Security Squad Keeping your Equipment and Information Safe Security Squad Video Series, Part 1 Presenter, Title University of ________________ 3/24/2016 Security Squad Video Series Security Plan Objectives 1. Greater understanding why security is needed to protect your business 2. Recognition of small business security concerns 3. Basic knowledge of tools and actions needed to fix security gaps 3/24/2016 Security Squad Video Series The Security Plan Plan Overview 3/24/2016 Security Squad Video Series Why Develop a Plan • Data loss and equipment failures are expensive • Identify theft is a serious problem • Mistakes do happen • Most critical loss areas can be fixed 3/24/2016 Security Squad Video Series Security Plan Topics • • • • • • • • Inventory – Tallying What you Have Passwords – Creating Strong Passwords Backups – Making Secured Copies Viruses – Protecting Your Office from Malware Wireless – Limiting Your Exposure Firewalls – Stopping Hackers at the Door E-commerce – Buying and Selling Safely Online Employee Policies – Protecting the Company and Employees 3/24/2016 Security Squad Video Series Security Squad Team • • • • You Trusted employee/s Technician/s Human Resources (if applicable) 3/24/2016 Security Squad Video Series Equipment and Software Inventory Tallying What You Have 3/24/2016 Security Squad Video Series Key Points – Equipment List • Develop an inventory management system • Items to record are: – – – – – – – 3/24/2016 Model Date Purchased and price Serial number IP Address MAC Address Location & Primary users Warranty dates Security Squad Video Series Key Points – Software List • Items to record are: – – – – – 3/24/2016 Description Version Date purchased Operating license, serial number or key code Primary users and location Security Squad Video Series Good Inventory Practices • • • • Store copies in a secured, off-site location Permanently label equipment Update list regularly Assign person to maintain list 3/24/2016 Security Squad Video Series Inventory What is your current inventory process? • • • • 3/24/2016 Do you even have an inventory list? Is it up-to-date? Do you have all the needed information? Who’s in charge of keeping the inventory list current? Security Squad Video Series Passwords Creating Strong Passwords 3/24/2016 Security Squad Video Series Good Passwords • • • • Random letters, numbers and symbols At least 8 characters long No words found in dictionary No names, teams, abbreviations, shows, movies, hobbies or anything readily recognizable. Junebug24 vs. J*9!b$G! 3/24/2016 Security Squad Video Series Good Password Practices • Secure passwords in a secured location • Use a password generator and “lock box” to secure passwords (optional) • Do not use “remember password” feature • Never share passwords with anyone • Do not use default passwords, change them • Install password activated screen savers • Change passwords immediately if they’ve been compromised 3/24/2016 Security Squad Video Series Backups Making Secured Copies 3/24/2016 Security Squad Video Series Key Points – Backing Up • Determine how often to backup your systems – Weekly vs. Daily • Backup plan – Incremental, multi-layer – Only data files – Entire system backup 3/24/2016 Security Squad Video Series Key Points – Backing Up • Select storage devices – USB flash drives – DVDs – External hard drives • Online backup – End-to-end encryption – Needs larger bandwidth 3/24/2016 Security Squad Video Series Backups What is your current backup system? • How often are you files backed up? • How are they stored? • Who’s in charge of backing up files? 3/24/2016 Security Squad Video Series Viruses Protecting Your Office from Malware 3/24/2016 Security Squad Video Series Key Points – Viruses Anti-virus musts • Install on every computer! • Schedule automatic updates • Use only one anti-virus software • Scan incoming files 3/24/2016 Security Squad Video Series Key Points – Viruses Computer Update musts: • Download latest OS “fix or patches” • Schedule automatic updates 3/24/2016 Security Squad Video Series Good Prevention Practices • Uncertain email attachments • Block known carrier files - .exe, .bat • Block files with more than one file extension – happydays.jpg.vbs • Use only reputable websites • Delete spam emails • Install anti-virus on smart phones • Conduct employee training 3/24/2016 Security Squad Video Series Malware Definitions • • • • • • • 3/24/2016 Virus Trojan Worm Adware Spyware Crimeware Keystroke logging Security Squad Video Series Famous Viruses FREUDIAN VIRUS: • Your computer becomes obsessed with marrying its own motherboard. ADAM AND EVE VIRUS • Takes a couple of bytes out of your Apple computer. AIRLINE VIRUS • You're in Dallas, but your data is in Singapore. ELVIS VIRUS • Your computer gets fat, slow and lazy, then selfdestructs -- only to resurface at shopping malls and service stations across rural America. 3/24/2016 Security Squad Video Series Anti-Virus Protection What is the status of computer protections? • Is the anti-virus software current? • Is it set be automatically update? • Who’s in charge of keeping computer protections current? 3/24/2016 Security Squad Video Series Security Squad – Part 2 Workshop to be held: Contact: 3/24/2016 _________________________ _________________________ _________________________ Security Squad Video Series