I am always receiving information about security, new vulnerabilities and other topics in my inbox. The one that stands out a webcast from Trend Micro. The CEO said that every 7 seconds there is a new virus on the net. I thought "WOW, isn't that incredible". But even more incredible is the fact that viruses and other cyber crime can be as lucrative as Oil and Drugs.
We all have read about lowering the costs of our IT infrastructure in terms of security in these times of economical crisis, but being careless with Security spending can make you lose your most valuable asset: your company’s information- including client databases, procedures, etc. I think that the fact that your information is the target of many cyber criminals and that there are many viruses and malwares on the Internet to make your platform vulnerable and extract any kind of valuable information is propitious to secure your internal infrastructure from the Internet.
This leads me to add that the risk is not only on the Internet. Recent statistics have said that the most common security incidents come from insiders –that is, your own employees and outsourced personnel. They can take advantage of the vulnerabilities in your systems to commit cyber crime using your IT infrastructure. Some of those statistics have said that 44% responded to insider abuse and 29% to unauthorized access to systems. So, the question now is more specific, Where should I start securing my infrastructure, by protecting myself against internal or external attacks?
Statistics say that the 3 most common technologies used to secure the infrastructure. Do you know which is the most important? If you guessed antivirus, you're right. But isn't that amazing that 3% of the companies surveyed have said that they don't use antivirus software? I hope you're not one of them. The second technology was firewalls. The last one was Antispyware.
This tells us that companies are securing their infrastructure and information from the first risk called "malware" (Malicious Software), which are the most common risks from the Internet. But, what about the cyber criminals? These people can be in the coffee shop with free Internet on the street corner, or in any other part of the world, or even worse, at the next desk in your office. Companies are not paying attention to these people. We think, “this can't happen to me, all my employees have signed my Confidential Policy, and so on”. But there are employees that signed that policy long time ago. Have you refreshed that information to them? Are your outsourced personnel aware of your security policies and the consequences of doing malicious attacks in your company?
I hope the information given in this article has helped you in taking action to improve the security of your data and even your own security.
I am looking forward to hearing from you regarding your thoughts and knowledge about this topic. So I ask you: Have you heard about this before? What do you think about this? What do companies should do to increment the security in their business? And even more important to me, how could we reduce the amount of threats on the net? What about paying attention to the security before implementing a system or systems in your organization?
Wednesday, February 18, 2009
Wednesday, January 21, 2009
IT in this age of crisis... Improving its value could be your business' best friend.
These days, companies are trying to stay in business while the economic crisis is striking down on their core businesses. Optimistic articles say that in 2009 will end the recession, while others predict a longer recession that will take 2010, so it means a long period of time thinking about the possibilities of improvement or innovation, as well as thinking about improving the values of many areas of the business.
Innovating in this crisis may cause the loss of importance of core areas of your business. And yes, I am talking about your IT area. Stopping the installation of the wireless network or the implementation of the new version of your VPN infrastructure, and even stop the replacing of old PCs could be the most expected decisions, but remember there are decisions couldn't be taken, like wait until the recession ends to improve your IT area. This could be catastrophic.
What I intend to do with this article is to make you recognize that your IT environment cannot be forgotten in this age of economical crisis. Focus your business improving their products and innovating in the market, because It's time to keep your core areas working in making money and keeping your business in the market. So the question now is: Is your IT working for the well being of your business? In another words, is your IT aligned to your core business?
Back in the 1930's, in the midst of the last recession of this kind, managers didn't have to worry about their data and the systems where they were stored, or fear about a "network vulnerability". This is how this recession makes it different. It is time to make your IT works for the well-being of your business. Is it working aligned to your business, well just improve its value and you'll receive better answers. Is it not working aligned to your business but it keeps your data? Well the first step is to involve them in your business, do it NOW and start a short-term project to align it to your business. And remember, there is no time for big changes, there is no time to innovate your IT. Today is too late to make big decisions because we're at least one year after the economic problems started. Here are some keys were you should be focused on this situation:
About your core areas:
1. Ask your key departments: Their systems and databases are providing the fair time response? Are their reports efficient? Is their data available 7x24?
2. Based on the responses from item 1, ask to your IT specialists to offer solutions about the concerns.
3. Plan your next steps base on a short-term of time. Prioritizing and focusing on those "Important and Urgent" actions are the keys of this step.
4. Implement the changes based on at least a 3-months period (remember there is no time), and involve your key areas in this task (they are the owners of the information and systems, not IT).
About your IT assets:
1. Inventory what you have, and analyze the usage of that inventory.
2. Make sure your inventory is working for the well-being of your business. If is not, do it NOW.
3. Remove the inventory you don't need.
4. Improve the value of the assets you need more if it is not fair (increase their resources).
5. Add the resources you need for the well being of your business. Don't avoid the fact that is technology and it's expensive. Remember you are improving the value of your IT for the well-being of your business.
Other suggestions are:
1. Always make sure to have updated servers, restructure your datacentre and study the possibility to implement virtualized environments, they will help you reducing your electricity consumption and the possibilities of a crash will be considerably low.
2. Implement the management software available in the market, it will improve your time-response administration and will reduce the cost of a technician in place. Many of them are for free when you buy a server. Ask your provider for it.
3. Make sure your IT personnel is working focus on the future of your business and the designed strategies.
4. Outsource some of your processes or management could be a good idea. Just make sure your experts are considerably agree and your outsourcing company of choice know your needs and is focus in helping you.
These minimum tips will maximize your performance and lower the basic costs. At the end of the day you will grow the productivity and effectiveness of your business. You will offer more effective services, leading to more productivity and protecting your information, while your competitors may remain vulnerable of times out and working with higher costs, because they refuse to implement these basic changes.
Though your mind may be set on cost cutting, remember that the key of your business is your information and the technology involved. Improving the value of your technological assets and making them work for the well-being of your business should be the next steps for your IT area. In the market exist companies specialized in this kind of analysis, make sure to keep them as a part of your business improvement team. I am sure the time and money invested will be worthy for your business and your clients.
In my next blog, I will give some tips for managers on keeping your data secure, because the increase in hacking attacks, phishing schemes and other cybercrimes in the past year show us that hackers and other cyber criminals are doing better than ever despite the recession. According to studies, cybercrime has become one of the most profitable industries in the world, comparable to drug traffic (Cybercrime more profitable than drugs. By John E Dunn, Techworld. Novembre 2005).
Innovating in this crisis may cause the loss of importance of core areas of your business. And yes, I am talking about your IT area. Stopping the installation of the wireless network or the implementation of the new version of your VPN infrastructure, and even stop the replacing of old PCs could be the most expected decisions, but remember there are decisions couldn't be taken, like wait until the recession ends to improve your IT area. This could be catastrophic.
What I intend to do with this article is to make you recognize that your IT environment cannot be forgotten in this age of economical crisis. Focus your business improving their products and innovating in the market, because It's time to keep your core areas working in making money and keeping your business in the market. So the question now is: Is your IT working for the well being of your business? In another words, is your IT aligned to your core business?
Back in the 1930's, in the midst of the last recession of this kind, managers didn't have to worry about their data and the systems where they were stored, or fear about a "network vulnerability". This is how this recession makes it different. It is time to make your IT works for the well-being of your business. Is it working aligned to your business, well just improve its value and you'll receive better answers. Is it not working aligned to your business but it keeps your data? Well the first step is to involve them in your business, do it NOW and start a short-term project to align it to your business. And remember, there is no time for big changes, there is no time to innovate your IT. Today is too late to make big decisions because we're at least one year after the economic problems started. Here are some keys were you should be focused on this situation:
About your core areas:
1. Ask your key departments: Their systems and databases are providing the fair time response? Are their reports efficient? Is their data available 7x24?
2. Based on the responses from item 1, ask to your IT specialists to offer solutions about the concerns.
3. Plan your next steps base on a short-term of time. Prioritizing and focusing on those "Important and Urgent" actions are the keys of this step.
4. Implement the changes based on at least a 3-months period (remember there is no time), and involve your key areas in this task (they are the owners of the information and systems, not IT).
About your IT assets:
1. Inventory what you have, and analyze the usage of that inventory.
2. Make sure your inventory is working for the well-being of your business. If is not, do it NOW.
3. Remove the inventory you don't need.
4. Improve the value of the assets you need more if it is not fair (increase their resources).
5. Add the resources you need for the well being of your business. Don't avoid the fact that is technology and it's expensive. Remember you are improving the value of your IT for the well-being of your business.
Other suggestions are:
1. Always make sure to have updated servers, restructure your datacentre and study the possibility to implement virtualized environments, they will help you reducing your electricity consumption and the possibilities of a crash will be considerably low.
2. Implement the management software available in the market, it will improve your time-response administration and will reduce the cost of a technician in place. Many of them are for free when you buy a server. Ask your provider for it.
3. Make sure your IT personnel is working focus on the future of your business and the designed strategies.
4. Outsource some of your processes or management could be a good idea. Just make sure your experts are considerably agree and your outsourcing company of choice know your needs and is focus in helping you.
These minimum tips will maximize your performance and lower the basic costs. At the end of the day you will grow the productivity and effectiveness of your business. You will offer more effective services, leading to more productivity and protecting your information, while your competitors may remain vulnerable of times out and working with higher costs, because they refuse to implement these basic changes.
Though your mind may be set on cost cutting, remember that the key of your business is your information and the technology involved. Improving the value of your technological assets and making them work for the well-being of your business should be the next steps for your IT area. In the market exist companies specialized in this kind of analysis, make sure to keep them as a part of your business improvement team. I am sure the time and money invested will be worthy for your business and your clients.
In my next blog, I will give some tips for managers on keeping your data secure, because the increase in hacking attacks, phishing schemes and other cybercrimes in the past year show us that hackers and other cyber criminals are doing better than ever despite the recession. According to studies, cybercrime has become one of the most profitable industries in the world, comparable to drug traffic (Cybercrime more profitable than drugs. By John E Dunn, Techworld. Novembre 2005).
Subscribe to:
Posts (Atom)
