Getting the word out regarding Network Security

Communications via electronic means has become as much a common place as water flowing from a faucet. We check emails, pay bills, purchase items, research medical conditions, check our banking balances, just to name a few. Many of us take the necessary precautions to ensure we have the proper virus protection, practice “safe communications” and never open messages where we do not recognize the sender.



However, on what seems like a weekly basis, we hear about or have experienced personally identity theft, or watch the news as they list the companies that have lost hundreds or thousands of social security, credit card numbers or medical records due to a security breach.
Even though you are careful in providing your personal information, what about the companies we do business with?



At the defense of companies, ensuring privacy of information shared between a customer and the business is taken seriously. Network security mechanisms, encryption, policies and procedures are in place but there are limited resources, in the form of qualified individuals, to monitor possible threats.



Information Technology (IT) personnel are busy helping to make the company they work for be profitable, maintain maximum "uptime" and stream line their operations. In most cases, this consist of and is not limited to, ensuring web sites are up and operational, installation of new networking devices, maintaining the servers used by the employees, customers and business partners, backing up data for disaster recovery purposes and assisting the employees to maintain productivity.



This is just a very, very short list of many day to day tasks that have to be performed. The next question may be “if all the IT people are working on these tasks, who is taking care of security?”



Many companies have solutions in place to monitor the type of information that is allowed to enter and exit their network. The solutions will help to reduce the number of possible compromises to the company’s network but it will not eliminate them. There also has to be qualified personnel that can understand and interpret signs of possible security compromises and take the necessary action.


The bottom line is that there are not enough trained network security professionals to meet today’s demands. More and more information is being transmitted in an electronic format and soon our medical records will be too. This presents a greater risk as your most private information can be stolen or compromised. Because of this real risk, businesses need to train their Information Technology personnel on the topics, benefits and practices of security. This demand has also led to explosive growth in the Network Security Professional field to fill new and existing positions both here and abroad.


Certified Network Security Professionals are highly trained and possess the necessary and valuable skills to detect, identify and protect a company’s network from a wide range of attacks, threats, vulnerabilities and employee dishonesty. Because of the wide and severe impact adverse exposure can have on a company due to lack information security models, companies are starting to adopt standards for doing business with other companies and organizations, which involves having qualified security personal on staff.



In addition, some organizations are taking a more proactive approach to inform customers and other business, they are doing business with, the type of security certifications and experience their employees possess, as well as continuing education and training they are involved with. By demonstrating due care and due diligence, a company can assure employees, partners and customers that not only does the company take securing information seriously but what is being done to protect one’s information.