Case Study: Network Security
Computer networks of every company have the potential to be exposed to dangers that have the potential to do great harm. Individuals could gain access to Windows and Unix/Linux servers to exploit the company’s vulnerabilities. Computer networks are not only vulnerable to outsiders, but employees also have the opportunity to compromise the system. An unprotected network would open the door for malicious activity that could damage the company’s system, compromise company and customer information, and cost a great amount of precious time and money. A breach in the network could have a negative impact on finances, privacy, and information. Securing the Windows and Unix/Linux servers within a company from shortcomings and vulnerabilities to potential threats by both outsiders and insiders is an absolute necessity. This is achieved by using technical measures and enforcing security policies.
One reason it is important to secure the servers is potential of the insider threat. With 1,500 employees, the chance of an attack from the inside is elevated. The threat could come in the form of a disgruntled employee, by someone looking for gain, or by someone who unknowingly compromises the system. Conklin and White (2010) stated the following:
One of the hardest threats that security professionals will have to address is that of the insider. Since employees already have access to the organization and its assets, additional mechanisms need to be in place to detect attacks by insiders and to lessen the ability of these attacks to succeed. (p.9)
It may be difficult to determine who these individuals are, but the threat can be dramatically decreased by putting the appropriate security measures in place. There are several methods IT security should take to ensure the network infrastructure is more secure. One approach is by implementing technical safeguards in securing the network. Firewalls, updating software and operating system patches, and performing routing system checks will aid in network security. However, the technical approach will not work alone; a good security policy must be in place. With 1,500 individuals that potentially have the ability to access sensitive information or cause harm to the system, a policy should be in place to educate them how to properly utilize computer systems. Informing employees how they are able to use their computers such as how to avoid malicious e-mails, how to use the Internet safely, and other matters would help to reduce security risks and vulnerabilities. Also, each person should only have the amount of access to the company’s network necessary to perform their job. A custodian should not have access to the company’s financial information. Implementing security measures such as not allowing anyone other than IT to download software to computers will help prevent viruses, spyware, and other malware from being injected in the system. Assigning users with logon ids will prevent unauthorized individuals from accessing the system and also make it easier audit certain uses. Also, use of any unauthorized external device with a company computer should be against policy. If an employee requires use an external hard drive, a cd, or flash drive it should be approved first by IT. Security of a company’s network system is a top priority. Facing threats from both the outside and inside continues to challenge IT security. However, with due diligence, these threats could be reduced. Ensuring that the proper technical safeguards are in place is just one step. We must ensure that the proper safeguards are in place for employees as well. Having a security policy in place and educating everyone within the company is also necessary to make sure the network is secure.

References
Conklin, W. A., & White, G. (2010). Principles of computer security. (2nd ed.). New York: McGraw Hill.
Anonymous. (2014). Protecting your network from hackers, viruses and malicious software. Retrieved from http://www.allbusiness.com/technology/computer-networking-network-security/3308-1.html