Often a company does not realize it has been victimized. About 20 percent of the surveyed companies did not recognize they had been attacked. In spite of these scenarios, fully 50 percent of the surveyed companies do not have written instructions regarding how to cope with online crime. Actually, more than 60 percent acknowledged that they have no published security policies and procedures. The technology is not to be blamed.
People apply the techniques and operate the equipment and programs.
First, develop and implement a security policies and procedures manual and train all employees, including executives and directors, in security issues with the security manual as the textbook. Policies should be clear, concise, and immediately enforceable. Enforce strict password policies. The password should not be a real word, either forward or backward, and never a proper name, a relative s birth date, an anniversary date, or any other easily identifiable combination. Get and install a firewall.