CIO
—
Q: We have conducted some informal research on virus protection software. Our research indicates that the three major virus protection products (Norton, McAfee and Computer Associates International) are basically equivalent and that any variation in performance results from variation in version control practices and local settings. Would you say this is accurate?
A: I would have to see your findings up close to offer a specific opinion. However, based on my experience in selecting antivirus products for the U.S. Department of State, I feel that you are headed down the right path. There are only so many ways to identify, contain and eradicate malicious code. The key in this market is to be the first to update virus signatures and get them to the end user for a rapid install, and to take into account the number of viruses that are "in the wild"?which will always be ahead of the signature update.
Q: We are seriously considering having a professional audit conducted within our organization to ensure the highest level of security possible. Do you recommend such an audit? And if so, what companies might you suggest we contact? What is the standard hourly rate for such services?
A: I would recommend an audit only if you’re going to get real solutions along with the list of identified problems. Too many companies are making a quick buck by running some automated auditing tool and adding a cover letter to the results. Ask the potential auditor to show you a sample of its product report and ask that a value-added solution be provided. Hourly rates range from $150 to $500 per hour, depending on the reputation of the company and the perceived quality of the audit team.
Q: What is the relative risk of having PCs connected to the Internet via modems and connected to a mission critical LAN-WAN via Ethernet? Is it likely or even possible that a virus could be introduced to a business network?despite good virus detection software?through a user’s separate modem connection, even though the modem and the Ethernet cannot run simultaneously?
A: Your concern is valid, and the threat is real. PCs connected as you describe are definitely vulnerable to possible introduction of backdoor software or viruses. While a user is connected to the Internet by a dial-up connection, someone could introduce a program that would map their network and place the results into a database for retrieva
