The Gold Maintenance Contract
(Information Security Management)
Contents:
Introduction
internet security
Software security
Hardware security
Data Security
Mobile Computing Security
Wireless Networking Security
Disaster Recovery Security
Introduction
As the information and knowledge age matures we are
all becoming increasingly aware of how the whole of our business is centred
around our IT systems. The information—documents, databases, e-mails,
etc.—are the life-blood of our businesses. If these become compromised,
either through loss (such as in a fire), theft, or leak, then it could mean
disaster for our
business and potentially for our customers.
It is vital that our IT systems work—full stop.
It should be a means of greater effectiveness—not a bottleneck to
getting work done, as so often happens. Jentech has offered IT systems
maintenance for over years and now feels it is time to take this to
a new level for SMEs.
We would like to offer new and existing customers an
affordable solution to greater information security and IT system effectiveness.
The following areas are covered by a Gold Maintenance Contract. You can
choose to have everything, or pick and choose what best suits your business.
Note that this contract will include everything in a standard contract
and so you will read things here that are also in the Standard Maintenance
Contract.
Pricing can be done only on a bespoke basis and after
a full consultation. So if this high level contract is what you feel you
need then get in touch and we will set up an initial meeting.
internet Security
As we increasingly rely on the internet to communicate,
our businesses are open to greater risks of confidentiality and integrity
breaches of our business information. With a Gold contract from Jentech,
your security will be tightened in the following ways:
This is an absolutely vital step in information security.
Without a hardware or software firewall, anything from a stand alone PC
to a whole network can easily be accessed and compromised by even amateur
hackers. For those with ADSL connections it is a prerequisite. Naturally,
it will need to be properly configured; a badly configured firewall is
like having no firewall.
The overwhelming majority of viruses are now spread
via the internet. Occasionally, they still come by sharing discs. Jentech
will install industry standard anti-virus software, but more importantly,
they will configure it to offer the highest possible protection against
viruses arriving by e-mail, web page or disc. We will configure it to
automatically update itself via the internet. If a virus still gets through
(as brand new ones can), Jentech will be on hand to remove the virus.
For the first time ever, viruses have now been written that can infect
your PC or network by just being on the internet, yet without you using
any of its facilities. Some recent viruses have caused
havoc on the internet in this way. Preventing infection by this method
requires a firewall.
Sometimes the confidentiality of our e-mails and the
documents we send with them are critical. Optionally, Jentech can offer
e-mail encryption software. We can train you to use this software so that
when necessary, you can send an email so that only the intended recipient
can open it.
- E-mail client and browser security bugs
Occasionally, Microsoft issues security updates to
their internet software. It is therefore important that you have a procedure
for updating all your PCs, so that any security holes are plugged as soon
as Microsoft releases a patch. Jentech can configure your system to do
this automatically as long as you are online.
Again occasionally, holes in network security are discovered
and patches are released for them straight away. Jentech will ensure that
any such holes are patched as soon as the patch is made available. This
is not an automatic update, and will require one of our engineers to carry
this out manually.
Only when we lose our internet connections for a space
of time do we realise how important it is to our normal working day. If
for any reason you suffer a loss of connectivity for more than a brief
period, Jentech will have you back online in a matter of hours.
Spam is not necessarily a security hazard, but it can
be an obstacle to effectiveness. If nothing else, it is a nuisance. Jentech
can provide software and advice for reducing Spam. If we are the provider
of your internet service we can block spam before it reaches you. There
is also now evidence that virus writers are using cheap spamming technology
to spread their diabolical creations.
Software Security
Software is at the heart of the work we do on our PCs,
so it is important that it is always working properly. But occasionally
things go wrong. With a full contract, Jentech provide support in the
following ways:
Jentech will supply, install and configure your key
software and test that it is working properly, the contract will cover
your:
operating system
office software
business account software
internet related software
installation of updates and upgrades (where required)
Licence and product theft
It is important to keep your licence and software product
safe and secure. The licence is proof you have purchased the product.
Without it you could be made to stop using the software, or purchase it
again, or even prosecuted. Jentech can advise on best practice in this
area.
Hardware Security
If your computer hardware breaks down, is damaged or
even stolen, it can have a major impact on your effectiveness. Sometimes
a printer ceasing to work can cause great frustration. As part of a Jentech
contract we provide:
Your contract with us is fully inclusive of materials,
labour and replacement parts. In other words, those items covered under
the contract will be either replaced or repaired at no extra cost to you,
should something go wrong.
- Protection against electrical surges, outages and spikes
We recommend and supply and configure appropriate hardware
to guard against damage to your hardware (and potentially your data) through
surges, outages and spikes. There are geographical locations in which
this is essential (as here in Bridgnorth) where electrical outages are
not uncommon.
Jentech can both advise on and provide and install
physical security measures for your hardware. Hardware can be security
marked and secured to the premises as required. It is assumed that the
company has adequate building security in place.
Data Security
This is perhaps the most critical aspect of security
of your information; if hardware, firewalls or virus security fail for
an reason, then this aspect of information security is your salvation.
Jentech will install and configure the necessary hardware
and software to perform essential back up procedures. We will train you
in how to carry out your back-ups. We will help you to plan a back-up
strategy, including organising:
the who
the how
the when
the what
and the where
of a properly managed back-up system.
It is critical to get this right and to make it run
like clockwork. Equally important is to show you how to retrieve files
from the back-up should you need to do this.
Back-ups also need to be held in a separate location
to where the back-up is made, and wherever that location is, the back-up
media needs to be safe from harm.
In principle, backing up data is simple. But many business
fail to do it, or do it improperly. If your place of work burns down one
night, your business could be up and running in days if you have a good
offsite back-up. Without it your business would probably never restart.
Likewise if your computers were stolen and you have a current back up,
Jentech could have you back at work with all your information intact in
24 hrs. Without a back-up, we could have new hardware and software in
place in 24hrs, but the life-blood of your business will still be missing.
It’s not worth not implementing a strict back-up regime.
Data theft can occur by many means, and most of these
means have been considered above, but one aspect that hasn’t been
mentioned is theft from the inside. It’s not a pleasant thing to
have to consider, but it happens. You need to have good anti-burglar security
measures in place, and policies and procedures for employees accessing
and using company information should be in place. Employees may have to
sign a legal agreement not to disclose company information to other companies
should they leave your company. This is something you have to do for yourself,
but Jentech has experience in this area and can provide advice.
Data security is not solely about the interests of
your company’s continued viability. You may be holding very private
and confidential information relating to your employees, customers and
clients. If that information were to be compromised it might have the
potential to damage your customers’ businesses or the careers of
your employees. And even if the information you hold is not potentially
damaging to customers and employees, they may still want it keeping private.
The security measures mentioned elsewhere will protect your information
about customers and employees, but you need to show to customers and employees
that you take data protection seriously, by registering with the Data
Protection registrar (which is a legal requirement if you hold and keep
significant information about others) and by following the guidelines
and requirements of the Data Protection Act. Then let your customers,
clients and employees know that you abide by the Data Protection Act.
It means you are acting in a professional manner, and will increase your
credibility with your customers.
Mobile Computing Security
So your business premises and IT systems are as secure
as the Pentagon, but you are continuing to take critical business information
off the premises in your laptop, which is insecure. If you are in this
position, Jentech can add security to the information on your laptop and
advise on measures for avoiding the theft of your mobile, and on how you
can increase the chances of retrieving your mobile in the event of theft
or accidental loss. The measures you need to take for you laptop are similar
to those for your network, that is, you will need to password protect
access to the use of the computer, install anti-virus software, install
a software firewall, and think about whether you need to password encrypt
files or folders, according to the level of security you know you need.
An alternative measure is not to keep any important
data on you laptop at all, but to access or download the files you want
to work on from your work-place network via the internet, or from your
ftp site on the internet itself; then save or upload the files back to
their original place, all access being password protected. None of this
is difficult and Jentech can implement the solution that suits you.
Also if you are using wireless networking from your mobile you need to
read the next Item.
Wireless networking
If you are using wireless networking in your premises
or from your laptop, you need to consider the security implications of
this. Indeed, wireless networking is the way things are going and it is
going to become very commonplace. How can you be sure that your data is
not being intercepted through the airwaves? If you are in this situation
or are planning to go wireless, talk to Jentech and we can advise on and
implement secure solutions.
Disaster Recovery Security
How can Jentech help should the worst happen? Imagine
your building burns down, is flooded, affected by earthquake, terrorist
bomb or all your equipment is stolen. Should such a rare event befall
your business, you can either go to the wall, or implement your disaster
recovery plan. As part of such a plan Jentech would be a key part of the
rescue team. Jentech would provide:
- rapid response and supply
There have been occasions when a customer of ours has
had every piece of IT equipment stolen from their premises and Jentech
have been able to have them up and running again in 24hrs. If a good recent
back up is available, you could also have access to all your vital documents,
files and information in the same time. We can’t guarantee 24hrs,
because there are so many factors involved, but as soon as your insurance
company can provide the go-ahead, Jentech could have you supplied with
hardware and software installed, configured and ready to go within a short
space of time by implementing our own emergency customer recovery procedures.
Hopefully the impact on your business operations would be kept to a minimum.
If you have a disaster recovery plan in place your chances of survival
are greatly increased. If you haven’t, perhaps you should consider
it, and make Jentech a part of that plan.
Price Structure
The Gold Maintenance Contract can only be carried out
on a bespoke basis. You will need to call us to
discuss your specific requirements.
|
