Security // Risk Management
News
11/30/2007
04:54 AM
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Symantec Offers Tips for Awareness Day

Symantec gives advice for National Computer Security Day

CUPERTINO, Calif. -- 1. Create a Security Aware Culture-To be effective, organizations should have an ongoing security awareness program in place that includes continuous training, communication, and reinforcement. A one-time presentation or a static set of activities is not sufficient to address the ever-evolving threats to the security landscape. Equally important, an awareness program must influence behavior changes that deliver measurable benefits.

2. Establish Processes-While the cause of IT failures can include technology and environmental compatibility issues, the root cause of IT failure frequently lies in process and skills issues. Regular or routine activities should have established processes, which are known to all.

Processes enable workers to treat all components the same, reducing effort and potential risk that would be entailed if each component is managed differently.

3. Have a Remediation Strategy in Place-The absence of a solid security awareness and remediation strategy in the event of business disruptions is becoming an increasing priority as IT-related incidents are attracting an ever increasing share of the public's attention. When designing a remediation program, organizations should keep IT risk management in mind and follow several best practices as outlined below:

  • Improve incident reporting and handling
  • Properly classify and protect intellectual property
  • Design and implement secure applications and infrastructures
  • Demonstrate the importance of proper backup procedures
  • Increase attention to system performance in IT systems design
  • Follow internal IT safeguards and business policy requirements in an effort to help meet compliance standards such as FISMA, HIPAA, Sarbanes-Oxley, COBIT, and ISO 17799:2000

Symantec Corp. (Nasdaq: SYMC)

Comment  | 
Print  | 
More Insights
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Elite 100 - 2014
Our InformationWeek Elite 100 issue -- our 26th ranking of technology innovators -- shines a spotlight on businesses that are succeeding because of their digital strategies. We take a close at look at the top five companies in this year's ranking and the eight winners of our Business Innovation awards, and offer 20 great ideas that you can use in your company. We also provide a ranked list of our Elite 100 innovators.
Video
Slideshows
Twitter Feed
Audio Interviews
Archived Audio Interviews
GE is a leader in combining connected devices and advanced analytics in pursuit of practical goals like less downtime, lower operating costs, and higher throughput. At GIO Power & Water, CIO Jim Fowler is part of the team exploring how to apply these techniques to some of the world's essential infrastructure, from power plants to water treatment systems. Join us, and bring your questions, as we talk about what's ahead.