How to Keep Data Under Control

How to Keep Data under Control Hi, I’m Bruce Naylor. You know I spend a lot of time looking through the web trying to find things that I think would be of interest to people who are either in the small to mid size business community or people that’s interested in things like security, the latest development windows and technology. And some of what I do is to attend various webinars to get information and ideas and I recently attended the webinars sponsored by Tech Republic and sponsored also by Sophos and I wanted to share in this video entitled Tips to Keep Data under Control. You know, it’s so important when we deal on the world of security and compliance and these sort things so this webinar I think is very good. I’ve included the link in the description of this video to the webinar. Why is the compliance important? Well, in several different reasons but the main ones is to protect your customer data and your company data, of course. Well, secondly to avoid those CNN moments as John puts it and if you think about it when data breaches half and main stage require that this is released to the public and you certainly don’t want to have something like that happening and finally to avoid fines, penalties, lots of privileges. Now, given ideas some of these fines can exceed over $500,000.00 and also if you’re in the business, if you have the business that requires using credit cards and losing those privileges could be devastating. Someone’s security risk out there and these are very real, you know Cyber thieves caused Americans over eight billion dollars in the last two years and over trillion dollars worldwide. According to the Endpoint Security Test, it shows that 85% of all computers out there either have outdated security patches, firewalls turned off, that sort of thing. It is in bad shape. Of course, the research says that 55% of all organizations have lost confidential information to removable media such as USB drives. Datalossdb.org says 25% of data breaches occur through the fact their loss of laptops and mobile devices. And this is the big one. Computer Security Institute says that the average cost of the security breach is $300,000.00. There’s a lot of money and we can buy a lot of great tech toys for that kind of cash but we all come if we haven’t yet we soon will under some type of compliance policy and some kind or another. Now the government has difference compliance policy such as HIPAA, the Health Insurance Portability and Accountability Act, Sarbanes-Oxley, GLBA from the Banking Industry, the European Protection Directive if you’re dealing with the customers that are part of the European Union, various state laws have passed compliance issues and then on top of that there are the industries standards that were now half in here too such as PCIDSS, which stands for the Payment Card Industry Data Security Standard, there’s COBIT, there’s ISO, CIS and those goes on and on. Listen, the bottom line is we are all in any kind of business are going to be obligated one measure or another to take care of compliance. So well, a lot of companies do write now to establish some type of internal policy kind of consistent with the following things. Authentication, access control, Malware protection, Device control, application control and encryption. So here are four tips to help with some of these issues. Tip number one is to protect your end points. You need to have a centralized management system and order to control things like in anti-malware protection, application control so no one authorized apps server running on your network, device control such as CD burners, USB devices and authentication. Now tip number two is compliance checks. You need to be continuously checking out compliance and you need to be able to remediate and block so that means that few has a client computer attach connect to the network and AV is turned off that’s system would turn the AV back on before allowing that connection. User based policy, for example maybe you have a guest or consultant come to your office that wouldn’t be able to access your network shares but might be able to access the internet and compliance reporting. Our tip number three is gateway protection and that involves email filtering so you can prevent spam, viruses and malware through email as well as quarantine email based on the content and maybe you have a policy where looking for a certain sensitive words and you want to block those from going out. Email encryption so that protects your confidential email from falling in the wrong hands. If on the web content and URL filtering so that protects you against malware and picked up through the web and protect yourself with used policy. The final tip is encryption. Data at rest should be protected that’s for example data that’s on your file server and that sort of thing. Data in use mass data on the network that’s being currently edited and used by the employees and finally data in motion that’s your look outgoing email as well. These are four tips that help protect that data and keep yourself comfortably secure. I think these are some valuable tips so I want to hear your comments and feedback on this video. I’m Bruce Naylor your Frugal Tech. Remember to join us everyday at Frugal Tech Live just go to FrugalBrothers.com. Click the link that says Frugal Tech Live everyday between and 1:00 and 3:00 pm Eastern Standard Time. We are broadcast live webcast and we’re also having a drawing on the June 30 for Apple- iPod Nano. Look I’m Bruce Naylor, your Frugal Tech. If it’s within your shot not made you any money or save your money get it out of there. I’ll talk to you later.