IT Security

What is IT Security?

Most IT security threats start on an employee’s device (laptop/PC). Most arrive via a malicious email, whether it be a link in the email to a website that aims to harvest your passwords, or less commonly a virus/malware attachment. Recent examples of attacks are ransomware – where a virus encrypts all of your work documents, something that can cost a business thousands in losses.

IT security systems aim to prevent all threats, through actively monitoring and filtering for known malicious patterns, as well as testing unknown code in sandbox environments before allowing user access. There is also a human training element and physical security to take into account. No IT security is 100% secure, and it is often a balance between maintaining a high level of security, whilst not slowing or stopping the user from completing work tasks.

IT security takes a layered approach, including but not limited to:

• Email Filtering
• Endpoint Protection (antivirus)
• External Network Protection
• Internal Network Protection
• Intrusion Detection System (IDS) or Intrusion Prevention System (IPS)
• Security Patching (updates)
• Access Permissions
• User Training
• Physical Device Security

You may not even realise you’re keeping sensitive data, but a detailed client list can qualify, and so do scans of passports that recruitment agency’s typically keep on file. A business-class Firewall and Mail Filter should be used to protect against email and internet-based viruses, trojans and malware. Proactive updating of your software and firmware should be carried out on a regular basis, and end-of-life software should be upgraded or retired. Policies should be put in place to enforce complex passwords that are continually changed, and your staff should be given the training and tools they need to protect themselves.

How can Liberate IT help?

IT security threats are constantly evolving and so should your IT security! Our IT support contract offers a pro-active approach that will keep you one step ahead of the threat and put protection in place to prevent you becoming the victim of a costly and commercially embarrassing attack. We can work with your HR team to get the correct policies in place to protect your business legally and financially. We also have experience in implementing PCI DSS security compliance and beyond.

Get in touch with the IT security specialists at Liberate IT to build a strategy to suit your business and security requirements. We can take away the IT security headache and provide a full security audit to get you up to speed.

We take care of our clients’ diverse IT needs, offering all the services you need under our complete IT support package.

How can Liberate IT help?

Liberate IT is Cyber Essentials Certified which means that we are qualified to protect you and your business from online security threats.

We can help your business to attain this government-recognised qualification. This proves your company will also have IT security standards.

How Hackers Get Into Your Email

Frequently Asked Questions

What's the difference between a Cyber Incident, Cyber Attack and a Cyber Threat?

A cyber security ‘incident’ is when an attack doesn’t result in a breach to the business, ie. the attack is successfully repelled & the company’s data isn’t compromised.
A cyber security ‘attack’ is when the businesses firewall has been breached and the business has been impacted by it, ie. they have lost access or confidential data has been leaked, etc.
A cyber security ‘threat’ is when there is a possibility of a malicious attempt to damage or disrupt a computer network or system.

What is Cyber Hygiene?

Cyber hygiene refers to the practices and steps that all computer or device users within a business take to maintain and continuously improve their security, both online and offline. These practices are often part of a routine to ensure the safety of identity and other details that could be stolen or corrupted.

What steps can I take to improve my Cyber Hygiene?

Install a reputable antivirus and malware software
Protect computer with robust firewalls and secure routers
Update all software regularly
Set strong passwords
Enable Multi-Factor Authentication
Employ Device Encryption
Back up regularly
Keep your hard drive clean
Secure your router

What are the main types of Cyber Attacks?

Why is Cyber Security necessary for small businesses?

Small businesses are collectively subject to almost 10,000 cyber-attacks a day, according to new findings from the UK’s largest business group. Due to the high cost associated with a breach, 60% of these organisations go out of business within 6 months.

Without any kind of Cyber Security Plan in place, small businesses risk their privacy, client trust, financial integrity, employee integrity, data integrity and the longevity of the business.

What is GDPR?

GDPR, or General Data Protection Regulation, regulates that everyone who is responsible for using personal data has to follow data protection principles to ensure the information is used lawfully, transparently and fairly. This system was put in place by the government in order to protect the individuals rights to protect their personal data. To find out more about GDPR check out Data protection: The Data Protection Act

IT Security for GDPR

GDPR is necessary because of new advances in technology and the ways we are storing data (such as in the cloud), and because of widespread IT Security failings which have exposed confidential information. This regulation aims to stop data breaches and exposure of ‘Personally Identifiable Information’ or PII for short.

GDPR is great news for individuals who are fed up with nuisance calls or emails from companies who you haven’t given permission to contact you, and keeping your private data secure is something we all expect from a business, but surprisingly don’t always see.

Although antivirus software is essential, more should be done to protect sensitive information or PII (Personally Identifiable Information). You may not even realise you’re keeping sensitive data, but a detailed client list can qualify, and so do scans of passports that recruitment agency’s typically keep on file.