.aspx)
1. Implement an acceptable use policy
Implementing a set of ground rules for email and Internet use enables you to make your expectations of what is acceptable clear. ‘Loss of productivity’ has become the top reason for businesses to implement acceptable usage policies. This acceptable usage policy is a written agreement between an employer and employee and enables employers to enforce the policy and to take action should employees continue to misuse the Internet and email.
2. Use technology to enforce policies
How do you know if employees are misusing the Internet? Employers are often unaware and unable to prevent employees from misusing the Internet. The average UK office worker spends an hour and a half a week of work time surfing the web for personal use. Take an employee on an annual salary of £20,000, their non-work related browsing is costing the business £780 a year!
There are now affordable solutions which help protect companies from staff IT misuse. This technology enforces your organisation’s Internet policy which in turn increases employee productivity. Rules can be configured and the level of control can be determined by type of content and time periods. For example you may want to allow access to Facebook and Hotmail at lunchtime but not during core business hours.
3. Act quickly when staff leave
According to a recent survey by Infosecurity Europe, over 1/3 of office workers in the UK would steal company information if the price was right. This highlights the fact that companies must be aware of risks, particularly when staff resign. Security and backup solutions should be in place to prevent possible ‘revenge attacks’ affecting your business. Staff are becoming increasingly highly skilled in IT and thus have the potential to cause a lot of damage from a security perspective. When an employee leaves, make sure their IT access is terminated immediately and all previous computer work is ‘logged’.
4. Eliminate weak passwords
How many times have you seen users writing down passwords on a Post-IT note and attaching them to the screen or keyboard of their PC? Traditional, static passwords can be copied, lost or stolen, so present a business with security challenges. A stronger password validation solution must be in place and such solutions are readily available for small and medium sized businesses.
5. Train staff in security risks
The weakest link in businesses when it comes to security is often the staff. Integrate security into normal business behaviour, through clear policies and staff education. Businesses need to ensure employees are aware of security threats and are trained on the policies and procedures.