Keylogger. Rootkit. Screen scraper. Spyware. It might sound like the gadget list from a James Bond movie but the chances are you have heard of at least one of the above. It's even more likely that your company's IT systems are being attacked by one or more of them as you read this article.
Data security is not just down to the IT department. Securing critical business information is the responsibility of the whole company. To do that, you need a well-written, easy-to-understand security policy so that everyone knows where they stand in relation to dealing with the company's information.
Read too many reports on IT security and you could end up a quivering wreck. What with hackers threatening to take over systems for nefarious purposes, criminal gangs intent on stealing valuable information and insiders engaged in fraud, data theft, sabotage and stupidity, the problems can seem insurmountable.
Today, network security can seem to the uninitiated like an unfathomable sprawl of arcane techniques and technologies. Vendors bandy around terms like authentication, encryption, firewalling, intrusion prevention, network behavioural analysis and a host of others with little thought for the customer. Most companies want to know they are investing in an appropriate level of defence for their systems without spending over the odds on ineffective, unnecessary or overly burdensome solutions.