Information Technology Advisors    

As criminals adapt new tactics in finding ways to con people over the Internet, we believe there will be new and emerging security threats throughout the next year. Over the following months in our newsletter, we will highlight a different Security Threat for 2010. Our security specialists will give you an in-depth look at each threat on the list, and provide information and advice on how to avoid a security breach.

THREAT #1: Malware attacks on Windows 7

What our experts say....

With the release of their latest operating system, Microsoft aims to replace Windows XP as the operating system of choice. As users move to Windows 7, malware authors will shift their attention to find ways to exploit the new operating system with targeted attacks.

Best Defense:

As the new year gets off to a great start, it is important to remember some of the basic security principles.  Review these and if you have questions, consult your IT department.

• Make your passwords complex. Use a combination of numbers, symbols, and letters (both upper and lowercase)
• Change your passwords regularly (every 45 to 90 days)
• NEVER give any of your usernames, passwords, or other computer/website access codes to anyone.
• Do NOT open emails or attachments from strangers.
• Do NOT install or connect any personal software or hardware to your organization's network or hardware without permission from your IT department.
• Make electronic copies and physical backups or copies of all your most important work.
• Report all suspicious or unusual problems with your computers to your IT department.

• Implement Defense-in-Depth: a layered defense strategy including technical, organizational, and operational controls.
• Establish clear policies and procedures for employee use of your organization's information technologies.
• Implement Technical Defenses: firewalls, intrusion detection/prevention systems, and internet content filtering.
• Update your anti-virus software daily.
• Regularly download vendor security patches for all software.
• Change the manufacturer's default passwords on all your software.
• Monitor, log, and analyze successful and attempted intrusions to your systems and networks.