A computer security program can protect intellectual property, secure customer data, comply with privacy regulations, secure email and protect against viruses, spyware and intrusions. Without a computer security policy and computer security software solutions on your side, your business could be brought to its knees very quickly.

To achieve computer security in your business, consider the following:

1. Develop company-wide computer security policies and practices.
2. Inventory your hardware and software assets as part of your computer security policy.
3. Implement computer security software that addresses all systems and processes.
4. Include computer Internet security software and computer network security as part of your computer security program.
5. Stay current with computer security software updates.

Action Steps
The best contacts and resources to help you get it done

Develop computer security policies and practices

Rather than tackling computer security threats like viruses and spyware individually, develop a comprehensive company computer security policy that addresses both systems and infrastructure and how people interact with them. Establish a hierarchical permissions system that states by department and job title which employees have access to which software and data and at what level. Implement password controls. Benchmark your company's current security profile and set goals for improvements. If you don't have the expertise on staff, bring in a computer security specialist.

I recommend: The DigiTrust Group will do a security vulnerability assessment, looking for security flaws throughout your system and benchmarking the results. eWork Markets connects you to pre-qualified computer security consultants.

Inventory assets as part of your computer security policy

You can't secure your systems if you don't know what they are, where they are or who's using them. Every hardware device - from computers and servers to cell phones, laptops and PDAs - must be inventoried and physically labeled as part of your computer security program. Pay special attention to hardware assets that are used outside the office, especially wireless devices. Scan all computers and servers to inventory software programs and user licenses. Set up a computer security program maintenance schedule and adhere to it rigorously.

I recommend: MyAssetTag offers a wide range of standard and customized asset tags, including sequentially numbered economy tags you can customize onscreen.

Implement comprehensive computer security software

While many vendors provide computer security solutions to security threats on individual computers, look for a solution or combination of solutions that provides comprehensive protection for your entire enterprise. Any computer security program should include servers, networks, operating systems, Internet, email and wireless devices. A firewall, either software or hardware-based, is a must to prevent viruses coming in from the Internet.

I recommend: Consider small business security solutions like Symantec Endpoint Security and McAfee Total Protection Solutions. If your business is global, check out NTT America's Global Managed Security Solution.

Keep your computer security software updated

Computer hackers don't sleep and neither should your computer security software. It is important to stay current with security updates from all your software providers.

I recommend: Schedule regular Microsoft security updates.

Tips & Tactics

Helpful advice for making the most of this Guide

• •  Start a computer security policy initiative in your company involving all levels of management.
• •  Establish and communicate computer security policies and practices throughout the company.
• •  Scan all your computers and servers to get an up-to-date report of currently deployed software and hardware before creating your computer security program.
• •  Benchmark your current computer security posture and set goals for improvements.
• •  Make sure your computer security policy includes password protection for all server folders and email accounts.