Computer Security: 20 Things Every Employee Should Know / Edition 2

by Ben Rothke

Overview

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.

Securing corporate resources and data in the workplace is everyone’s responsibility. Corporate IT security strategies are only as good as the employee’s awareness of his or her role in maintaining that strategy. This book presents the risks, responsibilities, and liabilities (known and unknown) of which every employee should be aware, as well as simple protective steps to keep corporate data and systems secure. Inside this easy-to-follow guide, you’ll find 20 lessons you can use to ensure that you are doing your part to protect corporate systems and privileged data. The topics covered include:

• Phishing and spyware
• Identity theft
• Workplace access
• Passwords
• Viruses and malware
• Remote access
• E-mail
• Web surfing and Internet use
• Instant messaging
• Personal firewalls and patches
• Hand-held devices
• Data backup
• Management of sensitive information
• Social engineering tactics
• Use of corporate resources

Ben Rothke, CISSP, CISM, is a New York City-based senior security consultant with ThruPoint, Inc. He has more than 15 years of industry experi¬ence in the area of information systems security and privacy.

Product Details

ISBN-13:	9780072262827
Publisher:	Osborne
Publication date:	08/18/2005
Series:	McGraw-Hill Professional Education Ser.
Edition description:	REV
Pages:	64
Product dimensions:	6.00(w) x (h) x (d)

About the Author

Biography of Ben RothkeBen Rothke, CISSP is a New York City based senior security consultant with ThruPoint, Inc. and has more than 15 years of industry experience in the area of information systems security. His areas of expertise are in PKI, HIPAA, 21 CFR Part 11, design & implementation of systems security, encryption, firewall configuration & review, cryptography and security policy development. Prior to joining ThruPoint, Ben was with Baltimore Technologies, Ernst & Young, and Citicorp, and has provided security solutions to many Fortune 500 companies.Ben is also the lead mentor in the ThruPoint, Inc. CISSP preparation program, preparing security professionals to take the rigorous CISSP examination.Ben has written numerous articles for such computer periodicals as the Journal of Information Systems Security, PC Week, Network World, Information Security, Secure Computing, Information Security Magazine, Windows NT Magazine, InfoWorld & the Computer Security Institute Journal. Ben writes for Unix Review and Security Management and is a former columnist for Information Security and Solutions Integrator magazine; and also is a frequent speaker at industry conferences.While not busy making corporate America a more secure place, Ben enjoys spending time with his family, and is preparing to run in the 2003 Marine Corps Marathon for the Leukemia & Lymphoma Society’s Team In Training, the world's largest endurance sports training programBen is a Certified Information Systems Security Professional (CISSP) & Certified Confidentiality Officer (CCO), and a member of HTCIA, ISSA, ICSA, IEEE, ASIS & CSI.

Table of Contents

Chapter 1: Computer Security: 20 Things Every Employee Should Know
Chapter 2: Beware of phishing and spyware
Chapter 3: Protect your identity
Chapter 4: Be responsible and be aware
Chapter 5: Choose your password wisely
Chapter 6: Practice safe access
Chapter 7: Protect your work outside the office
Chapter 8: Reduce e-mail risks
Chapter 9: Suspect e-mail hoaxes
Chapter 10: Work wisely with the Web
Chapter 11: Avoid Internet dangers
Chapter 12: Master instant messaging
Chapter 13: Use firewalls and patches
Chapter 14: Use PDAs safely
Chapter 15: Back up and secure data
Chapter 16: Manage data wisely
Chapter 17: Secure your workspace
Chapter 18: Beware of social engineers
Chapter 19: Use corporate resources only for work
Chapter 20: Call the experts when things go wrong
Chapter 21: Keep things in context
Appendix: Glossary of computer security Terms
About the author

Editorial Reviews

The Barnes & Noble Review
According to a recent InformationWeek study, 67 percent of U.S. companies say raising user awareness of computer security is a crucial priority for the next year. Thank goodness folks are finally realizing that security is everyone’s business, not just the techies. But how do you train nontechnical folks on security without jargon, bewilderment, or ridiculous expense? With this little booklet, that’s how.

In less than 50 pages, top security consultant Ben Rothke outlines 20 things every employee needs to know, what they should do -- and, equally important, what they shouldn’t do. (Got an email about a security issue from an external source? Don’t handle it on your own. Forward it to your company’s security team or consultant. There are just too many hoaxes out there.)

Rothke’s calm, commonsense tone will help you get folks onboard with the security tasks that really matter. Keeping passwords secure. Transferring files safely. Being secure when you’re accessing the network remotely. Protecting notebooks and PDAs. Disposing of digital media without leaking information. “Social engineering” tricks to watch out for. And how to put all this stuff in context, so you don’t become obsessive or paranoid.

You may need to supplement this booklet with a few of your own company’s policies, but Rothke’s sensitive to that. He’ll take you more than 90 percent of the way. Think about buying a stack of these and passing them around. At $7.95, that’s actually doable. But, hey, it’s not just your employees who need this book. You do, too. Bill Camarda

Bill Camarda is a consultant, writer, and web/multimedia content developer. His 15 books include Special Edition Using Word 2000 and Upgrading & Fixing Networks for Dummies, Second Edition.

bn.com