Screening Potential Employees

• CRB/DBS Checks

• Background Checks

  • The Criminal Records Bureau (CRB) and the Independent Safeguarding Authority (ISA) have merged to become the Disclosure and Barring Service (DBS). CRB checks are now called DBS checks.

Methods for physical protection of hardware and software

• Anti-Virus Software

• Locks on computers

Restrict physical access to files

• Methods for controlling access to computer rooms e.g. smart cards to control entrance to rooms; physically locking the doors, window grilles, CCTV.

• Secured areas to hold servers

• not leaving the computer logged on when the user is away from it

• Methods for physical protection of hardware and software

• Security of document filing systems

Biometric scans

such as voice or hand prints; retina scans;

Define security status and access rights for users/ logon procedures / audit trails /

• (Logon procedures) use of suitable username and hierarchy of passwords. All authorised users should be given user names and passwords. This will limit unauthorised access to the network.

• (Audit trails) for tracing of access and detection of irregularities.

Hierarchy of Passwords

• Identification User Name

• Authentification Password

• Authorisation – What files you can see and what your allowed to do

• Methods including private and public keys

Restrict physical access to files

• Methods for controlling access to computer rooms e.g. smart cards to control entrance to rooms; physically locking the doors, window grilles, CCTV.

• Secured areas to hold servers

• not leaving the computer logged on when the user is away from it

• Methods for physical protection of hardware and software

• Security of document filing systems e.g. Passwords and User IDs

Biometric scans

such as voice or hand prints; retina scans;

Firewalls.

• To prevent hacking and also used to prevent spyware / viruses

• A special environment set up to trap a hacker logging in over remote connections.

• It authenticates messages coming into the network and verifies the legitimacy of the user to enter the network.

Proxy Servers

• This device tries to stop intruders from identifying the IP (Internet Protocol) address of a user workstation accessing the Internet.

• A proxy server can act as an intermediary between the user’s computer and the Internet to prevent from attack and unexpected access.

• It allows client computers to make indirect network connections to other network services and hide our IP address.

• As soon as getting such request, the proxy server will seek for the resources from the cache in its local hard disk.

• To implement internet access control like authentication for Internet connection, bandwidth control, online time control, Internet web filter and control filter etc.

• To scan outbound content, e.g. for data leak protection.

Call Back procedures

• e.g. for remote access. Some companies operate a dial-back system.

• A user logs on to a computer which immediately disconnects the line and dials the user back.

• This would stop a user logging on with someone else's password.

Encryption - Methods of securing integrity of transmitted data e.g. use of an encryption program.

• Encryption methods including symmetric and asymmetric methodologies.

• Data transmitted over a network is coded before transmission.

• This means that anybody intercepting the transmitted data would not be able to understand it.

• The data needs to be de-coded by the proper recipient.