IT Security: Unenforceable Usage Policies
The problem
While information system infrastructure is managed and controlled by IT professionals, endpoint security cannot be disassociated from the behavior of its user, who can unwittingly make the network vulnerable to attacks. This is why securing network endpoints require a specific security approach.
Social engineering
Cyber criminals know how to exploit human nature to get access to information systems. The term "social engineering" refers to the practice of deceiving a person in order to obtain important information, such as network access codes.
One typical example of this is associating a malicious payload to an email or an instant messaging communication. There is always a way to trick users in order to make them perform an operation, which in turn will open the door to the criminal.
Computer usage unrelated to work
Another problem is the employee who adapts the workstation for personal use. The computer may be used by friends or family members, as well as the employee for games, chats, downloading pirated software, or to watch films and listen to music.
This creates problems in the form of increased communications costs, as well as liability issues involving violation of intellectual property rights or the use of unlicensed or pirated software.
The solution
matrix42 technology makes it possible to implement security policies that cover any user interaction with the workstation. It enables the IT administrator to prohibit unwanted operations such as listening MP3 audio files, or downloading software from the Web.
With Empirum Security Suite technology, it is also possible to apply white list policies, meaning that only applications specifically authorized by the IT department can run on the endpoint.
Empirum Security Suite features to enforce usage policies
- Preventing the user to install new applications (even as an admin of the PC)
- Controlling communication tools (P2P, IM...)
- Controlling multimedia files
- Controlling downloading operations
- Controlling private ISP connectivity
- Controlling files received by email or instant messaging
