SECURITY

7 IT-SECURITY
Dataprotection
Networks belonging to companies and public
authorities include numerous weak points, for
example: internet connections, VPN (Virtual Private
Network) connections to branches using
public networks and now more and more remote
access solutions over which mobile users
or home office staff can access internal systems.
IT security systems need to be applied to these
critical points so that they are not vulnerable.
In large networks a high level of protection is
only achieved by central management of security
systems. So today central management of
firewalls, VPN and mobile security solutions is
more important than ever. The flood of information
about possible security solutions for a
company’s IT area is not easy to evaluate to
find suitable solutions to every problem.
IT security with legal and
acceptance problems?
How essential IT security is implemented is
still on trial, and faced with the facts on global
espionage by secret services and other states,
seems to need reorganising. At the moment
experts see the IT and communications market
generally as difficult.
The customer wants security for his data –
that refers to private data just as much as
pubic and commercial fields. Legitimisation
of data disclosure can only be a side issue.
Particularly so-called ‘legitimate surveillance’
hovers like a Damocles sword over the restrained
and legally deployed IT security. How fast
product safety labels can become obsolete.
And it’s all the clearer how important it is to
protect these infrastructures. The question remains
as to who it is that public legal institutions
need to protect themselves against. And
is court-order supported surveillance and the
resulting co-operation with the ISP (Internet
Service Provider) the telecommunications operator
or the network provider really the only
way to monitor the data belonging to criminals?
Because can this kind of well documented, legally-based,
clearly monitorable process not
also be circumvented? It is all the more important
to consider at what level data security
has to be implemented and what duties of
care data centre operators will have to comply
with. [ML]
56
EURO SECURITY Critical Infrastructure II/14