by: Rick Parrott, MCP
Most small business networks grow and evolve as the business grows.
In one way, this is good.
It shows the business is growing, becoming stronger.
Unfortunately, from a network perspective, it can be a disaster in the making.
Most small business networks are setup in a peer-to-peer (P2P) format.
In contrast, large corporate networks are setup in a domain format.
What does this mean to you?
First, let us define the two network formats.
In a P2P format every PC is responsible for its own security access.
Basically, each PC is equal to every other PC in the network.
These networks generally consist of less than ten computers and require a large amount of administrative overhead to function securely.
In this format the attitudes of the user population is of prime importance.
If they have a high level of security conscience then your network will be more secure, if they don?t your network will be wide open to insider exploitation.
You can see the problem.
Ten computers and ten administrators equal little accountability.
In a domain system there is a single point of administration, your network administrator.
He is responsible for maintaining the network.
A network setup in this format consists of at least one server, a domain controller, to administrator the rest of the network.
This domain controller manages user and computer access, freeing the network administrator from the necessity of touching every PC in the network.
When a user logs onto her PC in a P2P network she only authenticates on it, in a domain system it is a little more complicated.
In a domain system she logs onto her computer, her login ID is first checked with the domain controller.
If it is found she is granted access to the network resources assigned to her.
Then she is allowed to log on to her desktop.
If her ID isn?t found then she only has access to her local PC.
Now that you know a little about the two network structures you can see the advantages of the domain design.
As stated earlier this format requires planning to achieve.
You must sit down and outline what you want your network to accomplish.
Consider what access your users really need to do their jobs.
In the computer security world this is called granting the least amount of access required to do the job.
Do your sales reps really need access to your financial files?
What about external vendors?
All of this needs to be thought out and addressed.
Here?s an example of how I setup a small sales organization.
This business consisted of about eight employees and the two owners.
With the assistance of the owners we defined three user groups.
The owners group was granted full and complete access, while each of the other groups received lesser and different accesses.
The admin group received access to the financial and administrative functions, and the sales groups receive assess to the sales and customer management data.
Specifically, they were excluded from the financial and administrative and the owner?s functions.
Additionally, we setup auditing of both successful and unsuccessful attempts to view certain types of data.
We did this to add a layer of accountability to the network.
This increases the security of their customer?s data because we can now tell who and when the data was accessed.
Network security personnel know that most network security breaches occur from the inside! In my experience most small businesses use the P2P format because it is the easiest to implement and because they don?t know the security compromises they are working under.
This can be a ticking time bomb for your business.
Eventually, you will experience a security lapse that could land you in court.
For instance, you have an employee leave your business.
This employee downloaded all of your customer data before he left.
Next, he sells this data to someone who uses it to steal the identity of several of your customers.
Eventually, this theft is discovered and traced back to your employee.
Your former customers in fully justifiable outrage take you to court charging you with negligence.
Specifically, they hold you responsible for failing to safeguard their personal information.
Your case will be much stronger if you can show you have positive control of your network.
You can point out your security procedures.
Employee logon auditing, security updates, acceptable use agreements, etc.
In short you can show that you have taken the steps that a reasonable person would take to secure your network and customer data.
Hopefully, your lawyer can then place the blame directly where it belongs.
On the employee who stole the information in the first place.
Ask you attorney about this! Don?t just take my work for it, I?m not a lawyer.
Remember, network security is a result of through planning, not hap hazard improvisation. Give your network the same attention you give to the rest of your business.
If you do not have the skills or the time to be your own network administrator, you can contract with someone to handle this for you on a part-time basis.
Just make sure they are reputable, you are putting your business in their hands.
About The Author
Rick Parrott, MCP - SA Secure, a San Antonio Texas company specializing in desktop support and help desk services for small to medium businesses.
|
Are You Financially Prepared to Have a Baby?
Are You Financially Prepared to Have a Baby?
by: Nathan Dawson
Perhaps you are a newly married couple doing some family planning, or you may have just discovered that you have a little ?surprise? coming your way. Whether you are barely trying to get the hang of marriage and money management, or if you?re simply looking ahead to a future with a baby in it, a little financial planning will go a long way once your bundle of jubilation comes along.
The US Department of Agriculture estimates that a middle income family will spend a bare minimum of $250,000 to raise a child. Yikes! Don?t worry! Time is on your side. College won?t be for another 18 years, at the very least. But that doesn?t mean that you can slack off on saving, either.
A financial advisor can help you to realistically assess your income and your debts. More importantly a professional can help you set a realistic budget. Doing this will help you set sensible goals each month...
Are You Financially Prepared to Have a Baby?
Financial planning > Are You Financially Prepared to Have a Baby?
His And Her Finances
His And Her Finances
by: Simon Harris
It?s difficult to learn how to manage finances together when you?ve been managing your finances on you own, for better or worse, up until now. But when you become part of a couple, many things change, and your finances are no exception! Some couples take the traditional path of blending all their finances together, however more and more couples are deciding to keep their finances separate. .
What are the benefits of each option? The benefits of consolidating funds into one checking account includes easier record keeping, simplified money management (ideally), and less paperwork when applying for a loan. In addition, the blending of finances can create a ?unified front? in that aspect of a relationship that simply can?t be argued with. Obviously, the drawbacks are that both people are actively using the account and that will make it harder to track transactions and monitor your balance when you don?t know...
His And Her Finances
Financial planning > His And Her Finances
Making Sense of Medicare Part D ? Drug Plan Formularies
Making Sense of Medicare Part D ? Drug Plan Formularies
by: Jeremy Cockerill
One of the most difficult portions of the new Medicare Prescription Drug Plan to navigate is the various drug plans? formularies. Selection of a plan is based on what drugs you are on and which plans provide the best coverage for your selected drugs. In order to select the optimal plan for themselves, it is critical that Medicare-eligible individuals understand how these formularies...
Network Security ? Not With a Peer-toPeer Network! Making Sense of Medicare Part D ? Drug Plan Formularies insurance quotes
Financial planning > Making Sense of Medicare Part D ? Drug Plan Formularies
Network Security ? Not With a Peer-toPeer Network!
Network Security ? Not With a Peer-toPeer Network!
12 Quick Tips For Getting A Mortgage
12 Quick Tips For Getting A Mortgage
by: T. O' Donnell
1. Watch out for the 'Deal Of A Lifetime', the deal that seems too good to be true. The company may be saving money by cutting back on their level of service.
2. When getting a fixed rate: get a written statement which details the interest rate, how long the rate is fixed for, and the conditions attached.
3. When interest rates fall: try and leave your repayments as they are. You will therefore...
Network Security ? Not With a Peer-toPeer Network! mortgage calculator Financial planning
Financial planning > 12 Quick Tips For Getting A Mortgage
Network Security ? Not With a Peer-toPeer Network! hotels
Network Security ? Not With a Peer-toPeer Network! Financial planning tvs
Network Security ? Not With a Peer-toPeer Network! gift basket