Is the information in my company adequately protected against theft, manipulation and loss? Which measures make sense for me as a small company to ensure good IT security? We distinguish here between technical and non-technical measures that increase IT security.<\/p>\n
The primary aim of technical measures is to prevent threats from getting in touch with your data. The protective effect depends strongly on the product and never offers absolute security. For this reason, non-technical measures are also required in any case in order to further minimize the residual risk of the technical measures.<\/p>\n
Firewall:<\/strong> Protect your network with a firewall. This firewall must not only be installed, but also configured correctly and provided with regular security updates. The firewall ensures that your network is shielded from the Internet and that only the data traffic that is desired is allowed. Some modern firewalls are equipped with artificial intelligence and automatically detect when, for example, an infected PC wants to communicate with the Internet and automatically block it.<\/p>\n Anti-Virus:<\/strong> If a virus reaches your PC despite a firewall, an anti-virus software blocks its execution or is able to clean an already infected system. Windows comes with Defender which provides basic anti-virus protection with very good AV-TEST rating<\/a>. Third-party products have a wider range of functions and increasingly use artificial intelligence to detect and defeat malware, including ransomware.<\/p>\n Web filter: <\/strong>A web filter blocks harmful websites and prevents your employees from accessing such websites at all via links in e-mails or advertising banners. They are available either as software for the PC, plugin for the browser or centrally integrated into the firewall.<\/p>\n Spam\/virus filter for e-mail: <\/strong>Prevents malicious emails from finding their way into your inbox at all. Good email providers already have such a filter built into their product by default, so you don’t have to worry about it.<\/p>\n Use strong passwords:<\/strong> Urge your employees from using strong passwords that are difficult to guess. Use at least 8 characters, mixed with capital letters, lower case letters, numbers and special characters. They must not contain words, dates of birth or anything similar. Use a different password for each login. With the password check<\/a> of the Data Protection Officer of the Canton of Zurich you can test the security of your passwords without risk.<\/p>\n Block all accesses of former employees: <\/strong>Ensure that former employees no longer have access to your data. Block all employees’ personal accounts and change passwords from central accounts. Think also of social media and cloud software.<\/p>\n Authorization management:<\/strong> Define clearly which employees can access which data and make sure your policy is correctly enforced. This protects against malicious activity by employees and reduces unintentional damage, for example by Ransomware.<\/p>\n Training:<\/strong> Sensitize your employees in dealing with your IT systems and possible dangers. This includes the use of e-mail and web browsers, but also the release of sensitive information via telephone or to external persons in your business premises. The video below (German only) sensitizes you and your employees to a better awareness of more information security in just a few minutes.<\/p>\nNon-technical measures<\/h2>\n