Home | Business News | Browse by Publication | T | Trial

Do you know where your data is? Computer security isn't just a matter of having up-to-date technology. A smart plan and a businesslike attitude will help you protect your firm's most important electronic assets.

Article Excerpt
Computers have become critical to our daily work, and so has computer security. How do you know if you're doing enough to protect your data in this online anywhere, anytime world?

No law firm has the resources to counter every possible security threat. With the constant onslaught of new computer viruses, you might be tempted to panic and waste your time and money on the wrong solutions. But you may be surprised to learn that technology isn't the first place to look when you want to enhance your computer security. In fact, your best bet is to use straightforward business sense--not just technological tools--when deciding what to do.

Like many people, lawyers hold several common misperceptions about computer security. It's important that you replace them with a good grasp of reality.

* Perception: You get good security by using the "right" technology--or by spending a lot of money.

Reality: Good policies, effective procedures, educated users, and an understanding of your risks and assets will keep your data secure.

* Perception: Client information cannot be put at risk. A law firm's security has to be 100 percent perfect.

Reality: A perfectly secure computer would be in a locked room with no windows, no doors, and no power. You can never have 100 percent security. Using a computer is a matter of accepting risk. The questions are, How much risk is acceptable, and how can it be kept to a minimum?

* Perception: I'm just an ordinary computer user. Security is not really my responsibility.

Reality: The user is the heart of a firm's security plan and is the key to its success or failure.

* Perception: We do what we can, but we don't have the money or support to lock everything down.

Reality: You don't have to lock everything down tight, just the most valuable assets--and those most at risk. Management needs to tell the technology staff which assets are most valuable.

* Perception: My information technology (IT) department handles security. We did an audit two years ago and came up clean.

Reality: Security is a management issue and should be driven from the top down. Management must know which security plan is in place at any moment. IT's job is to make certain it gets done.

Critical concepts

Keep the following basics uppermost in your mind when planning your new security strategy.

Confidentiality, integrity, availability (CIA). Effective security reduces the "attack surface" for your most valued...

View this article FREE - Now for a Limited Time, try Goliath Business News
Free for 3 Days!