Improving Security of Your Business Data

Your most valuable asset may be the information digitally stored on your business computer system. Customer lists, pricing information, credit card data, trade secrets, formulas, and other confidential information.

Perhaps you store confidential client information.

Imagine if that information was stolen? Now think about whether you are taking adequate measures to prevent this theft.

Kurt Marko writing for Proccesor.Com offers this advice. Tips For Improving Users’ Security Awareness

Employee Education Is A Powerful & Cost-Effective Tool

As much as most IT managers wish otherwise, security remains a top concern of most departments. According to a recent survey commissioned by GFI of senior executives and IT managers at more than 450 small to midsized enterprises, security and system downtime are their top daily concerns, with 71% of respondents mentioning both. It comes as no surprise that the overwhelming majority have already implemented the basics, with more than 80% using antivirus and antispam software and network firewalls. Despite having the technology in place, 42% do not consider their networks to be secure. What’s a poor CIO to do? Almost half spend more than 10% of their IT budget on security, leading many to question whether throwing more technology at the problem is an effective strategy.

GFI’s survey does offer some hope; it indicates increased end-user security awareness. Almost half of the managers surveyed agreed that “better awareness on security among employees would improve the level of security,” indicating that security training may be a more cost-effective solution. While another survey of user behavior by RSA has some harrowing statistics—8% reported losing a laptop or portable storage device containing corporate information—it’s a mistake to conclude users aren’t concerned with security.

If you’re convinced some employee training can leverage your IT security budget, keep the following expert tips in mind.  Read More

Kurt's tips include information on how to:

Indoctrinate New Employees

Regularly Communicate Security Issues

Market Security Importance To Managers

Use Professional Trainers For In-Depth Training

Get Outside Help

Increasing the security awareness of employees is the best way to anneal the weakest link in computer security, yet it is a commitment that needn’t cost a lot of money. Experts agree that employees want to do the right thing, but too often they aren’t aware of what constitutes risky behavior. Taking some simple steps to communicate and enforce policy in a way the employees understand and internalize can go a long way to improving any SME’s security profile.