13 top tips for better security

Information is a company's key asset. The Alliance for Electronic Business's magic thirteen recommendations for keeping that information sacred are:

1. Asset Audit: Identify what business assets need to be protected
2. Risk Assessment and Management: Determine the risk to exposure of these assets
3. Security Policy: Develop a web security policy
4. Security Responsibility: Where does the buck stop?
5. Personnel Security: Ensure your employees know their role in keeping safe
6. Physical Security: Making your premises safe
7. Secure Web Site Management: Are your routine procedures putting you at risk?
8. Web Site Development: Making sure security is inbuilt
9. Access Control: Provide effective employee access control
10: Encryption and Authentication: Safeguard data by using encryption and ensure effective authentication where required
11. Legal Compliance: Ensure the web site is compliant with current regulation
12. Business Continuity Management: Disaster recovery and fallback plans.
13. Test and Review Security Policy: Monitor review and update effectiveness on a regular basis