Intrusion detection systems should be configured to alert the correct person if there is a problem, so that it can be acted on quickly and successfully. A new intrusion detection system is very similar to a new burglar alarm. When it is first set up, initial glitches such as doors slamming shut can in turn set the alarm off, causing a false alert. Very much like when you physically leave the office, lights are turned out and doors locked. Ensure a security emergency and disaster recovery plan are put in place.
Companies generally have a physical disaster recovery plan, for example in case of flooding or fire.
Having an equivalent for your IT system, in case hackers deface your website or bring your internet presence down, is also essential. Not only do the correct people know what to do, but potentially damaging postings can be rectified before damage such as branding, corporate embarrassment and legal issues set in. Physically locking your workstation server and protecting against physical access to your system might seem obvious, but many overlook the fact that outsiders can gain access to your building to manipulate sensitive data or physically remove it. By ensuring that any sensitive data is encrypted, this means that if hardware is removed from the office, access is still denied. Better still, by storing this type of data on a central server, rather than at the workstation, this provides an even higher level of security, along with backup mediums being stored off site.