Last week I received a call from a colleague who runs a computer forensics company. It was a real fire drill. A client of theirs, hundreds of miles away, which shall remain un-named, had to fire their IT Director on the spot due to some disturbing allegations.
On that very day, we needed to lock down their network and secure their data. We changed passwords, blocked access, discovered and patched holes that could allow this person or others back into the systems if they decided to delete data or do anything else to compromise the company’s assets.
When we began to look at email, nobody at the sizeable organization knew anything about how email was delivered, or where it came from. We quickly found out that they had commercial Gmail as their mail system. Since the IT Director was the only administrator of the account, we didn’t have the passwords.
In this particular case, the password was provided by the accused party without argument, and the email was able to be secured, but it raised major red flags thinking about security in the cloud for small businesses.
In this instance with Gmail, if the password had not been given up, it could have taken days to get Google to change the administrator password on the company’s email. Google obviously is not going to do that for anyone, and you will need to prove you are who you say you are before any changes are made.
Since there was no email archiving taking place, and there was no email continuity solution either, this time gap would have provided the IT Director unlimited access to the mail. He could have deleted incriminating data and down from there.
There are some simple steps that your business should take to avoid being in such a vulnerable position. If your corporate data is presided over by any individual – whether IT staff of not – with complete administration rights, play close attention.
- Have a password policy in place that keeps passwords documented and encrypted. Use a product like Ironkey or similar
- Use a third party email archiving service to archive email and comply with eDiscovery rules. You never know when this may become critical in an internal HR issue, as in this example. Just archiving email to another server in the office would not have helped this situation at all.
- Use a third party email continuity service. Usually implemented to avoid business interruption during technical difficulties and Internet outages, the right continuity product can actually be an invaluable security tool by giving you the ability to re-route your hijacked email and keep your business running during a security incident.
- Keep detailed documentation on your network resources, hardware, IP addresses, DNS service, etc. Having this information will save time and money if a third party has to understand your network in a hurry.
- Develop a simple “expert system” – a written process with a succession plan, contingencies and simple SOPs (standard operating procedures) so everyone knows what to do during a security breach.
Almost every security incident and the resulting damage to small businesses that we ever see are avoidable. Security on the cloud is no different. The combination of common sense, basic organization, and a trusted advisor to set things up and monitor them for you will always allow you to sleep easier.
Copyright
© 2010 Skyrope, LLC. All right reserved
Great information…
This is often fantastic. Our company looked at these tips stuff so we are confounded. We are most certainly curious about this sort of circumstances. One particular appreciate your traditional guidance, and estimate your precious time in this. Please k…
Trackbacks…
[...] only a couple of sites that happen to be outlined below, from our viewpoint are unquestionably well worth visiting [...]…
Wordpressseo…
[...]Security in the Cloud – How to Prevent Your Data from Being Held Hostage on the Internet[...]…
It’s seldom I read material on this subject, but I found your article interesting from the start. You make impressive points and did a great job of making it engaging.
Great information…
This is often awesome. An individual watch site’s gratify therefore we are surprised. We are precisely attracted to this type of traits. Only appreciate each of the suggest, and benefit the effort in this. Please keep updating. These are in reality va…
moving…
[...]Security in the Cloud – How to Prevent Your Data from Being Held Hostage on the Internet[...]…
Thanks for giving me some things to think about in your writing. Your well-defined points are sound in my opinion and I agree with you.
I’m not usually impressed with many writers, but I am impressed with you. Your article is full of original and intelligent content. I share a lot of your views on this subject. This is great.
levitra…
like your site a lot…
Eine Affaire, auch „reine Sexbeziehung“ oder „Nur-Sex-Beziehung“, bezeichnet lair regelmäßigen sexuellen Kontakt zweier Menschen, pass on dabei nicht in einer Partnerschaft leben. Ein wichtiger Bestandteil einer Sexbeziehung ist, dass beide Partner sich zwar regelmäßig zum Geschlechtsverkehr treffen, aber keine Liebe zueinander empfinden. Das abgrenzende Element zur offenen Beziehung ist das Fehlen einer tieferen Bindung. Vom One-Night-Stand unterscheidet sich bit the dust Sexbeziehung durch pass on längere zeitliche Ausrichtung der Beziehung.
Pretty insightful post. Never thought that it was this simple after all. I had spent a good deal of my time looking for someone to explain this subject clearly and you
All I can say is great work. The effort you put into this is very impressive and I enjoyed every minute of the read. I hope to come back and see more articles you’ve written.
I am never quite sure what to write about an article I read, but I do really like your article. You’re content is very smart.
This article is a great sample of top-notch writing. I praise you on your research and well-written content. Please continue the good work. This kind of writing talent should be seen by the whole world.
Thank you very much for writing such an interesting article on this topic. This has really made me think and I hope to read more.
I have found your article very informative and interesting. I appreciate your points of view and I agree with so many. You’ve done a great job with making this clear enough for anyone to understand.
penny stock…
[...]Security in the Cloud – How to Prevent Your Data from Being Held Hostage on the Internet[...]…
Great information…
This is often exceptional. First stare upon all the group substances therefore we are greatly surprised. We are attracted to this kind of options. Another one appreciate your old memo, and charge the effort while in this. Please keep cutting. They are …
Great information…
This is often amazing. Someone stare upon all the group content material therefore we are confounded. We are precisely attracted to this sort of tips. Us appreciate human time, and value the effort while in this. Please keep cutting. They’re distinctl…
Your article grabbed my interest right off the bat. Your content is just that engaging. I like your views on this topic and your writing.
You’ve taken alternating views and combined them into an interesting article. More articles on this subject need to be written by you as you appear to be astute and insightful.
Impressive content is the way I am going to describe this article for starters. Your gift for original informative content is unsurpassed on this subject.
I admit, I have not been on this webpage in a long time… however it was another joy to see It is such an important topic and ignored by so many, even professionals. I thank you to help making people more aware of possible issues.
Great news…
Great news. Let’s share this together…
What makes the CCNA Security certs worth finishing? Or are those certs even worth it?
You have really hit on some hot information with this content. I like how you show your writing talent using unique thoughts. Thank you for the information on this topic.
Really great writing! More writers should care as much as you do about the content they produce. This has really given me a good reason to think more on this subject. Thank you for this.
It’s not easy finding information on this topic that is well-written, easy to read and easy to grasp. That’s why I felt moved to put a comment here to let you know this is great.
Hi, I found your blog through MSN search and read a couple of the posts here. I’ve to say that your blog post are very informative that i’m unable to find elsewhere. Your blog have benefited me in many ways and I want to say Thank You! I’ve bookmarked your site and will be comming back often.
Read was interesting, stay in touch……
[...] below you’ll discover the link to many sites that a number of us presume you should really check out [...]…
I am unable to read articles online very often, but I’m glad I did today. This is very well written and your points are well-expressed. Please, don’t ever stop writing.
This content has a lot of great information that is apparently intended to make you think. There are excellent points made here and I agree on many. I like the way this content is written.
Toronto Apartments…
[...]Security in the Cloud – How to Prevent Your Data from Being Held Hostage on the Internet[...]…
This is an excellent article . I enjoyed reading it and am likely to reread it again soon so I can revisit some of the points that I want to consider.
jailbreak…
[...]Security in the Cloud – How to Prevent Your Data from Being Held Hostage on the Internet[...]…
Coiffure tendance…
[...]Security in the Cloud – How to Prevent Your Data from Being Held Hostage on the Internet[...]…
sex toys for women…
[...]Security in the Cloud – How to Prevent Your Data from Being Held Hostage on the Internet[...]…
both of…
dad and mom to make sure that their kids spend their free time safely from both physical risks and dangerous influence. On-line video games present…
shuffle lernen…
[...]Security in the Cloud – How to Prevent Your Data from Being Held Hostage on the Internet[...]…
sport drinks…
[...]here are some links to sites that we link to because we think they are worth visiting[...]…