Data Security and Backups

Showing posts with label rights;accidental deletion. Show all posts
Showing posts with label rights;accidental deletion. Show all posts

Friday, 30 March 2012

Top 9 Data Security Risks

Here’s the list of Top 9 Data Security Risks. I thought to rank them by them causing maximum damage.
Risk 1: Access to data by unauthorized people
§  Simple passwords should be replaced by stronger, multi-factor
    authentication passwords.
§  Password policy should be transparent throughout all the logins
    required. Passwords should be between 6-15 long, must
    include Upper case, lower case, Number and 1 special character.

Risk 2: Modification of data, by mistake or knowingly
§  Data integrity is the key to the success of any organization.
§  All data sent over the internet should be send using strong encryption
Risk 3: Corruption of data due to malware infections
§  Growth in internet usage has also seen the growth in malware
    infections which significantly contribute to data corruption.
§  Files should always be downloaded from reliable sources.

Risk 4: Internet Connectivity failure
§  Many Organizations these days have several applications over
    the Internet, in such a situation failure of Internet can lead to
    data loss.
§  Backup service provider should be if in case primary fails
Risk 5: Accidental data deletion
§  Backup should be taken regularly and should be done automatically
    with option to restore data from multiple versions
§  Several companies lack well-conceived data recovery strategies
    had to bear both financial as well as legal losses.

Risk 6: Loss of data due to Software failures
§  Pirated copies of software should not be bought even though
    these copies can be purchased at a lesser price.
§  Misconfiguration and incorrect software usage have created
    several issues.

Risk 7: Improper rights assigning
§  Every program and every user of the system should operate using
    the least set of privileges necessary to complete his job.
§  A unique ID and password should be given to each user. Users
    should be given read only access to the applications present.

Risk 8: Unauthorized Physical access to laptops, desktops by unauthorized people
§  Prevent unauthorized entries into the premises and other
    sensitive areas.
§  Visitor control procedures should be employed to restrict the freedom
    by which a visitor can access the premises.

Risk 9: Fire
§  Heat-generating equipments such as copiers, work processors, coffee
    makers and hot plates should be kept away from anything that might
    catch fire.
§  Sprinklers and fire/smoke detectors should be installed in storage
    areas.