Some ideas about making security audit both - useful and unobtrusive

People must feel that company trust them and on the other hand company must sometime control if all employees understand in what way security information must be kept and used. 

For more information about Find Protected, please, visit www.findprotected.com 

Find Protected Newsletter
Issue 7, February 2 4, 2005

Find Protected News And Related Reviews

In this issue you will find most interesting postings from Find Protected forum. These postings are placed in this newsletter with permission of postings' authors:

1) Some ideas about making security audit both - useful and unobtrusive, posted by Oliver Clish

2) Security problems statistic, posted by Fletcher, visitor of Find Protected forum.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

(1) Some ideas about making security audit both - useful and unobtrusive

Oliver Clish wrote: 

I work for computer security audit company. We are often asked to check a companies computer security. We act basing a major document called security policy.

Our department continuously evaluate difference file auditing solutions. We have recently faced with the problem of managing sensitive files of company in a right way.

Company wants to keep an eye on it's sensitive files and how they are being used. At the same time it was necessary to monitor all file related activity occasionally, without installing background monitoring.

This was the right approach to security as people must feel that company trust them and on the other hand company must sometime control if all employees understand in what way security information must be kept and used.

We started looking for some software based solutions about two month ago. We found the Find Protected security utility. The fully-functional evaluation version was available for download.

After using Find Protected in action we conclude that it's a good way to do unobtrusive audit of user's password protected files' related activity.

Recommending Find Protected to our clients we solve two problems:
1) Company security department know if password protected files are being used in a right way.
2) Employees feel safe as no one spy on them

The main ideas is that people understand that IT security uses Find Protected as a checking utility that answers the question if files are kept securely and it the right way.

The original message can be found here:

http://www.findprotected.com/support/phpBB2/viewtopic.php?t=17&start=0&postdays=0&postorder=asc&highlight= 

(2) Security problems statistic

Fletcher wrote:

"out of 700 workers surveyed, 21% - 31% admitted to keeping and sending company confidential information"

I've found this is one of the PC Weeks issues, also I found that some CEO posted this info in your Testimonials section.

I think it's a big problem I should consider right now, I wonder what should I do to apply the security policy in my company. I need some points to start.

Bob Elliott (AKS-Labs):

Thank you for your interest!

First, I would like to recommend some articles about security. You can search google.com for "security policy", also there are some articles on our web-site:

1) The big article - Find Password Protected Files. Read it to have a quick look at the problem of information leakage. http://findprotected.com/solutions/find_password_protected_files/find_password_protected_files.htm

2) Another article is for security admins - Find Protected for IT Administrators. This is a promotion of our Find Protected. http://findprotected.com/solutions/it-administrators/find-protected-benefits.htm

Finally, you should download Find Protected itself: http://findprotected.com/download.htm

The original message can be found here:

http://www.findprotected.com/support/phpBB2/viewtopic.php?t=6 

Newsletter information:

This newsletter coming every 3-weeks and we are happy that you read it and find it useful. If you think that others, for instance your friends or colleagues, can benefit from it then please, share subscription url with them http://www.aks-labs.com/php/public_html/lists/?p=subscribe&id=1

Find Protected Common Information:

Downloading free fully-functional 30-days trial: http://findprotected.com/download.htm

Ordering URL: http://findprotected.com/ordering.htm

Sending question to support: http://findprotected.com/support.htm