Read Bennett Gold LLP's privacy policies and practices regarding this web site.
LINK TO: Bennett Gold LLP's Privacy Policies and Practices. E-CommerceALERT.com is part of the Bennett Gold LLP web site network.
LINK TO: Bennett Gold LLP, Chartered Accountants, home page.
LINK TO: E-CommerceALERT.com Home Page.
CLICK to GO BACK to Main Page.

Research and retrieval of news articles by Bennett Gold LLP, Chartered Accountants


SPECIAL NOTE TO ALL VISITORS:
Effective December 31, 2012, articles are no longer being updated on this web site.
The site is now maintained as an historical archive, covering articles from the period 1999 to 2012.


SECURITY AUDITS PAY DIVIDENDS

Security planning and training does provide a return on investment, says analyst

Source: ZDNet UK

Posted on September 18, 2001

      The widespread perception that security does not offer a return on investment is wrong, according to IBM Global Services. Speaking at a recent briefing, IBM security specialist James Luke commented, "[Installing security products] is not a zero-return investment. Firms need to look at the broader benefits."

      Luke said recovery systems and system audits, which improve network security, can also increase efficiencies in other areas. Recovery systems offer a means of replacing data lost after an attack, but also reduce the time spent tracing and recreating lost files. System audits provide an insight into potential security breaches, and also offer effective inventory management, allowing firms to assess where upgrades are required and to monitor software licence compliance.

      Luke said firms should focus on security education, reporting mechanisms and emergency-response systems. He said that companies should encourage staff to share information on problems, even if problems start with their own machines: "If the first thing we do is discipline people when they report an incident, then they won't report it in future."

      In a separate initiative, security company Integralis is offering companies an outsourced forensics service. The Network Forensics Service will investigate security breaches after an attack, to identify unwanted visitors, compromised servers, dangerous code and back doors. Integralis also details files that have been viewed, copied or modified and gives advice on reconstructing systems. Integralis emphasized the benefits of full system audits. It said that companies should carry out comprehensive system logging and auditing to ensure that log files are checked and reviewed regularly.




CLICK to GO BACK to Main Page.

E-Commerce Alerts are issued by Bennett Gold LLP, Chartered Accountants as situations develop. Bookmark this site and check back often. Our e-mail address is: info@BennettGold.ca

In accordance with United States Code, Title 17, Section 107 and Article 10 of The Berne Convention on Literary and Artistic Works, the news clippings on this web site are made available without profit for research and educational purposes.


ALERT
ARCHIVES
Final Entries
2012
2011
2010
2009
2008
2007
2006
2005
2004
2003
2002
2001
2000
1999


LINK TO: Bennett Gold Chartered Accountants: A Licensed Provider of WebTrust Services.

WebTrust Is Your
Best Defense
Against
Privacy Breaches.

Get WebTrust
Working For
Your Site.