NT servers can also be attacked this way. Clearly, an ISP that requires the use of encrypted links for remote administration has some appreciation of the dangers. But according to Farrow some of the other items on your ISP security checklist may not be so easily addressed. Personnel security is more problematic. For example, ask what kind of hiring procedures or background checks are used.
Physical security is also a vital, quite often overlooked area of concern.
It isn t unreasonable to expect that an ISP's physical security would be at least as good as your own. Also, many of these issues might be resolved by asking your ISP if they have had a third-party security audit performed recently. Please send us your feedback .