Network security: modems and remote access

Increasingly your staff require the facility to work from home or from a remote location while travelling. Most notebooks and laptop computers come with a built-in modem, a device that allows the computer to communicate via email, log on to your base corporate network, or search the web using a standard telephone connection.

Security protocols that are applied to desktop computers in the office also apply to these portable computers, and in some cases, extra security is needed to ensure total confidence.

The use of wireless networks is becoming more and more prevalent, but they are the most vulnerable to outside threats. It is possible with a laptop, a small aerial and free wireless network detection software to walk down the street and access the networks of nearby offices.

Similarly, unauthorised modems can leave IT systems open to virus infection and attack. Hackers scanning the internet can find, identify and lock into modems and simply use your employee's laptop to access the company network. In most cases, the user is not even aware that this intrusion is taking place as there are no indicators or warnings on the computer.

What to do

Ensure you have the following policies and procedures in place:

Make sure your policy on remote access is written down and clearly communicated to staff and volunteers.

Leave all dial-up modems disconnected unless actually in use.

Make sure that proper authentication is in force for all external users.

Each user must have an individual password and user ID.

All dial-up and remote access accounts should be recorded and reviewed on a periodic basis.