IT Security in Practice

IT Security is Not Just Compliance

Attacks continue to strike networks more than ever. Many of these attacks come from the outside and are easy to handle, leading executives and IT personnel into a false sense of security. Other attacks are either targeted (or come straight from the inside!) and use sophisticated techniques. They are harder to detect, but still exist and cost you money.

Our experience is that while most companies are focusing on compliance and they spend too much money on overpriced hardware and software, the protection of data secrecy and integrity is neglected. The impacts of data loss or a breach are dramatic. When it happens, direct and long-term costs far outweigh the small amount required for keeping an eye out in a realistic way. Ignoring the very real risks DOES cost your company money eventually. Traditional solutions include firewalls, anti-virus and intrusion detection systems. While the use of these tools is generally a good idea, they will not even come close to a sufficient level of safety in the real world.

With an understanding of how security really works, you can allow yourself to spend much less on expensive hardware and software and still guarantee a higher level of security throughout your network using practical approaches that include pro-active logging, reporting, monitoring, regular penetration testing, and whitelisting.