SCCyberworld

Tuesday, August 5, 2008

IT Teams Countdown to Olympics – “When Michael Phelps Takes The Medal Stand, Will He Take Your Network Down Too?"

With only 4 days until the opening ceremonies, will the Olympics plague IT teams this year – the first time copious streaming content will be available?

NBCOlympics.com will be offering 3,600 hours of streaming coverage of the games, as well as blogging, analysis, and even fantasy league gaming.

How can Malaysian enterprises prepare themselves for potential “August Madness”? High volumes of digital traffic will be flowing, drawing the eyes of cyber criminals. What attacks are lurking on the wires that computer users should be aware of during the games? Derek Manky, a well-renowned network security expert at Fortinet shares Fortinet’s best practices for online safety at your workplace.

Fortinet’s 10 best practices for online safety during the Olympics and beyond!
1. Have Clear Internet Use Policies — Make sure employees and new hires know the corporate policy on Web use, whether their Internet usage is tracked and how this impacts their performance review.
2. Avoid Draconian Filtering Practices — Businesses that use filtering solutions to control Web site access should communicate what types of sites are blocked, and if the NBCOlympics.com site will be restricted. While blocking all access is an option, consider offering limited access so employees can enjoy the games without impacting their work.
3. Instill good will among the workforce – Suggestions to consider:
§ Off hours access: Set filters to enable access before work, during lunch and after work hours
§ Periodic access: Set filters to limit access to a preset amount of time (15 minutes, 30 minutes, etc.)
§ Localize full access: Enable access to the Olympics from cafeterias and break rooms
4. Never Follow Unsolicited Links Suggested by a Third Party — Instead, open your browser and type in the URL for the site you want to visit.
5. Use and Update Security Solutions — Have an effective anti-spam, web-filtering and anti-virus solution in place and make sure to keep them updated
6. "Pick Before You Click" — Take a couple of seconds to have a look at the link you are about to follow. Always be aware of links attempting to look legitimate by using typos or odd sub-domains.
7. Guard Privacy — Never give out personal information such as bank accounts, credit cards or passwords at the request of a third party.
8. Know Thy Vendor — When giving out personal information to conduct an online transaction, be sure the vendor is a trusted source and the transaction is conducted over a secure connection.
9. Educate Key Issues — Employees should be well aware of security risks, especially during heightened alert periods. Simple education to protect against social engineering attacks is recommended.
10. Patch, Patch, Patch — All software, especially browsers and operating systems, should be up to date with the latest updates / patches. This will ensure that exploit holes are closed so that remote attackers cannot utilize known vulnerabilities.

No comments: