Data is the new currency. It’s not so much about losing information anymore, but hurting your customers and the reputation of your business. Plus, hackers don’t just attack businesses anymore – they attack customer’s computers as well. How on earth do we keep our businesses and customers safe from hackers then?
1. Keep Yourself Updated With The Latest Info
The best way to secure your site and your business is to be totally aware of what’s going on. Just as with viruses, there’s a fix for every hack. Your IT department should be 100% networked to the latest hacks out there and also the latest fixes. Conduct regular training classes for your IT department and keep them updated on the latest methods. Watch out for news of sites being hacked – LinkedIn is a good example of a recent big-name hack – and implement measures to ensure your site does not come next.
2. Look For Security Vulnerabilities
Test your entire site with an eye towards security vulnerabilities. Where exactly are your weakest points? If possible, use an in-house hacker to break into your own system and steal your database information. Hiring an ethical hacker is better than using a freelance one. Keep checking for vulnerabilities – don’t stop this exercise at any point.
3. Validate Overall Security
Check your application security software for loops if any. Develop serious, state-of-the-art encryption methods for private customer information such as credit cards, banking information and so on. Use the best techniques to validate user input, and stay safe from common hacker methods such as SQL injection and cross-site scripting (XSS).
4. Work With Customers To Enable Log In Security
Ensure that your customers change their passwords on your site regularly. Send them reminders to do so, stressing your need to secure their information and their computers. Test your log-in scripts to ensure that your customers can easily change their passwords and get them back in case they’ve forgotten them. Also make customers change their PayPal passwords, so that their payment accounts are not hacked.
5. Be Proactive and Fix Problems Before They Show Up
Problems will occur when you have an e-commerce web site. Set up early warning systems through the use of efficient monitoring software. Set down security processes for each team and make sure they adhere to them religiously. Also ensure that you are able to fix security issues without shutting your site down, thereby not impacting your sales.
6. Let Your Customers Know You’ve Been Hacked
There was a time when such information had to be kept hush-hush but not any longer. Let your customers know that your site has been hacked, so that they’re aware as well. It’s possible that their computers or data has also been hampered, so an early warning might save their work and business too. Also be sure to explain what measures you’re putting in place so this won’t happen again. You may lose customers over this but you will gain appreciation for being honest in the long run.
7. Secure Your Coding
Hire professional developers who can write clean code. Most hacks happen, both basic and advanced, on sites whose coding is unprofessional. Look up information on how to code your site securely and get it done. Get your code tested, again and again, till it’s totally clean and secure against hacks. Again, this isn’t something you do and then sit back. You have to keep monitoring your code and tightening the nuts now and then to be secure.
8. Harden Up At Root Level
Every bit of software in your systems has to be toughened so that not a single loophole is formed. This means hardening your applications, your operating-system, networks and accesses and customer log ins. Get rid of excessive or unnecessary software. Block all unessential entry points. Keep only those aspects that you absolutely need to run the site. Cut third-party plugins that are not 100% secure as well.
9. Opt For Open-Source Security Software
There are several open-source security packages that you can implement, if you haven’t invested in a paid one yet. Try ModSecurity if you want an open-source firewall for web app. For a free database firewall, try GreenSQL. Implement top-of-the-line paid security software as well, but you can use these tools to enable additional checkpoints, if you want extra security.
10. Dedicate More Resources To Security
Make security your number one priority. Without this, your business might just as well close down. When you set up your budgeting for the year, be generous with the IT security budget. Train your employees on how to keep their stations secure; this means preventing them from bringing any data from outside, and using free email software and so on. Be careful of malevolent employees as well – hackers don’t always attack from the outside. Monitor everyone’s activities and you’ll be fine.













December 10th, 2012
Posted by
No comment










