Manage Learn to apply best practices and optimize your operations.

How do you avoid security problems?

We are implementing a storage solution with an ISP using EMC. We want to know what we need to control in order to avoid security problems, like access to disk information. Our platform is W2000 and NT 4. Thanks.

Wow! Security is such a huge topic... Realistically, the only way to address your concerns is in specifics. Someone should conduct a security review of your site and your ISP. There are all sorts of issues here: physical security, security of the connection, policies, etc.

In my experience, most networks have some vulnerability. The only thing that is guaranteed to change with an ISP is that the data is no longer on your premises. If you put your data in some else's facility then you know for sure that someone else has access to it. However, because of the nature of their business, most ISPs are more security conscious than most end-user organizations. Your data may be more secure at their site than in your sever room.

Internal to organizations, the most common issue is that permissions accumulate over time. People are given additional access to perform new tasks and do new functions while their old permissions never go away. Eventually large communities have all sorts of access that they don't really need or even use.

In the situation you mention, the Windows 2000 encrypting file system may be of benefit. By using it to automatically encrypt your remote data, you lessen the risks that accrue from giving others access to it.

Editor's note: Do you agree with this expert's response? If you have more to share, post it in our .dZROapaKemm^1@.ee83ce3!viewtype=threadDate>Storage Management discussion forum.

Dig Deeper on Data storage strategy

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.