maintaining online and network security

Steve's picture

What can we learn from the recent attacks that target big companies like Sony, IMF, Google, Governments, etc. Has that any impact for YWAM, missions, or Christianity in general?
Of course, we could say that these companies, agencies, and even individuals that got attacked are all high-profile targets for cyber criminals. Of what internest could YWAM really be, let alone an email account of someone of a Base Leadership Team somewhere in the world?

There is no one of potential global political influence (Sarah Palin's email account), no site with millions of users with various amounts of personal information (name, address, email, credit card, phone number, password, DOB, etc) (Google, Sony, and others), there is no technology to steal or infrastructure to harm (Lockheed Martin, Stuxnet -> Iranian nuclear power plant, military computers, etc.), and sure there is no money in it (Visa, IMF, etc.). I guess we can safely say that we are nowhere near a high-profile target as any of these.
On the other hand we should not forget that earlier this year a Baptist Church in the US was a target for being openly against homosexuality. Whether or not the church did everything right in that matter is another issue. But what if...

So far it hasn't happened (at least as far as I'm aware of) that a whole denomination got attacked because one of their churches has run a campaign against something. YWAM has probably gotten more press attention then we wanted after the film David C. produced about 9/11. Also YWAM Germany has gotten some attention in the national news that basically left it with a very bad name. But to my knowledge no targeted attacks on any of our networks or websites have been made.

What would happen to our websites if it would be targeted, how long would it stand against the attacks? Or any of our Base networks. What do we have in place in such a case, other then pulling the plug? Are we keeping our systems and software up to date with security fixes? Do we delete any data that is not needed?
I specifically think about the increasing number of YWAM websites offering online applications. Are user names and passwords stored in a secure manner, all the data that applicants enter into the forms. Is all that data deleted after the application was sent of? I don't think it needs to stay on the websites where we applications are hosted.
The connection itself. When we offer people to apply online, do we have this service properly secure via a SSL connection? After all there is some sensitive personal data to be entered in an application.

What are your thoughts about guarding our networks. Do you have anything specific in place at your location, any recommendations?

0
Your rating: None

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Type the characters you see in this picture. (verify using audio)
Type the characters you see in the picture above; if you can't read them, submit the form and a new image will be generated. Not case sensitive.