Guidance from the UK

The United Kingdom’s Centre for the Protection of National Infrastructure (CPNI) offers current and relevant documentation to assist organizations to address threats and vulnerabilities in a networked world. CPNI publishes an array of documentation centered on information, personnel and physical security.

One such publication is the Ten Guidelines, a list of the 10 things that organizations should be doing to stay secure.

1. Carry out a risk assessment to decide on the threats you might be facing and their likelihood. Identify your vulnerabilities and the potential impact of exploitation.
2. If acquiring or extending premises, consider security at the planning stage. It will be cheaper and more effective than adding measures later.
3. Make security awareness part of your organization's culture and ensure security is represented at a senior level.
4. Ensure good basic housekeeping throughout your premises. Keep public areas tidy and well-lit, remove unnecessary furniture and keep garden areas clear.
5. Keep access points to a minimum and issue staff and visitors with passes. Where possible, do not allow unauthorized vehicles close to your building.
6. Install appropriate physical measures such as locks, alarms, CCTV surveillance, complementary lighting and glazing protection.
7. Examine your mail-handling procedures.
8. When recruiting staff or hiring contractors, check identities and follow up references.
9. Consider how best to protect your information and take proper IT security precautions. Examine your methods for disposing of confidential waste.
10. Plan and test your business continuity plans, ensuring that you can continue to function without access to your main premises and IT systems.

CPNI also publishes technical security notes “designed to offer practical advice on dealing with topical issues and are aimed at information security professionals.” Recent topics include Database Security, and Spyware.

►

The Internet's Dark Side

A couple of years ago, the Sacramento Valley Hi-Tech Crimes Task Force put together an educational program on Internet safety and took it on the road to educators and parents. The presentation was—and still is—an eye-opening review of the bad things that can happen to your children on the Internet.

If you have children who use a computer connected to the Internet, or if you use a computer connected to the Internet, you ought to view this slide show, or at least browse it.



►