Security Coordinator

An IT security coordinator is an appointed person, employed at the premises, with the responsibility to:
Plan, document and implement security measures to protect clients' information and data from unauthorised access, deliberate attack, theft and corruption. Security coordinators also put controls in place to allow the secure transfer of information across the internet or between networks.
This appointed security coordinator would deal with a range of threats to electronic information, which could include:

• hackers - individuals who uses their knowledge of networks and computer systems to gain unauthorized access to computer systems
• viruses -  a malicious code that replicates itself
• worms – reside in memory and reduce system resources
• spyware – a program loaded without your knowledge to collect information
• Trojans - a malicious program disguised as a normal application
• denial of service attacks – overloading systems with useless data to bring them to a standstill
• 'phishing' – luring users into leaving confidential details on spoof websites
• 'pharming' – redirecting users to fake websites by hijacking genuine website addresses
• abuse of permissions by authorised system users.
• Data corruption – computer failure or power failure

Documentation should include:

• an Internet Security Policy that staff need to be shown and asked to sign
• a workable data backup procedure
• a Disaster Recovery procedure
• an IT Problem Escalation Procedure
• all Relevant Information relating to the computerised system

This person needs to aware of issues relating to this responsibility.  One of the better sites is:
http://netsecurity.about.com/

This site covers all the basic areas a security coordinator needs to be aware of.

 

Previous | Next