|
|
|
ACHIEVING
PRIVACY
There
are two requirements for achieving privacy when a remote user or
office connects to your system:
|
| |
You
must ensure that only those who are authorised to do so can connect
in. |
| |
You
must ensure that all information passing across the Internet is
encrypted in a way that prevents it being of any value to a third
party who may obtain access to it.
|
|
There
are a variety of solutions that achieve this. In general, they are
built upon international standards verified by the cryptography
community, i.e. by a group that consists largely of academics who
specialise in this field. If you purchase a solution based on these
standards, you are essentially reliant on the following to protect
you: |
| |
That
the standards are secure. Nobody can say for sure; they can only tell
you if someone has cracked them and so that they are insecure. However,
these standards have been published for some years and you can be
confident that both the cryptography and the hacker communities have
invested considerable effort into breaking them, without known success. |
| |
That
the manufacturer has implemented the standards properly. It is sensible
to buy products from companies with a track record of developing security
products, and one that is well regarded in the security community. |
| |
That
the product has been configured appropriately.
|
| |
That
remote users do not do anything that gives others access to your
systems. This could range from letting their children play on a
company computer to deliberately providing others with access through
their system.
|
|
The
last two are almost certainly the point of greatest risk. Protronics
can help you manage these issues properly. While we cannot guarantee
privacy, we can work with you to reduce the risk of it being lost.
| |
|