As the Vice President of Operations for an online retailer of contact lenses, I am used to the potential problems related to doing business on the World Wide Web. Like any other online retailer, we have a responsibility to our customers to maintain their personal and payment information with the strictest of confidence and within regulatory guidelines mandated by our government. Security is a top priority, as it should be for any business who, by the very nature of the marketplace, exposes itself to the potential hazards of doing business in cyberspace. With so many opportunities for things to go wrong, businesses such as mine must take a proactive approach to avoid falling victim to an ever-increasing variety of threats.
Recently, a virus infiltrated our system through a disk brought in by an employee. It worked it’s way onto our database in no time at all, and the potential for serious restriction of our ability to maintain functional operational status was obvious. While we have administrative and IT security safeguards to protect us from things of this nature, our precautions were inadequate to avoid this particular problem. Luckily, we had instituted a...