Protecting the Network without Breaking the Bank

Network security has been getting a lot more attention lately due to the news media reporting on Viruses, network attacks, and hackers. That makes it a little easier for Security Professionals to get managers to give us some time and resources to do our jobs, but the high cost of securing a Network may drive managers to look for ways to outsource Network Security instead of using available resources. In most instances, readily available tools can be acquired with little or no cost to enable a security professional to do an effective job of securing a network without spending the entire IT budget. If you can give the business a secure network without breaking the IT budget, then MAYBE there will be more left for raises...but don't bet on it. The goal of any good security professional is for management not to have to worry about information security. Document everything that you do to secure the network and the cost involved. Also, give the pointed haired boss the available choices and how much the commercial products cost, as well as what you are using and the cost involved. Have a Security Policy and documented security procedures and get management to sign them. Include in the procedures the Intrusion Detection system, Vulnerability scanning, and web use monitoring.