|
Security Assessment
Over 80% of organizations
conduct security audits, as reported by the 2004 CSI / FBI Computer
Crime and Security Survey.
While it is true that
small businesses are not directly attacked as often as larger
organizations, there are three reasons why small businesses
should be concerned.
- The first reason is that small businesses often end up as
part of larger attacks, such as mass worm outbreaks or efforts
to harvest credit card numbers.
- The second reason is that because security is becoming
tighter than ever at larger companies, small business networks
look increasingly tempting to attackers.
- And the third reason is that this logic assumes that all
attacks come from the outside.
Of course, there is
no way to guarantee 100% network security. However, you can
achieve a reasonable level of security and be prepared in case
breaches do happen.
Cost of Damage is High
Small and midsize companies can be especially hard-hit by a
compromise in security because they often lack the staff and
budget needed to quickly address a security assault. You will
be better able to protect your business by determining your
level of acceptable risk.
Consider these circumstances:
- Downtime - it could take days,
even weeks to clean up after a security disaster
- Cash Loss - the cost of lost
business combined with the expense of technicalsupport could
drain your bottom line.
- Confidentiality Leak - it’s
possible you may never be able to restore the damage of confidential
information that has been viewed, tampered with, and/or stolen.
- Legal Liabilities - if a security
breach that has damaged your company carries on to damage
business partners, employees, customers and other innocent
bystanders, you could be held accountable.
- Customer Dissatisfaction - negative
effects on your business can lessen your customer’s
confidence in your ability to meet their needs.
EVERY
Network is at Risk
With networks controlling more core business operations and
the use of new technology advancements, such as remote access
and wireless mobility, IT systems face new security challenges
year after year.
There are many internal and external threats to your network.
Protection comes from awareness. Are you aware of what your
IT system is up against?
Internal Threats
Today 60% of network assaults are initiated from within a company.
Surprising, isn’t it? You may be putting your business
at risk without even realizing it.
Internal threats include:
- vindictive employees
- incompatible software
- remote access programs
- email
- abuse of Internet access
External
Threats
Unlike property damage, network vandalism can reach your company
from half way across the globe. Hackers use attack tools that
can be easily downloaded off the Internet!
Assault methods include:
- trojan horse programs
- vandals
- data interception
- viruses
- denial-of-service
- social engineering
Types
of Attacks or Misuse Reported in a 12 Month Period
78% Virus.
59% Insider abuse of Net
access.
49% Laptop/mobile theft.
39% System Penetration.
37% Unauthorized access
to information.
17% Denial of Service.
10% Theft of proprietary
information
5% Telecom Fraud
Less than 5% Financial
fraud.
Less than 5% Sabotage.
Bennett’s Security Assessment Service
1. Discovery Process - evaluate your
current state of security, both hardware & software.
2. Usage Review - evaluate the usage
of your hardware and software components.
3. Determine Acceptable Risk - Bennett’s
Network Security Technicians will consult with your senior management
and IT professionals to help determine your acceptable level
of risk and your goals of a secure structure.
4. Recommendations - your end result
will include a map of your network, an overview of the assessment
and a security system recommendation.
For questions or additional information,
fill out our customer service form.
|
|
“Our
auditing firm uses the information from the Security Assessment
Report we get annually from Bennett Office Technologies to determine
how secure our computer network is and is used as a guideline
to develop and improve our security infrastructure. This assessment
reassures the auditing firm that our data and network is secure
and verifies their integrity.”
Renee Koubsky
IS Manager
WASP, Inc.
Glenwood, MN
Network Security Assessment


|