BestITConsulting’s IT Security and Awareness Program

Risks are managed by evaluating:

• Vulnerabilities
• Threats

Information Management

BestITConsulting Systems established three general Confidentiality classes:

1. public - Freely shared information
2. confidential - Any data leakage, loss or damage of which can cause harm to data originator, owner, company or customer
3. sensitive - Any data leakage, loss or damage of which can cause significant harm to data originator, owner, company or customer

Information assets are grouped by origin:

• Personal data
• Customer data
• Project/program/account data
• Company data

Physical Security

Access to System and Application

• Sniffing (嗅探): Interception by attacker
• Hackers can intercept sessions, hijack sessions and even issue a denial of service.
• Session takeover
• Rogue (流氓) AccessPoint for stealing authentication
• ‘Man-in-the-middle’ attacks
• War driving: The term “war driving” describes driving around with a laptop, a smart phone or a PDA in one’s vehicle, detecting Wi-Fi wireless networks.
• Denial of service

Internet Safety

malicious - 恶毒

Mobile Device Management

How to Secure your computer

BitLocker must be installed. BestITConsulting automatically applies BitLocker for full disk encryption in all BestITConsulting laptops.