![]() |
![]() |
| Friday, 1 August 2003 |
![]() |
![]() |
| Business |
| News Business Features Editorial Security Politics World Letters Sports Obituaries |
Business organisations should enhance Network Security Today, the E-business has transformed business boundaries and is exposed to security risks. The internet, extranets and local area network, all face potential security threats. The Firewalls no longer offer enough protection from the hostile environment and a need has arisen for the business organizations to harden their perimeter security one of the principal layers of defence. This was made known at a seminar on Network Security, focusing the threats to information systems and how to guard and protect them organized by the Information Systems Audit and Control Association (ISACATM), the Sri Lankan Chapter recently. Delivering the keynote address N. Supramaniam, the President of ISACA/ Sri Lanka Chapter said that the need for protecting the IT assets, which hold key information and data of the various corporate houses to the neighbourhood super markets. He also highlighted the e-Lanka initiatives and the vision of the Prime Minister Ranil Wickremesinghe in November 2002 and the roles that the IT Security Professionals could be called upon to play in the immediate future. Lionel Jayasinghe, Product Support Manager, Informatics International Limited introduced to the audience the Networking technologies used in the various industries. Kansihka Sugathadasa, Managing Director, IT Advisors Private Limited, outlined the networking technologies used in the Banking and Financial Institutions. Threat and hacking of the systems could even come from within an organization or a disgruntled employee said Sujit Christy, Business Solutions Consultant, John Keells Computer Services Private Limited and highlighted the need for risk assessment. He also focused on the types of threats, the organisation could face, its sources and how an organisation could encounter and mitigate such threats. S. D. N. Perera, DGM Audit and Vigilance, National Savings Bank pointed out how business could be continued with the impending attacks and disaster and how a Disaster Recovery Plan in Network environments could be implemented in an organisation. He recollected and shared his Y2K real time experience, in the Sri Lankan context. Arjuna Herath, Partner, Ernest and Young, emphasized the need for audit & control in the Network environment and also highlighted the need for auditing skills required to manage the complex business environment viz., the internal system connected to the internet where the customers could avail the goods and services offered and the various documentations required to complete an audit. Ms. Gowri Ranaweera, an Executive with Information Systems Assurance and Advisory Services, Ernest and Young introduced the audit methodology, while Kumar Jayatilake an audit manager with Information Systems Assurance and Advisory Services, Ernest and Young, dealt in detail the concept of ethical hacking and emphasized the need for auditing systems connected to network on a regular basis. |
News | Business | Features
| Editorial | Security
Produced by Lake House |