Many businesses go to great lengths
to secure their physical assets, but often leave gaping holes in their
electronic security protocols. While IT administrators can provide some protection,
it's up to the users to keep a network secure. Employers must ensure that
employees are trained on avoiding common risks that can compromise technology
or cause expensive repairs. Here are some critical security areas that
employees should be trained on.
Phishing
Phishing occurs when someone attempts to get employees to click on links to
fraudulent websites or to provide or verify personal information. Train
employees to never click email links from individuals whom they don't know.
If an email looks questionable, call the person or company sending it to verify
that it is really from them. Finally, educate employees to never provide
personal company or employee information to anyone. All legitimate requests for
personal information must go through an HR representative or company leader.
Viruses
Server-wide antivirus systems provide some protection. However, viruses can
still slip by, especially very new ones. Teach employees to never download
files from individuals that they don't know or from websites that are not
well-known. Additionally, instruct employees to immediately notify the IT
department if their antivirus system catches a virus so that their system can
be assessed for additional damage.
Unapproved Software
New software is developed daily and much of it has real business benefits.
However, much of the freeware that is available from the Internet isn't
secure. The files themselves can contain viruses or the products can have
security holes that allow hackers to access your computer through the software.
Businesses should have an approved software list and employees should not
install anything not on the list.
Mobile Device Security
Today's mobile workforce uses phones, laptops and tablets in addition to
standard desktop computers. However, these items can also cause security
issues. Develop protocols for the types of software and apps that can be
installed on these devices and periodically check to ensure employees are
adhering to them. Items like laptops and tablets also need functioning
antivirus software running on them. Additionally, instruct employees to never
connect their personal devices to work devices to prevent the infection of the
network.