|
Top Ten Corporate IS "Gotchas" |
|
A "Corporate IS Gotcha" is an avoidable disaster waiting for the right
circumstances to happen. It's a problem whose solution before it happens
costs far less than the consequences of letting it happen. It's a situation
where an ounce of prevention now saves a pound of cure later.
Traditionally, such 'defensive' network design was entirely the province
of large organizations. Today, though, an increasing reliance on computers
combined with more sophisticated systems means that just about any
organization needs to analyze the risks and take action now -- before
the disaster happens.
The key to analyzing these risks stems from standard risk management
practices. How much will it cost to prevent; how much would it cost if
it happened; how likely is it to happen? Combining those factors gives a
fairly straightforward numerical answer. However, there are some
intangibles to consider.
Any business manager would agree that, all other things being equal, smooth
operations are better than disrupted operations. Likewise, predictability
is preferable to risk. Finally, technical experts agree that correcting a
problem when a system is smaller is easier and less costly than fixing the
system after it has grown in size and complexity. All of these are
compelling arguments for correcting problems sooner rather than later.
Some of the risks presented here may not apply to your organization.
Some of them may already have been corrected. Some of the disasters
might not occur even if left alone. However, just as most of us
wouldn't continue to drive a car we knew had bad brakes, we should also make
sure that our computing infrastructure receives the needed maintenance to
keep it healthy and productive.
|
|
1.
|
Security Patches
|
|
Bugs in many commercial software packages, including many operating systems,
can leave you vulnerable to hackers, viruses, and worms. These threats
can exploit these vulnerabilities to view or modify confidential
information, use your computing resources for their own ends, disrupt
operations, or even destroy data.
|
|
2.
|
Fault Tolerance
|
|
All hard drives eventually fail, just like all cars, no matter how well made,
will one morning fail to start. Setting up fault-tolerant drives beforehand
transforms a hard disk failure from a catastrophe to a relatively minor
repair task.
|
|
3.
|
Virus Protection
|
|
Viruses have gone from a minor annoyance to a serious threat to your
computing infrastructure and resources. Even those viruses that don't
directly damage data still make their cost known in the time needed to
remove them, the problems they cause on infected computers, and the
resources they consume.
|
|
4.
|
Backups/Disaster Recovery
|
|
Sometimes the unexpected can happen with no warning at all. While fault
tolerance helps protect you against normal hard drive failures, there is no
substitute for maintaining good backups and having a good disaster recovery
plan. It's an insurance policy -- something you hope you never need, but
that will be there if you need it.
|
|
5.
|
Open Relaying
|
|
If you run an E-mail server, it's important to secure it so spammers can't
use it to bounce their malicious junk mail. Failing to do so will let them
consume your network bandwidth and your mail server's computing power, and
if left unchecked will result in many organizations automatically blocking
all E-mail from your site, interfering with your ability to do business.
|
|
6.
|
Firewalls
|
|
A firewall is not 'perfect' protection, and should not be thought of as
such. But it makes an excellent first line of defense, limiting your
potential vulnerability to a few services that can be more easily
monitored. However, unless your organization is extremely small, with no
real existing network infrastructure, a 'pre-configured' firewall will not
fit your organization's needs. They should be installed and
custom-configured for your needs by an expert.
|
|
7.
|
Security Policies and Procedures
|
|
There's a saying in the industry: every system is perfectly secure until you
allow users on it. However, without the users, the system is pointless.
It's important to establish security procedures and policies to limit your
vulnerability to outside intrusions through which a hacker could obtain
sensitive information, destroy data, or cause disruption in network
operations.
|
|
8.
|
Network Design and Infrastructure
|
|
There are a number of potential 'gotchas' in this arena. Most of it
involves making the network design as consistent as you possibly can, down
to the workstation level. Especially with Windows networking, there are
many issues that must be considered for the smooth operation of a network.
High among these are 'browsing issues' which can cause situations where,
especially after a reboot of one or more servers, suddenly network resources
are unavailable for a while. There are a multitude of others explored in
this section.
|
|
9.
|
Cabling and Physical Plant
|
|
As the lowest level of your network lies a modest assortment of wires and
cables running through your building, leading to your switches and hubs that
connect everything together. However, if not set up correctly, or if the
wiring was installed improperly, it can cause hard-to-find network problems
including unexplainable slow connectivity and network operations, lag,
or even intermittent failures to connect.
|
|
10.
|
Documentation and Software Licensing
|
|
It's important to document everything inside your network. After all, you
could get hit by a truck tomorrow -- or any number of other things could
happen. With the high rate of turnover in the Information Technology
industry, it's important to leave behind a legacy of documentation that will
let others access and reconstruct what you have done. Plus, Software
Licensing is almost a gotcha of its own; if not documented rigorously and
carefully, it can result in hefty fines for your organization.
|