Ensuring the security of data and content is of paramount importance – laws and rules can do this much and no more. There is no gainsaying that it will be necessary to build, maintain, implement and follow the required processes and methodologies.

With e-commerce going to grow by leaps and bounds in the coming years, the need for a secure system along with the appropriate checks and balances will increasingly be felt across organizations and sectors.

In the midst of the global economic downturn and the resultant low business sentiment, there might certainly be a focus on driving business needs more aggressively – by even possibly cutting a few corners, turning a blind eye to some business happenings and other related matters. In this midst, business owners might not devote the needed time and attention to Data Security and maintaining high standards of Information security in their organizations.

This lower focus might just be the opening that unscrupulous operators of cyber crime might be waiting for to inflict that killer knockout punch to add the the market misery.

I have attempted to capture some key elements that would be of relevance across borders and organizations. These may not be exhaustive – but are directional and will help personnel involved to understand the intricacies and possibly drive the thinking in organisations.

Five Steps towards Building organizational Cyber Security

1.  Employee Training – on Cyber Security needs
Raising the security awareness level of associates, employees and stakeholder through effective training conducted periodically is a positive  way to ensure security is on their radars at all times and reflected in their working behavior at all times.

Employee training is not only a requirement for most businesses, but it is also one of the best ways to minimize the corporate’s exposure to the most damaging type of security attacks – the unintentional ones created by uneducated or careless employees.

Many current attack methods depend purely upon the behavior pattern of unsuspecting users. This could be in the form of the employee clicking on a malicious link or executing a harmful program; being lured to a harmful website, or even by something as innocuous as using a USB drive.

2.  Periodically enforce testing of  operating systems, networks and applications
Most organizations do simple external network and operating system vulnerability testing, which is a great way to identify Internet exposures.  However, these basic vulnerability assessments and penetration testing processes do not perform application level testing which has become a common attack method.

Two application level attacks that are often getting to be seen as a means for cyber crimes include SQL injection and buffer overflows. Application level testing can identify poorly designed and coded programs (such as home grown applications and online backing programs) that are susceptible to these types of attacks.

3.  Always do security testing and validation of newer technology before deploying it
It is absolutely sacrosanct in the changed worldspace that designers and developers strictly test and validate newer technology than resort to their hasty implementation. The usage of new tools across Web 2.0, P2P, virtualization and cloud computing are growing rapidly.

2008 witnessed a strong adoption of virtualization and a gradual rise in cloud computing. However, cloud computing will be the cause of major security concern among security professionals in 2009. This influx of new technologies, both business and consumer technologies, has opened additional avenues for cyber attackers to steal trade secrets and confidential business information.  It sure is good to be the first to launch a new tool and application to be distinct from the crowds.  It is better to be safe and a tad slow than be sorry in haste.

4.  Have a mobile device policy for employees
It would not be far from the truth to state that there are not very many companies that have successfully   implemented a detailed policy for usage of mobile devices within premises and also outside of the workplace.

PDAs, Blackberrys and thumbdrives have become common in the workplace. However, many companies do not have systems to monitor what kind of information is stored on them by employees and users.  Employees need to be educated on what should and should not be on a device used outside of the workplace. Proprietary, private or financial information should be stored only if absolutely necessary. It’s also important to protect sensitive information by passwords in the event such device is lost or stolen.

5.  Use care while using social and professional networking sites
Social networking has gathered momentum with added features in applications like Facebook, Orkut, LinkedIn and the slew of others. 2008 also witnessed the slow rise in attacks in these applications and 2009 can also be expected to see the rise in social networking websites to spread malware. Indication of this was observed in August 2008 when Facebook admitted that up to 1800 users’ profiles were defaced by an attack that secretly installed a Trojan while displaying an animated graphic of a court jester blowing a raspberry.

To summarise, it behoves on each and every user, regardless of rank, designation, extent of technology savviness, location, to be wary and cautious in the usage and watch out for any likely slip ups that could jeopardize the business efforts in a single click.

Kalanjali, launched by the Ramoji Group, is a tribute to Art, and a celebration of beauty. Kalanjali is India’s first fully functional E-Mall for arts and crafts. It showcases the rich Indian tradition, history and culture, through beautiful, rare and exquisite pottery, metal ware, woodcrafts, paintings, textiles and more.

In seeking to revitalize its existing website, Kalanjali had a two-pronged objective. Firstly, through its external face, it wanted to reach newer markets, both domestic and global. And this could be done by providing a rich and easy-to-use platform to market an exclusive portfolio of products, and offer high-quality and personalized service to customers. The platform would have to be conceived of as an e-commerce one, allowing an efficient shopping cart management, smooth payment transaction and perfect order status tracking.

For the internal customers, Kalanjali sought to provide a suitable interface to manage the administration of the site, and smooth integration with the Land Application. The objective here was to provide the flexibility and ability to integrate various marketing tools and tie-ups in the future, including statistical and analytical reports of website activity.

Kalanjali chose iridium Interactive (ii) as its partner in creating and preserving this bit of Indian heritage online.

ii commenced the engagement by defining the scope of work in terms of technology, design and development. The website was designed to have a rich look and feel, with an easy-to-se interface. For the customer, ii created a payment gateway integration system comprising a secure mechanism for online payment through credit cards. The design and information structure of the site was revitalized to truly reflect the beauty of the artifacts being advertised.

For the internal team, a Self Administered Module was developed, functioning as the admin login to monitor activities, respond to queries and feedback and maintain a client database. Also included was a Catalog Management System to facilitate easy navigation through products, categories and other links on the site and to allow for efficient capture of client information, like history of purchase. Finally, the back-office of the website used a Content Management System (CMS) that could be easily operated by a non-technical person. A CMS also offers various exciting possibilities to enhance the richness and creativity of a website.

All leading to easy shopping cart management, smooth payment options and reliable order tracking.