The fourth guide in our ‘Forgotten Security’ series, Forgotten Security: Keeping up to date, is targeted at IT teams, encouraging them to take another look at their procedures, ensuring that they cover both software and equipment.
A fully updated system is protected against the latest threats.
For example, we’ve seen hospitals falling victim to the Conficker attack months after the patches were released.
If the systems had been updated as soon as the patches were available they would have been immune to infection.
It’s not just software we need to keep updated.
Failure to update equipment such as routers could result in organisations’ websites falling victim to denial of service attacks which could impact reputation and sales.
The guide, which is published today and available for free download from our website or as a pdf, here http://www.network-box.co.uk/sites/default/files/NBWP_forgotten_security_4_up_to-date.pdf, advocates a considered approach to installing updates.
Before installing, it’s important to ask whether the update is actually needed, as installing the wrong patch can crash an entire system.
To help clarify the situation, the guide provides a checklist for IT teams to use before initializing the update process.
For example, is the patch provided by the system vendor? Is the patch compatible with the company’s system?
Having fully updated and patched software and equipment is a vitally important element of a company’s IT security, but is often overlooked.
Businesses need to make system security the primary concern when they purchase a system, service or device.
They need to ask essential questions such as:
• How easy is the system to update?
• What does the vendor do to make you aware about any issues?
• Where can solutions be downloaded and installed?
• How can patches be tested?
• Can to roll back the system to its pre-update status?
All of the ‘Forgotten Security’ guides are available for free download from the Network Box website.
* * *
Stay Informed With ISR News Feeds and Email Alerts Here:
Simon Heron has over 19 years experience in the IT industry, including nine years experience in Internet security. During this time he has developed and designed technologies ranging from firewalls, anti-virus, LANs and WANs. Simon has an MSc (attained with Distinction) in Microprocessor Technology and Applications, and a BSc (Hons) in Naval Architecture and Shipbuilding and is a CISSP (Certified Information Systems Security Professional). Prior to Net Caboose, Simon co-founded Network Box Corporation (UK) Ltd and was Managing Director, finally merging this franchise with the parent company in 2006. Before Network Box, Simon joined the British Antarctic Survey (B.A.S.) as science project leader, and spent two Antarctic winters at the research station Halley in the Antarctic, developing and enhancing graphical technologies in the harshest of conditions. Simon also has a company called Net Caboose which deals with Identity and Access Management and is also development house.
Network Box Limited (NBL) is an international managed security services company, specialising in unified threat management (UTM). It continuously defends the networks of its customers using PUSH technology to instantaneously update protection, from 12 Security Operations Centres spread around the globe. NBL’s customers in Asia, Australia, North America and Europe include companies such as BMW, Nintendo and Toyota, as well as banks, utilities companies and government organisations.
The Publisher gives permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author and to Information-Security-Resources.com
