Basic Computer Security
Other organisations should consider basic security on their computer systems however, it is surprising that really basic security measures on desktop and laptops isn't always being used.
Better safe than sorry
Labels: basic computer security, information security management, ISO27001
Posted: Saturday, 27 January 2007
Internal Quality Auditing
Most of the management standards call for internal auditing to be carried out at least once a year by competent persons, correctly trained. This process, if carried out correctly, will be of great benefit to the company, providing detailed information about the parts of the company that work (and the parts that don't). The results when analysed allow for continual improvement and increased customer satisfaction.
The main problem today is that some organisations will try to audit the processes without knowing exactly how this should be done. The results are inconclusive at best and misleading at worst.
The only way to be sure and to get the best results is to have your auditors trained properly. Proper courses are based on the Standard ISO19011, Auditing Requirements for Quality & Environmental Audors and are usually two days in duration and successful candidates receive a certificate of successful completion.
The first day concentrates on the two main standards 9001 & 14001 and how these are applied to organisations. An end of day test confirms understanding.
The second day looks at audit practices, techniques, routines and form filling, and finishes with tests of understanding and competence.
Posted: Monday, 8 January 2007
The Basics of Laptop Security
It is startling to see that a recent statistic records that one in ten laptops will be lost or stolen. These laptops often contain sensitive or very sensitive information but some have only minimal security in place. Recent thefts of laptops include: The loss of the hardware is bad enough but the data that they hold could be very damaging. The strict rules at airports last year meant that laptops could no longer be carried as hand luggage and as a direct result many hundreds of laptops were never reunited with their owners. Rule 1: Never leave a laptop unattended in a car or in a public place. Rule 2: Keep a minimum of data stored on the laptop. Rule 3: If you need access to large amounts of data use VPN to access the main system. Rule 4: Use complex passwords and log-in methods to protect data
In addition to these main rules: Some very secure organisations make use of the so called 'logic bomb', where four wrong attempts to log in to a laptop results in the entire hard disk being destroyed. Not something that should be used lightly!.. Think if the poor IT manager who will need to purchase new hardware.
Let's make 2007 a secure year for laptops
Posted: Thursday, 4 January 2007
0 Comments:
Post a Comment