to protect them you put another firewall.

Is your virus protection adequate?
If you haven't installed antivirus software by this time, shame on you. It does not matter whether you run a network of ten thousand computers or a cheap home system, you'd better have this basic application not only installed, but regularly updated.

Is your system patched properly?
All vendors release software with bugs. It is the responsibility of all system managers to periodically review operating system and applications patches and releases and update them as needed. Remember, even the Apache web server is ridiculously insecure if not properly patched.

Are you educated on security?
If you haven't already, look around and find some books, classes or information about security. Become educated as fast as you can. Once you understand security, then propose, plan and implement what you have learned.

Do you perform background checks on IT related positions?
All new hires into IT should have thorough background checks before they are hired. You should also check the backgrounds of all of your IT consultants. It's best to know who you are hiring before you hire.

Is your user community educated about security?
Perhaps one of the best tasks you can perform is to educate your users on good security practices. Emphasize the reasons why security is important and how it protects your users. I usually stress that security penetrations are a direct threat to their employment. Spend some time explaining and demonstrating how social engineering works - this is the number one way break-ins occur.

Do you have a working disaster plan?
To be perfectly prepared, ensure that you have a working, tested, debugged disaster plan ready at all times. That way if for some reason your primary systems are rendered useless you can still have a running company.

Is your security plan confidential?
The less information you have available to evil-doers the better. Keep any information about how your systems are secured confidential - treat it on a need-to-know basis.

Remember this important fact. As of September 11th, the United States and all of the free nations are in a war. And when your country is in a state of war you had better be prepared to be attacked. It's the only sane thing to do.

  About The Author
Richard Lowe Jr. is the webmaster of Internet Tips And Secrets. Visit his website any time to read over 1,000 complete FREE articles about how to improve your internet profits, enjoyment and knowledge.

Recommended EBooks

Free Money For Entrepreneurs On The Internet
New sources of FREE cash specifically tailored for Internet entrepreneurs. This is a digital book, meaning you can read it online. All the free money sources are just a mouse click away!

Advanced Hypnotic Writing
The unparalleled sequel to Joe Vitale's blockbuster "Hypnotic Writing." It reveals how to use the phenomenon of hypnotic suggestion to turn your words into cash.

Recommended Webmaster Tools

1,001 Killer Internet Marketing Tactics
A *must have* tool for anyone serious about doing business on the Internet. Do yourself a favor and check this one out today. Widely regarded by many as the most effective Internet marketing course on the Web. Comes with an invaluable Bonus Pack that includes a database of 6,000 national media contacts with full contact information, 2 bonus courses and the Submission Sniper.

Previous SPN Sites of the Day       Previous SPN Tips of the Day       Previous SPN WebMaster Apps of the Day