Top Ten Weapons Against Web Site Theft

Len Lombardo, chief information officer for TransUnion LLC, recently painted a grim picture of theft of proprietary information and other computer attacks occurring via e-commerce. Lombardo pointed to a study by Internet consultant Jupiter that found that 50 percent of Web site managers and chief information officers consider the sensitivity of their sites' data as "low." At the same time, the study found a basic lack of understanding among U.S. businesses at how grave a security breach can be.

Lombardo gave these ten tips as the best steps companies can take to protect their sites:

Install and maintain a working network firewall. Encrypt the data accessible through Internet connections, as well as any information sent across public channels.
Use a one-time password system. Ensure all accounts have passwords.
Regularly update security patches. Use tools with strong cryptographic features.
When writing software programs, use secure tools, many of which can be found at security-related sites on the Internet.
Continually monitor and update network configuration and use. When an area is identified as one that could be compromised, make changes immediately.
Check with vendors for the most recent security fixes. Use and update anti-virus software.
Monitor online security archives for alerts and technical advice.
Institute a unique identification system for tracking all access to data.
Audit systems and networks regularly. Detecting and tracing a breach in security is more difficult if audit data is incomplete.
Continuously test all security systems and processes.