Re: Best practices for a small business's security

[Clayton Dillard <clay () securespeed cc>]

Bob,
        You can take a look at some of the security web sites listed on our
links page (http://www.securespeed.cc/links.htm).  You may also find
some good generic documentation on www.techrepublic.com.

Books are a good source for information too.  I like:
- "Inside Internet Security" by Jeff Crume
- "Hackers Beware" by Eric Cole

Knowledge is one of your most valuable weapons in the quest to secure
your information systems.  Be proactive - it seems you already have that
going for you.  Try to focus on people, policies and tools as the
foundations for your security endeavors.  

      * People are either going to enhance or subvert your security
        measures.
      * Policies should be clear and readily accessible
      * Put the right technology tools in place to enforce your policies
        and   enable your company to conduct its business securely. 
        Remember "Defense in Depth.

Good luck!
Clayton Dillard, GSEC MCP
Principal Consultant
SECURESPEED, LLC
http://www.securespeed.cc
800.577.6990


On Mon, 2003-12-29 at 14:51, bob martin wrote:
> Hello,
> I am looking for best practices or an outline to follow for helping a small 
> company to secure their business.  I've found many resources on the 
> technical aspects, but am hoping for suggestions for websites or books 
> covering the business aspects as well.  Any help would be much appreciated.
>
> Thank you.
>
> _________________________________________________________________
> Make your home warm and cozy this winter with tips from MSN House & Home.  
> http://special.msn.com/home/warmhome.armx
>
>
> ---------------------------------------------------------------------------
> ----------------------------------------------------------------------------
-- 
Clayton Dillard GSEC, MCP
Principal Consultant
SECURESPEED, LLC
http://www.securespeed.cc

"Information Assurance and Security Consulting"

Attachment: signature.asc
Description: This is a digitally signed message part