I T & Data Security
There are many Network and Computer Security companies who offer basic IT security services and software. With due respect to the excellent work carried out by many of these companies, where we differ is in our practical experience of dealing with often deliberate internal or external attempts to compromise critical information systems, whether by hacking or otherwise.
In short, we have experience of operating at the sharp end of IT and data security, which puts us in an excellent position to assess practical and unforeseen dangers which may not be apparent to industry generalists.
The plethora of potential risks (the list is almost endless) include :-
- Viruses
- Macro Viruses
- Trojan Horses
- Worms
- Zombies
- Phishing
- Internet Based Attacks
- Viral Web Sites
- Spyware, Adware and Advertising Trojans
- Virus Hoaxes
- Unsecured Wireless Access Point
- Social Engineering
- Microsoft Office Document Metadata
An assessment of potential risks and weaknesses generally needs to include :-
- access to information
- internet use including emails and access to data
- access control and restrictions
- physical security
- staff training
In addition to practical implementation of the above, we always recommend that clients should have a clear IT Security Policy, which protects legally and enables staff to understand and carry through appropriate security measures. We can assist in the preparation of such policies at cost effective prices without the need for expensive legal advice.
An IT security policy ought to include:
- secure login procedures and identification
- limiting and restricting access as necessary
- confidentiality procedures
- data protection training for client and business information
- sanctions for non-compliance
- business continuity plans
- internet and email acceptable use policies for staff
Please contact us today for a confidential discussion whether your business needs preventative consultancy or has an ongoing data security threat or issue.