Introduction

Many network administrators believe that once they ve protected their network from the outside world, they ve done their job. However, according to the 2001 National Retail Security Survey, employees account for 47 percent (nearly half) of all retail loses. This could be translated to the statistic that a network protected only from the outside only provides 50-percent protection.

Before this statistic frightens you into locking up the candy jar on your desk, keep in mind the old German proverb, Opportunity makes thieves. You can keep the honest people in your office honest by removing the obvious security holes from your network. Behold! Lead not your end users down the path to corporate espionage and identity theft. Keep them from the temptation that is the employee payroll file. And verily, protect them from reading the CEO memo to the Board. When the CFO complains about the cost, pick up your wooden staff and proclaim, Sinner, how canst thou put a price on saving souls? I do the Lord s work. This routine might actually buy you enough time to construct a valid plan or it might get you sent to a windowless room with soft walls (in which case it will probably be your only chance to take a vacation without having to carry your pager). Good network security doesn t just happen. It takes careful planning, a solid knowledge of your current infrastructure, a thorough understanding of your company s business process, and the proper budget.

Most businesses do not produce Information Technology...