Information Security It Is Your Business Terrell Brown City of Greensboro Water Resources

Topics to Think About General Computer and Network Security Computer and Network Professionals Everyone Else That Works There Hackers, Crackers, Spammers, and Jammers Social Engineering Protection and Backup

Network Security Firewalls, Filters, and Switches Global/Group Policies User Accounts and Passwords Domains Access: Public vs. Private Email Systems Security and Disaster Recovery Preparation Standard Operating Procedures

Computer Security Antivirus: Managed vs. Unmanaged Mailbox Filters Browser Settings: HTTPS and SSL, Block Lists Logins: Administrator Accounts, Automatic Logins Multiple Users

The Pros… Do you have an IT Group? Are they certified and experience? Is there more than one person responsible? Should you source in house or outsource?

And Cons Do you trust your people? Are you paying enough? Too much? Are your systems being audited?

What About Everyone Else? Education is Fundamental Check Up on Your People (Passively) Scare Them Enforce Your Policies

Know Thy Self – Know Thy Enemy

Hackers Reverse Engineers Systems Exploits Security Holes They Don’t Just Walk In Interlopers

Crackers Crack Passwords Break Encryption

Spammers Not really a security threat alone, but… It can promote bad email habits Some spammers are your own people

Jammers Typically Involves a DDoS Attack Distributed Denial of Service Often the easiest method of disrupting service Difficult to trace source and may be from within

Social Engineering Be Suspicious – I don’t recognize this person. Be Cautious – Check credentials. Secure Your Locations – Guards and key cards. Shut Up! – Public information request policies help Don’t Do The Work For Them

Protection and Backup Protect Your Systems and Data Backup Your Data Listen to the professionals and follow industry standards Backup Your Data Onsite and offsite back up will save you Redundant systems How quickly can you recover from a system failure Disaster Recovery Even with backups, if you have nothing to backup to… Then what do you do?

Don’t Wait… Please

Questions and Comments?