Internet Security for Family O ces: 10 Steps to Protect Online Information

Transcription

1 Internet Security for Family O ces: 10 Steps to Protect Online Information A WHITE PAPER BY ARCHWAY TECHNOLOGY PARTNERS AND TRUSTEDFAMILY security strategy and trusted technology partners. This white paper by Archway Technology Partnersand TrustedFamily serves as a guide to understand best The following presents a general overview of various requirements applicable to the materials

2 According to Symantec s Internet Security Threat 2014 report 1. targeted. without proper security and knowledge of risks can endanger the family and its online. MANAGING RISK Today s biggest threats occur unknowingly as we can easily pick up stealthy viruses conduit to break into other machines, but they are seldom the target. Finding who and what you are connected to online is the goal of the intruder. 1 Internet Security Threat Report 2014, Symantec 2

3 10 ESSENTIAL SECURITY PRACTICES 1. Hire a trustworthy IT administrator. IT administrators have access to everything. It is their job to build the technology limit risk of data loss through negligence or ill intent. 2. Where data is stored. Where data moves to and from. When data moves across the network. to implement. For example, if tax forms currently contained on a thumb drive need to be ed to the accountant, IT administrators need to secure the thumb drive, and the network. 3. Set up a secure wireless network and limit access. Block peer-to-peer networking. Peer-to-peer is convenient. It allows networked computers to access computers access the centralized company network (not each other) and use the Wi-Fi network to access the Internet. 3

4 servers with security technology like Wi-Fi Protected Access (WPA2) the network. The Outer Shell: Provide separate Internet access, such as a Wi-Fi connect to the Internet, but not to the company network. 4. Encrypt devices. devices, like USB thumb drives. If the PC is compromised or the removable 5. Secure data in transit with Virtual Private Networks (VPN) and Secure Sockets Layer (SSL). the public Internet space. VPNs are the best bet for enabling remote access for employees; they require a separate log in, but they encrypt the online session. - network. This is how employees and family members should always log in from home or while traveling. Secure Sockets Layer (SSL) is a protocol for Web browsing that secures online comcreates a secure channel for traveling data, but SSL does not require a user log in. 4

5 6. security. There is no way to completely protect company data when mixed with a personal device. If the device needs to be wiped clean, the for the company. Store data on the network not the mobile device. This approach involves 7. Data breaches put the company at risk, but they can also disrupt employee employees can prevent issues and stay on top of their game. Store and save data on the secure company network instead of the computer itself. you can expect depends on the security protocols of the sites you visit. 5

6 s: Verify that the address and sender name match. Passwords: Do not click on suspicious links as this can allow hackers into your account and/or computer. Web browser or mouse over them to see where they lead. Reset passwords regularly and do not use the same one for all online accounts. If a hacker gains access to one of your accounts, you do not want him to be able to access all of them. of December16. since it is less likely that a hacker will have access to both. Do not get personal. You do not want to unknowingly feed details like pets or children s names, addresses, etc. 6

7 Social media: use it. Do not discuss travel plans or post travel dates online. online will always be there. Share appropriately. 8. Plan for accidents or breaches. understands what to do if an emergency develops. 9. process and designate a gatekeeper so that someone on the team is accountable 10. Develop an Employee Handbook. Consider policies that describe how devices and employees should interact enforced and embraced. 7

8 CONCLUSION nurture. By encouraging employees to contribute ideas, share knowledge and 8

9 ADDITIONAL RESOURCES Internet Security Threat Report 2014, Symantec Cisco 2014 Annual Security Report, Cisco The United States Computer Emergency Readiness Team, US-CERT Security Threat Report 2014, SOPHOS 9

10 TrustedFamily P (EUR): P (USA): ABOUT TRUSTEDFAMILY TrustedFamily 1177 Ave. of the Americas 7th Floor New York, NY

11 Archway Technology Partners P: ABOUT ARCHWAY Archway Technology Partners Archway - Indianapolis 9100 Keystone Crossing Suite 830 Indianapolis, IN ATWeb, is a comprehensive web-deployed Archway - New York 41 Madison Avenue Suite 3108 New York, NY

12 Archway Technology Partners, Inc Archway Technology Partners, Inc. All rights reserved. 12