Information and information systems have become a strategic asset that must be protected, just like any other property that is important for the operation of the company or institution. In response to the public database security scandal, Edrana Baltic once again emphasizes the importance of protecting existing systems and the data stored in them from unauthorized access or loss.<\/p>\n\n\n\n
When developing our company's Information Security Management System, as well as developing and supporting our software products, we follow the requirements of the Information Security Standard IEC 27002, which provides best practice recommendations for information security management, the requirements of Lithuanian Standard LST EN ISO\/IEC 17799, the OWASP specification, and the practice of our specialists.<\/p>\n\n\n\n
As we have said before, our system is equipped with options to reduce the damage of a possible accident and data loss, which are parameterized and adapted to the needs of each organization. <\/p>\n\n\n\n
We recommend to immediately:<\/p>\n\n\n\n
1. Encrypt Profit-Web system password;<\/p>\n\n\n\n
2. When creating Alga HR users and logging into the system, it is recommended to use the functionality \"Store encrypted password on the server\";<\/p>\n\n\n\n
3. Perform an infrastructure security audit and take other security measures;<\/p>\n\n\n\n
4. Install an SSL certificate for data encryption.<\/p>\n\n\n\n
However, as practice shows, it is also necessary to protect the disk itself or its copy, as it can be physically stolen. There are a number of available measures to help protect access to specified disks or copies thereof. In order for us to be able to offer you the best solutions, we recommend and suggest an audit of your IT infrastructure. Please contact us to receive assistance from our IT specialist. Our IT specialists are experienced, hold the necessary competencies, and are able to provide high quality services.<\/p>\n\n\n\n
We also suggest that you consider using Edrana Baltic cloud computing services, which would significantly reduce your IT infrastructure maintenance costs in addition to ensuring data security.<\/p>\n\n\n\n
If you decide to continue storing your databases on your servers, in addition to protecting your IT infrastructure, we also recommend using data encryption algorithms that prevent viewing or disclosing existing data in the event of unauthorized access to such data.<\/p>\n\n\n\n
Note. It should be noted that encrypting the entire database requires additional hardware resources, and, if the company does not have a sufficient number of modern servers, a slowdown in the entire system may occur after encryption is enabled. Test results show that it can be as high as 25 percent or more.
<\/p>\n\n\n\n
Head of IT Department <\/p>\n\n\n\n
Herkus Razgaitis<\/p>","protected":false},"excerpt":{"rendered":"
Information and information systems have become a strategic asset that, like any other asset that is important to the operation of a company or institution, must be...<\/p>","protected":false},"author":1,"featured_media":354,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[8,3,7],"tags":[],"class_list":["post-353","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aktuali-informacija","category-naujienos","category-sistemu-naudotojams"],"yoast_head":"\n