Coping with Key Security Management Issues

Courtesy of Computer Associates International, Inc.; Published in Partnership with Inc.

Protecting Your Data

>Secure access to your data both physically and via authentication/authorization mechanisms.

> Make a daily backup copy of your data and keep it offsite. If your needs warrant, consider data mirroring, replication, or snapshots.

> Install uninterruptible power supplies (UPSs) to prevent data loss or corruption due to power failure.

> Implement fault-tolerant, highavailability data storage if your business depends on access to certain data.

> Use reputable antivirus/antispyware software, making sure that it's properly configured and kept up-to-date. Antivirus defense should be implemented at the gateway, the server, and the desktop.

> Encrypt sensitive data files.

Intrusion Detection and Prevention

> Use a firewall to create a secure buffer between your business systems and the public Internet.

> Use an intrusion detection system (IDS) to protect you business network perimeter against unauthorized users and hackers.

> Implement a demilitarized zone (DMZ) if you host your own website (rather than outsource it) so only approved traffic is allowed into and out of your web server -- and keep your web server on a virtual local area network (LAN) that's separate from your intra-company LAN.

> Employ a virtual private network (VPN) if you need to connect with remote offices. This is more cost-effective than leased wide area network (WAN) lines.

> Keep your software patched and updated. Perform this regularly -- the window between discovery of defects and their malicious exploitation is shrinking dramatically.

For more information on CA's small and medium business solutions and how you can protect your business, please visitca.com/smb.

June 2005

Copyright 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, service marks and logos referenced herein belong to their respective companies. This document is for your informational purposes only. To the extent permitted by applicable law, CA provides this document "AS IS" without warranty of any kind, including, without limitation, any implied warranties of merchantability, fitness for a particular purpose, or non-infringement. In no event will CA be liable for any loss or damage, direct or indirect, from the use of this document, including, without limitation, lost profits, business interruption, goodwill or lost data, even if CA is expressly advised of such damages. Inc. and Inc. 500 are registered trademarks owned by Gruner + Jahr Printing & Publishing Co.MP282970605

This story was editorially selected as relevant and is used with permission from CA. PC World received no compensation for posting this article.