IT Security: What an In-Plant Print Center Needs to Know
16
IT Security: What an In-Plant Needs to Know Presented by Rita Puljer In-Plant Manager, MTD Products
-
Upload
rochester-software-associates -
Category
Software
-
view
93 -
download
1
description
This presentation from the 2014 IPMA conference is intended to provide a framework for a print center manager to use when adding, upgrading or replacing software for the in-plant print center. Learn the questions to ask yourself, your IT department and your vendors, and ensure smooth implementations by choosing the best solution with minimal risk for your organization. Engage IT early for the best results.
Transcript of IT Security: What an In-Plant Print Center Needs to Know
IT Security: What an In-Plant Needs to KnowPresented by
Rita PuljerIn-Plant Manager, MTD Products
Trends How software is deployed is changing rapidly
o Physical virtual
o On site Hosted
Data Breaches:Increasing in frequency, publicity, liability, and severity
How do you navigate all the choices and IT issues?
Today you’ll learn:o Questions to ask yourself, your IT department, and your vendors
o How to choose the best solution with lowest risk and ensure smooth implementations
04/12/2023 www.rocsoft.com 2
Agenda
Introduction
Trends impacting IT Security
Partnering with IT
Questions to ask yourself about your organization
Based on your answers:
What to look for in a Software vendor
Who can help?
Questions and wrap up
04/12/2023 www.rocsoft.com 3
Who Is MTD?
04/12/2023 www.rocsoft.com 4
MTD is a worldwide leader in outdoor power equipmento Headquartered near Cleveland, OH; privately held
o Reputation and focus on excellence in quality and service
Print shop/mailroomo Four employees
o Produce product manuals, manufacturing forms, consumer VDP postcards and signage.
It’s a Rapidly Evolving World
04/12/2023 www.rocsoft.com 5
Software deployment changing rapidly;you don’t just put a server in a closet or your shop.
Move from single applications on dedicated onsite servers to virtual servers hosting many applications sometimes in the cloud
Partnering with IT
For application owners it is IT’s job to:
o Provide infrastructure and open doors to the end-users
o Make sure company assets are safe and secure
o Provide best practices consulting
IT has many other priorities
o Support for internal systems, securing the company network, managing the corporate desktop and mobile environments, data warehousing, disaster recovery, backup and storage of data… to name a few
o Your implementation is probably not the highest thing on their priority list
o How do you work with IT so the implementation process goes quickly?
04/12/2023 www.rocsoft.com 6
Strategies to StreamlineIT Interaction
Plan ahead
Engage early
Considering a hosted/cloud system?o IT is still needed.
IT Can:
Help answer and ask critical questions
Propose possible solutions
IT is your asset, not your enemy.
04/12/2023 www.rocsoft.com 7
Questions to Ask Yourself What are your corporate requirements?
Does your data need to be secure (private)?o Healthcare, Financial, Government…
Records retention policies?
Who are your end users?o Internal vs. External
o How will they authenticate? (i.e., LDAP)
How will customers pay?
o Credit card?
o Internal charge back?
What systems does the software need to share information with?
04/12/2023 www.rocsoft.com 8
Planning Ahead
Having answers to some key questions beforehand saves time and jumpstarts the IT process.
Will my (W2P) software be hosted internally or externally?
How will my users log in, and will their data be pre-populated?o Self register
o Use their network login (i.e., LDAP/ Active Directory)
Where will my users use the system?o Only internal users on the internal network?
o From home or outside of corporate network? On the Internet?
What will I call the application?o Decide on a name and a URL that is easy to remember and use
o SSL encryption for the URL (i.e., https)? ***ALWAYS recommended!
04/12/2023 www.rocsoft.com 9
Planning Ahead (cont’d) Are there corporate requirements, i.e. computer usage policies?
How often do I need backups?
o For an on-site system, who is responsible for making and storing backups?
• How much data can I afford to do without if something major happens (flood, fire, etc.)
• Backup and disaster recovery always carries a price tag• Is my need critical enough to have a failover environment?
o For a hosted/cloud system, ask your vendor• How are they backing up and how often?• What is the Service Level Agreement (SLA)?
How is vendor support, maintenance, and monitoring done?o For on site installations, IT will need to supply the needed access.
What are the vendor support access requirements?
04/12/2023 www.rocsoft.com 10
On Site vs Off Site hosting On Site (at Your Company)
o Server or Virtual server• Virtual Server are the preferred
platform and provide more flexibility for expansion, backups, and failover
o Backup, recovery and DR are handled by your IT
o Vendor access may be required for support and updates
o Little or no internal bandwidth costs and faster network speeds
o Your IT data center
Hosted/cloudo Most are shared SaaS
environmentso Can I move my installation
on site in the future if needed?
o Backups done automatically (typically)- still need to ask
o Easier for a vendor to support and monitor
o Some additional corporate costs for bandwidth over the Internet
o Hosted data center • Specs and uptime
guarantees?
04/12/2023 www.rocsoft.com 11
Security
IT Can Helpo Minimize risk
o Firewalls and networks• Protect the network • Keep the internal network
separate from the Internet
o Balance ease of use for customers with security
o Match level of security with the sensitivity of the data
04/12/2023 www.rocsoft.com 12
What to Look for In a Software Vendor
What questions do you ask?o Does the vendor meet your corporate requirements?
o Does the vendor have experience in your industry?
o Do you have direct access to the software vendor?
How do you know they are knowledgeable?o Does the vendor have a resource that can talk at the same
level as your IT team?
o Do they understand your needs and how to meet them?
04/12/2023 www.rocsoft.com 13
Vendor Experience
Mitigating security requirements within your industry
Able to successfully handle security scans
Use best practices when building the following:o Software application
o Operating system
o Network infrastructure
o Authentication and encryption
What do their other customers say about their experience?
04/12/2023 www.rocsoft.com 14
Application/Vendor Best Practices Always use SSL if exposed to the Internet
Use secure authentication (SLDAP, SSO)
Disclaimers – Copyright, HIPAA
Forms managemento Audit trail, time sensitivity
Are unsecure services not enabled by default? (I.E. FTP)
Business Continuity and Disaster Recovery options
04/12/2023 www.rocsoft.com 15
Questions & Contact Info
Thank you! Thanks to RSA for their help Contact info:
• Rita Puljer [email protected]
04/12/2023 www.rocsoft.com 16
