- Get link
- X
- Other Apps
- Get link
- X
- Other Apps
The new General Data Protection Regulation (GDPR) came into force on May 25, 2018. The new guidelines affect all companies equally, regardless of their size or the industry in which they operate. The previous data protection laws will be brought to a new, uniform standard throughout the EU.
Due to
the fact that the entire topic was only little-noticed and considered in some
countries, also due to the previous threat of punishment at a comparatively low
level (Austria: 25,000 euros), the new law contains a much higher penalty
range, namely up to 4 percent of the global one Turnover of a company or EUR 20
million (whichever is higher). These high fines are intended to ensure
that both international corporations and small companies take up the issue. Especially
for Austria, a country in which the majority of all companies can be assigned
to the SME sector, this means that any penalties present domestic companies
with major problems which in the end could even threaten their very existence.
Nevertheless,
not all companies are by far prepared for the new regulation. On the
contrary: A current
SAS study shows
that 93 percent of the survey participants believe that they are not yet fully
compliant with the guidelines.
For
many companies, especially in the SME sector, this is also because lack the necessary know-how and shy away from implementing complex
and expensive security solutions. A very important step is to protect your
own data from external access, i.e. from hackers. Here it is important to
heed the following 10 tips.
1. Holistic Security Strategy
Isolated solutions for IT sub-areas
involve high risks for a company, as security gaps are virtually programmed. If
the responsibility for virus protection, password and identity management, or
the encryption of sensitive company data lies in the hands of different
employees in your company, a holistic security strategy becomes difficult. Pay
attention to a holistic security strategy and central control of all IT
security tasks.
2. Generate Secure Passwords
According
to the Data Breach Investigations Report, hackers used cracked or stolen
passwords to gain access to internal company systems in over 50 percent of
reported computer attacks. You should therefore ensure that secure
passwords are used in your company and that employee is trained in the
correct handling of passwords and access data
3. Missing Updates Are a Security Risk
Operating
systems, browsers, application software,, and, above all, security programs
should always be kept up to date. Hackers very often target plug-ins
(small programs that can be added to another program) in particular. If
these are not up to date, passwords and other information can be readout.
Another very important point is to regularly update the software on the router, the
technical link between your company and the Internet. You should therefore
also have the router's firmware checked regularly to ensure that it is
up-to-date. Particular caution is required if the router has WLAN
(wireless LAN, ie surfing without cables).
4. Secure Wi-Fi Networks Against Hackers
Inadequately protected WiFi networks are
often the cause of successful attacks by computer geeks. You can achieve
efficient security by securing configuration access using an unusual user name
and a long and complicated network key. Make full use of the maximum
possible key length of 63 characters. Also, only use the secure
WPA2 standard for encryption options.
5. Never without Virus Protection and A
Firewall
Hackers have easy access to computers
without virus protection and firewall programs. It is therefore obvious:
Never go online without virus protection or antivirus software like Protegent.
6. Check Open Interfaces
Hackers not only get into the company
network via the Internet but often also via so-called open interfaces. Classic
examples of this are printers and USB interfaces that are not protected by a
firewall. You should be careful when using USB sticks. One infected
device is enough for a virus or Trojan horse to spread quickly to the company
network.
7. Use the Latest Online Banking Methods
In addition to tapping confidential
company data, user data for online banking are particularly worthwhile goals
for hackers. You should therefore always use the latest online banking
procedures offered by your bank. Accounts that are only secured using TAN,
i-TAN, e-TAN, or m-TAN are inadequately protected. The home banking
computer interface method (HBCI) currently offers the highest security standard
and therefore the best protection against hackers.
8. Make Mobile Devices Secure
For some time now, hackers have also
recognized employee smartphone apps as a new target. This gives you
unnoticed access to the company's internal network. Mobile Device
Management (MDM) systems and additional features that separate private
from professional are solutions that efficiently protect your company from
attacks by computer specialists using mobile devices such as smartphones and
tablets.
9. Encrypt the Data in Cloud Solutions
With functionalities such as managed
firewall, web & mail security including intrusion prevention, and DDoS
protection, cloud services offer secure and cost-effective storage of
large amounts of data. However, the security of cloud solutions primarily
depends on the provider's security precautions. However, there is no 100
percent security here either. You should therefore protect your data
against attacks by additionally encrypting the data locally.
10. Raising Employees' Awareness of Hacker
Attacks
Hackers are also increasingly using
social networks and social engineering (e.g. eavesdropping on employees over
the phone) to hack company networks. For data thieves, these are the most
common and most promising methods of obtaining confidential information.
Safety-technological barriers are circumvented in this way. Therefore, sensitize and train your employees to recognize threats from hacks via social media and social engineering in good time. Social media guidelines and corresponding training courses make a major contribution to the security of your company.
Antivirus Software
Data Protection
Firewall
GDPR
General Data Protection Regulation
Virus Protection
- Get link
- X
- Other Apps
Comments
Post a Comment