IT Security 101 Do’s and Don’ts
|August 8, 2013
To protect against cyber crime, here’s a list of IT security best practices that attorneys and title and settlement companies should follow and not follow, according to Dick Reass, CEO and founder of RynohLive. Some of these are even more important as Microsoft will stop providing support for Windows XP and Office 2003 on April 8, 2014. Companies that have not migrated to a new operating system by the deadline could face potential security and compliance risks.
IT Security 101 Do’s
IT Security 101 Don’ts
- Have a managed antivirus solution.
- If IT professionals are not available, assign updating all machines on the network to a user. Update all applications, plugins, Windows updates, and any other software on the machines at least once every other week.
- Software firewalls should be active and updated on all machines within the network.
- Have a "network usage policy" signed by everyone using your network/
- Have security enabled for your Wi-Fi
- Change default passwords (you would be surprised how often they are not)
- If feasible, track the devices that you allow on your network. Known as BYOD from Marble Security.
- Install/scan virus protection on computers before they access your network.
- Use an intrusion detection system if possible, there are good free resources.
- Use groups and the "need-to-know" process for file access; do not give access where it is not needed.
- Use VPN over SSL for external connections.
- Use HTTPS when transferring personal or customer data (Encrypted Email)
- Backups are vital and should be done frequently (at least daily)
- Don’t use WEP security for Wi-Fi.
- Don’t assume Apple products are secure.