IT security: tips for preparing and protecting your business from an attack.

Business is losing the war on IT security. There's a better than 90 percent chance your company will be a victim of a malicious attack on your computer infrastructure--virus, worms, hackers, Trojan horses. Most of these attacks will result in financial loss. In fact, the U.S. Department of Commerce's National Institute of Standards and Technology estimates security flaws cost the U.S. economy $59.6 billion each year.

According to the 2002 CSI/FBI Computer Crime and Security Survey, the threat of cyber attacks and success of those attacks are dramatically increasing. In 1998, 50 percent of businesses surveyed reported no downtime related to attacks; in 2004 only 6 percent claimed no downtime. And the threat isn't just targeted at large organizations either. There's no longer "security through obscurity." Small companies are even more vulnerable to attack and the impact more devastating to their businesses.

So, should you be afraid to turn on your computer and run screaming from technology? The answer's no. However, businesses of all sizes need to be prepared to address an attack when it happens and make sure they minimize their loss. While technology is important, the people and processes in an organization can make or break how successful a company is in preventing security breaches. In fact, 89 percent of those companies who suffered an attack had a firewall in place.

Following are simple steps your company can take today to greatly reduce your risk of being attacked:

* Identify someone who's responsible for security.

* Have security policies in place.

* Educate employees about security.

* Monitor use of employee computers.

* Conduct a security audit to identify any vulnerabilities.

* Install and update firewall and anti-virus software.

* Back up data daily and store off-site.

* Budget money for security.

* Create a security and disaster recovery plan.

* Stay up-to-date on the latest security topics.

* Update Windows with latest patches.

* Use good passwords and change them often.

* Don't open e-mail from people you don't know.

* Be skeptical of anything you receive from the Internet.

* Buy new hardware/software if more than four years old.

Businesses of all sizes need to recognize security attacks are increasing at an alarming rate. The only way to stem the tide is to understand and reinforce that point with every employee responsible for security.

According to a Computing Technology Industry Association survey, in more than 63 percent of identified security breaches, human error was determined to be a significant factor. In short, the old saying applies: "A chain is only as strong as its weakest link." It's impossible to have no security risk, but minimizing the risk involves everyone in the company, no matter its size or industry.

RELATED ARTICLE: Calling all tech-company leaders!

Do you own or run a technology company in the Detroit area? Do you know what it takes to build a successful tech company? Do you want to network with industry peers? The Detroit Regional Chamber is creating an advisory panel to advise the Chamber on member benefits, public policy and economic development issues specifically targeting technology companies. We won't be demanding a lot of your time (quarterly meetings with e-mail in between), and we will have some fun (Tigers game or other networking activity during the year).

To participate, your company should be at least three years old, a Chamber member and a recognized leader in your technological area. For more information on joining, contact Hans Erickson at [phone] or e-mail: [e-mail].

Reid Gough is dean of the School of Technology at Davenport University in Dearborn, a Silver-level member of the Detroit Regional Chamber.

[ILLUSTRATION OMITTED]

Technology online

Visit the Detroiter Online at www.detroitchamber.com/detroiter for a first-person account of the development of a successful voter-education Website by Jeffrey Adik, president of Treeflow Technologies Inc. in Birmingham, a member of the Detroit Regional Chamber.