IT security for companies

On November 30 of each year, International Computer Security Day is celebrated.

This term, computer security, is very broad. It permeates everything: personal computers, mobile devices, backups, privacy, control of access to information, websites, cloud storage, etc.

In this article we will see some basic aspects of computer security that every company with a digital presence must know.

• Website.
• Maintenance of my website.
• Employees.
• Computer security in the company.

Website.

It is very likely that your company or the company where you work has a website, you may want to renew the existing one or you may want to build a new one with a different purpose than the one that already exists.

Computer security is not another element to add to a website, as if it were a page, a video or a blog. Computer security begins in the analysis and specification of the website, following all the development phases until it reaches the publication of the website and its maintenance.

Maintenance of my website

Another important aspect of computer security is preventive maintenance, which includes all the care aimed at preventing possible problems on a website, getting ahead so that they do not happen.

It should be borne in mind that all technologies around the internet evolve at high speed and a website must keep up.

Some preventive maintenance tasks:

• Apply updates and security patches on servers
• Apply updates and security patches in the website software:
• Update obsolete versions
• Access Log Monitoring

Employees

It is important that the employees of a company take care of the computer security of their equipment and have healthy habits in the use of information and communications technologies (ICT).

If this is not true, we run the risk of publishing documents infected with ‘malware’ on the company's website, that hijack the company's computers with ‘ramsonware‘ that steal confidential information from us.

Computer security in the company

In addition to raising awareness, training and putting in place the necessary means for its employees to adopt good computer security practices, it also has important tasks to accomplish.

All of them are summarized in the creation and implementation of the so-called Information Security Management System (ISMS). It is important that companies ask themselves if they are fulfilling these objectives, and if the answer is negative that they put the means to fulfill them.

If employees can use their equipment, something known as BYOD (Bring Your Own Device), it must be defined under what conditions.

The policy on mobile devices must contemplate which mobile devices the company allows and under what conditions they should be used.

Would you be able to recover all the information that your company needs to function?

Computer security is something important that every company should understand.