kdr ebusiness

We know that security is not always high on your agenda, but you have already got a firewall. Box ticked, job done.

Unfortunately in our experience, and especially in the small business market, we regularly come across incorrectly configured firewalls that are not actually protecting anything! You wouldn’t leave your office unlocked, but your IT systems could be open all hours, despite the fact that you have a firewall!

Testing whether you have correctly locked your office door is easy, but verifying that your IT systems are secure is not.

We offer a very simple proposition; let us perform a security audit of your IT infrastructure, for free. Then we’ll work with you and your existing support company to bring your security up to industry standard, and then we’ll help you keep it there.

If you would like to book your free IT security audit, please get in touch

Disclaimer: Offer is open to Isle of Man companies only.

Bookmark to:
         

Wireless Networking was designed without a great deal of thought on how it could be secured. The first available security method was known as WEP, or Wired Equivalent Privacy. Unfortunately due to errors in it’s implementation it soon fell to attacks from determined hackers. As a result it is now considered worthless for any serious security use.

Soon after WEP was hacked, a better security system came along. WPA, or WiFi Protected Access, was a great improvement over the original and it quickly became the choice of anyone who was serious about the security of their Wireless Network.

Unfortunately there is now news that WPA has been partially cracked. This will inevitably now lead to further work by hackers to break this system, and ultimately it may become as worthless as WEP. At this point in time no-one knows how long this will take, but you should consider this issue when choosing a Wireless Network in future.

One final point to consider is this, if you do not know what type of security your company is using on your wireless network, you may be in breach of the Data Protection Act. The seventh principal of which states:

“The seventh principle (measures against misuse and loss of data)
17. Having regard to the state of technological development and the cost of
implementing any measures, the measures must ensure a level of security appropriate to —
(a) the harm that might result from such unauthorised or unlawful processing or
accidental loss, destruction or damage as are mentioned in the seventh
principle, and
(b) the nature of the data to be protected.”

The key term here is “ensure a level of security appropriate”. If you must use a Wireless Network, then you should use WPA2 because this is the best currently available. Using anything less means that you are not protecting the data on your network. Given the latest news about WPA, you should also keep an eye out for it’s replacement!

Bookmark to:
         

Because security should run through your IT like the lettering on a stick of blackpool rock, a security audit may reveal plenty of areas for improvement in your IT infrastructure. There are several frameworks you can choose to perform your IT audit. One of the most popular is the ISO 27002 standard (previously known as ISO 17799). This is a code of practice that covers the following areas:

• Structure
• Risk Assessment and Treatment
• Security Policy
• Organization of Information Security
• Asset Management
• Human Resources Security
• Physical Security
• Communications and Operations Management
• Access Control
• Information Systems Acquisition, Development, Maintenance
• Information Security Incident management
• Business Continuity
• Compliance

By assessing each of these areas in turn and by measuring your own arrangements against the code of practice, deficiencies in your IT infrastructure are revealed. Fixing those deficiencies will result in a more efficient, stable IT platform for your business.

If you would like to arrange an audit of your own IT infrastructure, please get in touch.

Tags: IT, audit, ISO 27002, ISO 17799

Bookmark to:
         

If your company uses Information Technology, you need an IT Operations Schedule. The purpose of the schedule is to ensure that the most important tasks are not forgotten. Another reason you need a written schedule it that it helps you to understand what you need to manage. Writing down tasks also clears up areas of doubt when deciding who should be responsible for the activities.

If your IT is really complicated then you might wish to consider a dedicated scheduling package. However for many small and medium sized companies this would be overkill. Most email programs have a very good calendar with the ability to set recurring appointments and tasks with reminders. These are ideal to create and manage an IT operations schedule.

KDR EBusiness Limited offer IT Management Services designed to reduce complexity, improve costs and ensure that your Information Technology services support your business goals.

Bookmark to:
         

If you were to total up all the disk storage you have available in your computer room, you might be surprised at the total. We conducted this exercise with one of the larger Isle of Man based companies and we found that they had 300% more capacity than they really needed.
We believe this to be a typical picture amongst companies that have no formal storage management plan in place. All that extra capacity costs money, takes up power and produces heat that must be dealt with. By examining how much storage you really need, and by creating a storage management plan, you can consolidate your requirements and save money.

Backups are another area where savings can be found. Over time, as new servers are added, more backup units appear, each incompatible with the last. This results in a large amount of expensive backup tapes requiring off-site storage. By considering your storage and backup as an integrated pair you can balance your requirements, save money and ensure that recovery from failure is much easier to perform.

Related Article: Cost Saving Idea: Reduce Server Count

Tags: disk storage, Isle of Man, storage management, Backups, recovery

Bookmark to:
         

The role of the IT manager is dependent on several factors, with the top three being organisation size, industry sector, and geographic distribution. The detailed IT Managers checklist for each of these would be widely different, but for the purposes of this article I would like to concentrate on the common threads that should appear in every IT Managers checklist.

As an ex IT manager of a small/medium sized enterprise (<250 staff, finance industry, 3 locations) my own checklist had four items at the top level, and I think that this was a good starting point which helped me to prioritise and concentrate our efforts.

• Legal/Statutory
• Operational/Support
• Projects/Development
• Strategic

Legal/Statutory
These are the must do things that ensures your organisation stays on the right side of the law. Within the IT world there are an ever increasing number of legal and statutory requirements. A good IT manager should have a working knowledge of them and know how they might affect the company they work for.

Operational/Support
Operational encompasses the scheduled and regular tasks that should be done in order to maintain a stable and available set of IT services. Support deals with services that are not working properly.

Project/Development
Projects are intended to achieve a specific benefit or business objective, and most IT development, coding, infrastructure improvements, etc., would fit within this category.

Strategic
Here I would include IT finance and budgeting. Work on policies and procedures, awareness of emerging technologies. But most importantly the IT manager should understand the business direction and drivers, and determine how IT can assist in the success of the company.

As an IT manager this helped me to keep the big picture in mind. But what about you, and bearing in mind the high level, is there anything else you would add to this checklist?

Later in Part #2 we’ll put a little more flesh on the bones.

Tags: IT manager, checklist

Bookmark to:
         

Long established companies often end up with numbers of legacy systems running on lots of different servers. The management of these servers ends up becoming more expensive than necessary.

When Windows NT was the operating system of choice for many IT departments, Microsoft recommended that one server per service was the best approach. This mindset is still in evidence within many organisations today.

Now that there are robust Virtualisation technologies, IT departments need to re-examine their approach. Virtualisation allows multiple servers to run on a single box. The right strategy can produce significant savings on maintenenance costs and disaster recovery charges, as well as reductions in floor space, power and air-conditioning requirements.

You can also benefit from improved systems performance, and less downtime. If it’s not already part of your planning cycle, you should review your server requirements at least once per year.

Related Article: Cost saving idea: Storage and Backup

Tags: legacy, management, Microsoft, Virtualisation, strategy, maintenenance, disaster recovery

Bookmark to: