How to Conduct an Operations Security Assessment

Information technology, employee skills and business methods all comprise the operations of a company. Securing businesses operations from external or internal malfeasance is the purpose of conducting a periodic operations security assessment. Every business, no matter what size, should assess security weaknesses in its systems and work to prevent unauthorized access of business information. Read on to learn how to conduct an operations security assessment.

Difficulty: Challenging

Instructions

Create a Premises Security Plan

1. Recognize security is a legitimate concern for all types of businesses. Gather key business personnel and explore the security concerns of each department.

2. Formulate a security plan based on the best practices for your industry.

3. Review procedures for access to your business premises. If your business is open to the public, consider the need for cameras or other security measures. Determine if restricted areas are secure.

4. Investigate who has access to sensitive information, money, keys or sensitive business facilities. Consider restricting access to essential personnel.

5. Consider the impact of a physical breach of security on your business premises. Implement existing security provisions and create a contingency plan in case of disaster.

6. Compile all employee suggestions and prioritize implementation of corrective measures.

Assess Total Operations Security

7. Ask your employees about security concerns regarding information technology. Individuals who work with computers on a regular basis are in the best position to recognize existing problems. Document all suggestions.

8. Review existing computer software and investigate if applicable security provisions have been implemented. Contact the software manufacturer to ensure security provisions have been adequately installed in updated versions of software.

9. Recognize that all software security provisions are not compatible or may not provide adequate protection for your type of business. A computer professional may be able to integrate your software or you may need to explore different security options.

10. Monitor your network and assess who has access to sensitive information. Create a procedure to disconnect your network in case of emergencies. Test the security of your system on a regular basis.

11. Plan for the worse case scenario. Frequently back up all critical information and store a back up copy of your information at a secure off site facility.

12. Compile all employee suggestions and prioritize implementation of corrective measures. Expense is a business consideration for improvements in information technology, plug the biggest security holes first.

13. Consider hiring an outside company to perform an operations assessment. Compare their suggestions with those internally generated by your staff.

Tips & Warnings

• An operations security assessment is increasingly required by clients. Have a plan in place rather then risk losing business.
• The security of information is of growing importance to the business world. Investigate applicable laws and regulations for your industry. Failure to secure your information can cost you business and put you in violation of state and federal law.

Resources

• Comprehensive Information About Computer Security
• The National Cyber Security Partnership

Who Can Help Sponsored

• Fax without a fax machine! Over 11 million people use eFax® to fax online. Get your free trial today
• Onebox® - Virtual Phone System for Small/Medium Businesses. Service includes Toll Free, Local Number, Call Forwarding, Voicemail, Online Fax & more. Free Trial!