|
IN THE NEWS... May 14, 2007 - Security concerns spur agencies to limit use of thumb drives Apr 22, 2008 - Unsecured USB Flash Drives Still A Risk, Survey Shows Mar 27, 2008 - Employees the weakest link in IT security Mar 26, 2008 - Data security top tech issue for colleges FEATURE ARTICLE Apr 4, 2008 - The IronKey Named Best Security Product at 2008 FOSE Conference and Exhibition |
Physical/IT Security Convergence Visionary – Merge physical security with IT security and become a leader in the fieldThe trend is toward a converged security department with physical security and IT security under one umbrella. It’s the rare leader who has the skills to build this converged goup. The products below will assist you in your quest.
Encrypted USB – Military Grade security for your corporate USB keysOne of the easiest places for organizations to experience data loss and corporate espionage is USB keys. It should be mandatory that all employees only use an authorized, encrypted USB device. Choose one that integrates with your authentication technology and that embeds single sign-on for easy maintenance. Be sure its robust enough to be dropped in water and even run over by heavy equipment. Encrypt files and disks – Notebook theft and intercepted files leave your organization vulnerableThere are many types of encryption technology available on the market today. The best way to choose a solution is look for an integrated console that can manage files, hard disks, non-encrypted USB keys, and email; then choose only the modules your organization needs. End point security – Ensure only approved devices access your networkExternal and mobile devices can play havoc for IT Security. A non-approved mobile device can deliver a virus, but it can also be used to hack data and retrieve sensitive information. In addition, an approved device can be used to transfer data to another machine and its important you know this transfer happened. End point security technology brings a balance between security and enabling the mobile workforce. Risk Assessments: an IT perspective – Eliminate compliance silosSOX, BASEL II, COBIT, FISMA, NERC, PCI, ISO, FISAP, COBIT, HIPAA – where in the world do you begin, and how do you ensure that you can re-use information gained through previous assessments. Compliance is a huge overhead on any organization so making the process more efficient should be a goal. Mandatory requirements are: easy delivery of surveys (including surveys that are specific to your organization), robust reporting, and a recommendation knowledgebase. Key Management – Secure key drop boxes and key cabinets that are software enabledIf they get the keys they get the asset. Although corporations are working towards fully access control enabled buildings, old fashioned keys will always be around – older offices, fleets, cabinets – you can think of many keys that require securing within your facility. You may even want to lock up your access cards. An access control integrated key cabinet with audit logging is the perfect contemporary solution for an old problem. Secure Dial-up to Remote Locations – Connect multiple devices to a single dial-up line and ensure NERC / CIP level securityAny of your locations that still have dialup connections to the substations have two alternatives to become NERC / CIP compliant. The first is to do a forklift upgrade and take out the dialup connections, upgrade the associated network and potentially upgrade the SCADA equipment. By installing special equipment and software, none of these upgrades are required as all existing network is maintained and secured, with a very short time frame to 100% ROI. Server Redundancy and Fast Failover – Mission critical security and emergency management software can survive a hard drive failureFor each software solution you implement, its important to decide if it is mission critical to your organization. Emergency management and security software more than likely is. Ensure that your server-based solutions have a “hot” stand-by ready to failover within seconds of a hardware loss or other catastrophic failure. A best practice is to ensure this stand-by server is located in another geographic location.
|




