Research and retrieval of news articles by:
Bennett Gold LLP, Chartered Professional Accountants

SPECIAL NOTE TO ALL VISITORS:
Effective December 31 2012, articles are no longer being updated on this web site.
The site is now maintained as an historical archive, covering notable e-commerce news articles from the period 1999 to 2012.

SECURITY AUDITS PAY DIVIDENDS

Security planning and training does provide a return on investment, says analyst

Posted on September 18, 2001

      The widespread perception that security does not offer a return on investment is wrong, according to IBM Global Services. Speaking at a recent briefing, IBM security specialist James Luke commented, "[Installing security products] is not a zero-return investment. Firms need to look at the broader benefits."

      Luke said recovery systems and system audits, which improve network security, can also increase efficiencies in other areas. Recovery systems offer a means of replacing data lost after an attack, but also reduce the time spent tracing and recreating lost files. System audits provide an insight into potential security breaches, and also offer effective inventory management, allowing firms to assess where upgrades are required and to monitor software licence compliance.

      Luke said firms should focus on security education, reporting mechanisms and emergency-response systems. He said that companies should encourage staff to share information on problems, even if problems start with their own machines: "If the first thing we do is discipline people when they report an incident, then they won't report it in future."

      In a separate initiative, security company Integralis is offering companies an outsourced forensics service. The Network Forensics Service will investigate security breaches after an attack, to identify unwanted visitors, compromised servers, dangerous code and back doors. Integralis also details files that have been viewed, copied or modified and gives advice on reconstructing systems. Integralis emphasized the benefits of full system audits. It said that companies should carry out comprehensive system logging and auditing to ensure that log files are checked and reviewed regularly.

E-Commerce Alerts are issued by Bennett Gold LLP, Chartered Professional Accountants as situations develop. Bookmark this site and check back often. Our e-mail address is: info@BennettGold.ca

In accordance with United States Code, Title 17, Section 107 and Article 10 of The Berne Convention on Literary and Artistic Works, the news clippings on this web site are made available without profit for research and educational purposes.

ALERT
ARCHIVES
Final Entries
2012
2011
2010
2009
2008
2007
2006
2005
2004
2003
2002
2001
2000
1999