CS1907

More documents

Recommendations

Info

product review SAFETICA DATA LOSS PREVENTION Data leak prevention (DLP) is now an essential security measure for businesses, but a major concern for many is the lengthy deployment processes for some products. Safetica's DLP solution avoids these problems, as it's designed to be easily installed and fully operational in as little as one day. Safetica generates detailed security audit reports, revealing potentially unwanted or unsafe activities, who is accessing sensitive data and what they are doing with it. You can see how and where files are being transferred, the most active apps and users, potentially risky apps, IT resource usage and an analysis of web activity, all accompanied by security advisories. It uses a client-server architecture where the backend management services can be installed on a Windows Server host in less than an hour. These services are resource light, so Safetica doesn't require a dedicated host system and, once up and running, you can go straight to endpoint agent service and client deployment. Active Directory (AD) structures are imported into Safetica and Group Policy can be used to push the agent service to endpoints, after which they'll appear in the main console, ready to receive the client software. Once loaded, the clients passively monitor endpoints and send back information about user activity to the Safetica server. The amount of detail is remarkable, as the Safetica Auditor can show storage and removable device usage, active applications and their traffic, web site accesses, along with data usage and visit durations, plus all printing jobs. Trends show areas such as web browsing and social network habits, while advanced monitoring reveals all email and file activity. Two consoles are provided where the WebSafetica browser version displays daily overviews of activity and provides basic admin access. The desktop console facilitates access to advanced settings, the Auditor, DLP policy creation and the Supervisor access controls. The Supervisor module manages user activity and allows you to decide precisely what they can and can't do. Policies control areas such as removable device access permissions or web content filtering where you can choose from a range of URL categories, block or allow them and add multiple rules for more granular browsing controls. Data access is controlled by the DLP module where you create policies to protect sensitive data against unauthorised access and ensure users with access granted don't abuse their privileges. Along with context-based rules, the module offers content rules, which are easy to use as they identify sensitive data using algorithms, dictionaries, keywords and regular expressions. Content rules dynamically detect specific information inside files, emails, attachments, within apps such as IM and more. These are applied in data DLP policies, but you can also use others to define applications and communication channels, such as email. Zones group resources together, which can be external devices, storage areas, emails, network paths or a list of IP addresses, and are referenced by a policy as a single entity, so you can easily define trusted and untrusted zones. Disk Guard controls read and write access to local, network, plus cloud storage, and Safetica has management of Windows BitLocker for encrypting USB flash drives. Templates streamline DLP policy creation, so it's possible to create one and deploy it in as few as three clicks. Controls are highly granular, as you can even stop users taking screenshots of an application, if the view contains confidential information or using keyboard cut and paste commands. Safetica shows that implementing and enforcing DLP doesn't need to be timeconsuming or complex. It can show you everything you need to know about your data security posture in a few hours and easily achieve regulatory compliance. Product: Data Loss Prevention Supplier: Safetica Technologies Web site: www.safetica.com Tel: +44 (0)203 846 8416 Sales: safetica@datasolutions.co.uk 18 computing security July/August 2019 @CSMagAndAwards www.computingsecurity.co.uk
inside track EDUCATION, EDUCATION, EDUCATION! CYBERSECURITY NEEDS TO BE A PRIORITY FOR THE EDUCATION SECTOR, ARGUES ADRIAN JONES, CEO OF SWIVEL SECURE Adrian Jones, CEO of Swivel Secure. Education institutions need to make cybersecurity a priority. Despite the sector facing major challenges, such as a lack of staffing, funding and resources, cyberattacks are no less frequent or less severe in education. In fact, they seem to be gaining ground in prevalence year-on-year, as instances of breaches in schools and higher education are widely reported. THE CHALLENGES EDUCATION IS FACING The JISC report also investigates the challenges facing IT professionals when it comes to protecting education networks. When asked to rate how well their institution is protected on a scale from 1 (not at all) to 10 (very well), further education scored lower overall than higher education. The mean score for further education institutions was 5.9, while higher education scored 7.1. The rationale behind lower scores included: A lack of resources and budget - potentially pointing to the lack of finances to invest in cybersecurity, be it software or staff Cultural issues - a 'Bring Your Own Device' culture is common in educational institutions and can present difficulties in securing the wider network, particularly with IT staff already facing stretched resources An absence of policy - setting out policies for using the network and making sure they're adhered to can be difficult in large institutions with a dynamic user population. Despite these challenges, the education sector is still expected to secure their networks against unauthorised access and cyber threats, especially when the repercussions can be as severe as the examples discussed earlier. But there are some critical steps every institution should undertake to lay the foundations for a secure IT network. TOP TIPS FOR SECURING YOUR EDUCATION IT NETWORK With the challenges of poor funding and a lack of resources, the Education sector should focus their efforts on minimising the risk of a cyberattack, rather than a reactive attitude after one has happened. Training: providing basic training for all users of your network is one way to mitigate the effects of a lack of funding and resource. This can be something as simple as sharing a handbook with staff and students, including information about what to look out for and tips for practising good cybersecurity hygiene. Giving people the necessary information to protect the network at all access points could reduce the number of incidents caused by human error. Authentication: another cost-effective way to protect the safety of your institution and its students is to implement a user-friendly multi-factor authentication (MFA) tool. Including that extra security step for users who are logging onto the network will help prevent unauthorised access. An easy-touse platform should be high on your list of things to look for in an MFA provider. If users can use a platform self-sufficiently, there's less likely to be a need for administrative support, so education facilities can save on overheads, without compromising network security. These are just some of the cost-effective ways to protect your school, university or college from any form of unauthorised access. With the increasing frequency and potential severity cyberattacks pose to the education sector, it's crucial that IT professionals can work to find a solution to challenges like a lack of funding. www.computingsecurity.co.uk @CSMagAndAwards July/August 2019 computing security 19
Page 1 and 2: Computing Security Secure systems,
Page 3 and 4: comment NATION IN TRANSFORMATION In
Page 5 and 6: p ent est INFORMATION SECURITY ASSU
Page 7 and 8: editor's focus from the public and
Page 9 and 10: True multi-factor authentication wi
Page 11 and 12: GDPR fine is preliminary," states A
Page 13 and 14: case study "Equally, it does not he
Page 15 and 16: product review WEBROOT BUSINESS END
Page 17: financial focus an online banking u
Page 21 and 22: Webroot empowers businesses with pr
Page 23 and 24: threat intelligence have seen an im
Page 25 and 26: 12th edition of the most recognized
Page 27 and 28: cyber espionage a "sobering story"
Page 29 and 30: CYBER SECURITY europe 9-10 October
Page 31 and 32: industrial cyber security MULTIPLE
Page 33 and 34: endpoint detection and response GET
Page 36: Brookcourt Solutions (A Shearwater

CS1907

Create successful ePaper yourself

Delete template?

Save as template?