Business Security Information

When most companies think about disaster planning, a variety of thoughts come to mind.  Some businesses I have dealt with think about preparing for a natural disaster or a fire while others think about nothing but planning for an IT or network outage.  For the purpose of this article, I am referring to the planning for and recovery from a disaster.  This definition encompasses more than just the planning and recovery of IT services, infrastructure, data (information) and other technology resources of a company.  Disaster planning must include preparing for and recovering from the loss of human resources, such as key employees of a business, and other essential resources that allow a business to function.

You hear about customer and employee personal information being lost or stolen from businesses quite frequently.  This information is accessed using a variety of attack methods including SQL injection, buffer overflows, use of default accounts, and even the loss of unencrypted backup tapes.  No amount or type of security will guarantee absolute database security for your business, but until you implement some basic database security measures, you are wasting your time and money on more elaborate security measures.

Before I start this article, I want to say this is strictly an opinion piece and may not be directly related to the emphasis of this site which is security for small and medium sized businesses.  I do think the basic premise of the article will be relevant to any business, not just a company that has ships on the high seas.