Crafting a Technology-Security Plan

Your plan should include the following security essentials:

• Antivirus protection. Every PC on your network should have antivirus protection. There are plenty of inexpensive, effective antivirus programs on the market for small and home offices.

• Antispyware protection. Spyware has become increasingly malicious, difficult to detect and difficult to remove. An antispyware program that frequently downloads updated definitions and monitors activity in the background is important, given the insidious nature of spyware.

• Firewall. A firewall is designed to block unauthorized access to computers and networks. Firewalls are available in hardware (as standalone network security devices or integrated into network routers) or as software. A software firewall is particularly important for laptop users who travel. Firewall software is usually included in Internet security suites, which also offer antivirus, antispyware, and other tools. Some software firewalls are even available in free, basic versions.

• Virtual private network. A VPN creates a secure "tunnel" between a computer and an unsecured, public network, such as the Internet. VPN technology offers an important layer of protection for your business' weakest security link -- mobile users. VPN security can be integrated into some network devices, such as intelligent routers, and turned on or off as needed.

• Wireless security. If your business uses a wireless network, at a minimum, you should use a password, WEP key or some other method to block unauthorized users from gaining access.

• Secure network hardware. Ideally, your company's network should be protected by routers with comprehensive, built-in security, including integrated firewall, VPN and an intrusion prevention system.

• Data protection. Implementing regular backup procedures is a simple way to safeguard critical business and customer data. Setting permissions and encryption will also help.

As I mentioned earlier, maintaining proper security throughout your network is a big job. If it feels overwhelming, consider hiring an IT person to handle the job. Or outsource network security to an independent contractor or managed service provider.

The bottom line is, would you like to be in charge of your computers, your network and your data -- or would you rather leave that up to a hacker?