Four Steps to Better Network and Infrastructure Security

According to one Canadian IT consultancy firm and an analyst, when it comes to securing business networks and infrastructures, the channel can help customers be more secure by following four easy steps.

Perhaps the most common mistakes the majority of businesses make when it comes to network security, is a lack of awareness and proactive training, as well as a gap between IT and the rest of the business, said Vaclav Vincalek, president of Vancouver-based Pacific Coast Information Systems (PCIS). When any or all of these mistakes are made, businesses increase their chances of being more susceptible to security risks and dangers, he explains.

Candice Low, a research analyst at Info-Tech Research Group in London, Ont., said it's important to realize that the level of security one organization requires is different from another organization.

"Depending on the type of business you're in and the type of work you do, there are certain requirements you have to meet (for compliance)," Low said. "It depends on what (the business) is doing, but generally, there's at least some level of (security) protection in place."

Especially since many smaller businesses may not have an adequate IT budget or a full IT staff, Vincalek said channel partners can take advantage of the many opportunities that are present in this market.

Here are four easy steps the channel can act on to help increase the security and privacy of their customers' organizations.

1. More awareness and education

"Many people think that using more technology will solve the (security) problem," Vincalek said. "It's awareness and education that does. There's an abundance of security software and tools in the marketplace and we have to learn to use them smartly."

Low said in order to establish a "really secure environment," businesses need to ensure they have their technologies, policies and procedures and people in tact. All three of these things must work together to protect against vulnerabilities.

2. Involve IT more in business decisions and get them to understand overall business objectives

Often there's a divide between the IT department and the rest of the business, Vincalek said. To properly secure the network, communication and understanding becomes important, he advises.

"What's missing in some smaller organizations is the communication between IT and the business," he said. "What ends up happening is IT doesn't understand the business and the business objectives and the business doesn't understand IT security.

When this happens, Low said the non-IT staff decision makers could start to see IT as more of a burden, or as a department that gobbles up resources through "invisible" costs.

Continue Reading