Ten Rules of Information Security for the Smaller Business

We live in an analogue world and, increasingly, work, play and do business in a digital one. Our assets, the things we own in either world and that are valuable to us, are also attractive to others. As we've extended our field of activity into the digital World Wide Web (or Internet), as we've developed new technologies and acquired new skills, so we've been followed by all those anti-social elements who plagued us in the analogue one. It's important to realise that the Internet is no less safe and no more safe than the physical analogue world. However, if wedon't take the appropriate precautions, we run a severe risk to our security. Cost-effective information security requires a combination of behaviour and tools that are appropriate and proportionate to the cyber-threats and computer-related risks that we face. Our starting point, therefore, must be to understand the threats and risks.This highly-informative pocket guide sets out clearly and succinctly the basic commonsense precautions which need to be taken, and also highlights the Ten Rules which should be applied. The implementation guidance for each of the Ten Rules is aimed primarily at small businesses, people with a single computer installed in a small office or working from home, and at micro-businesses which, if they are operating two or more computers, are doing so either on a peer-to-peer network or on a small network with a single Internet gateway.

Table of Contents:
Introduction Threats and Risks Looking ahead Implementation Guidance Identify your operating system 1 Safeguard your computer 2 Use strong passwords and a screensaver 3 Update and patch your operating system 4 Have an up-to-date firewall 5 Have up-to-date anti-malware software 6 Act anti-spam 7 Secure Wireless Networks 8 Be sensible - don't take unnecessary risksBe alert - pay attention - be sensible E-cards File sharing Identity theft Internet cafes and other public computers Online auctions Online charities Online payment services Online recruitment services Online shopping PDAs and mobile phones Phishing Safe surfing for children Scams, frauds, 419s Spoofed e-mail addresses and Websites 9 Back it up 10 Fix problems as soon as they arise Glossary Further reading Useful websites

About the Author :
Alan Calder - author is a founder director of IT Governance Ltd. Before that, he was CEO of Wide Learning, a supplier of e-learning, of Focus Central London and, before that, of Business Link London City Partners (BLLCP). He was also a member of the DTI's Information Age Competitiveness Working Group. He was for many years a member of the DNV Certification Services Certification Committee, which certifies compliance with international standards including ISO27001 Alan works with a wide range of clients on IT governance and information security projects which include design, implementation and deployment of management systems and the development and writing of White Papers. He also speaks at seminars and presentations on IT governance, regulatory compliance and information security. Alan can be contacted on acalder@itgovernance.co.uk.