Risk Assessment

How Does Your Organization Stack Up?

10 Steps to a Stronger Organization

Stronger helps train your employees to better understand privacy and how to protect your business and data. We have training and consulting to address each of the areas of an organization’s security. Stronger helps each company work through a full assessment based on the 10 areas listed below. Call us to identify your weak areas of security and how to best address those areas of security.

83% of SMBs have no formal cyber security plan.

according to the National Cyber Security Alliance.

0 1. Protection

Ensure you have effective endpoint, network and email protection that filters out spam, malware and dangerous file types.

2. Employee Training

Training employees to be suspicious of emails, attachments, websites, and knowing how to prevent malware from infecting their computer and the network.

3. Patch Systems

Consider a patch assessment tool to ensure your operating system and applications are up to date with the latest security fixes. Most exploit kits can be countered by an available patch.

4. Endpoint protection

Install software and/or deploy other means to achieve a secure web gateway that can identify and block exploit kits before they infect your systems.

5. Firewalls

Cyber thieves capture a user’s password and confidential information to allow access to larger network areas that can contain: back-end databases, patient records, and point of sale transactions. Consider segregating your networks with firewalls.

6. Control Strategy

Identify and control the use of removable storage devices. Not only does this prevent malware from getting in, with data loss prevention (DLP), but it can also help stop personally identifiable information (PII) and intellectual property (IP) data from going out.

7. Full disk protection

Deploy a full protection program and encrypt sensitive data stored on servers or removable media for sharing with business partners. Encryption can be the difference between data lost and data secured.

8. Application Control

Monitor and restrict, unnecessary software that reduces security without adding any needed benefit. Mobile devices with significant social media and personal apps present increased security risks.

9. Data protection policy

Without policies and direction employees, departments and organizations don't know how to handle cyber situations. Containing a breach requires policies in place. Provide guidance for employees on how to keep personal and company data secure.

10. Cloud Security

If you move to the cloud, make sure that the ability to encrypt the data – both in the cloud and also when being transferred – is on your core requirements list. And how secure is your cloud storage, where is it actually being stored.