Computer magazines, available in stores, offer great variety and many focus on providing product reviews of hardware and software alike. PC magazine, for example, is especially good for this and gives comprehensive reviews of PCs, graphic cards, sound cards, peripherals etc. PC Pro is also a big magazine that gives comprehensive advice on just about all computer-related products. Computer Active is another magazine that is worth a look for technical advice, and provides jargon glossaries, which explain some of the more technical terms.

The product reviews included within such magazines will usually run-through the technical aspects of the hardware or software for you, and then give them an overall rating. For example, with regard to a graphic card, PC Pro will talk about how good the card's technical specifications are and then relate that to the overall value it offers. Performance will be measured, and possibly compared to the top rated products in the category.

Of course, the magazines are not available free. If you want free technical advice, then you could just bypass the magazines via their web-sites! PC Pro has a very good web-site that more than complements its magazine. Visit www.pcpro.co.uk, and you will find that it includes an archive of its reviews, which can easily be viewed. These give the technical specifications of the product, review it, and then provide a rating out of six. With such sites, you can match the reviews to your gift requirements.

CNET.com is also a good site, but does not have an equivalent magazine. This site also provides balanced reviews, with recommendations and general technical advice regarding such gear.

At any rate, although the reviews provided are comprehensive, you might still have further queries regarding the product in question. Further technical advice can be provided from customer service, in places like PC World. They will likely be able to provide an answer to any further queries you might have, regarding the gift you are interested in. For example compatibility issues etc, or whether you have enough hardware resources to run a particular software application.

Computer magazines, the net and IT professionals (usually via customer service) can all provide useful technical advice regarding computer gear. Only you will be aware of your gift requirements, seek out the reviews and advice available and you will be able to break through the technical jargon, which can sometimes confuse.

1. Create a general document that every user must sign before they first login on to the computer. Describe duties and responsibilities and also write in all rules that may apply at their work. Create local internet page with useful information that every new user should read.  User should be aware of his/here responsibility when he/she got a computer and a network access.
2. Do not allow users to install any kind of software on a computer without an authorization. All application should be checked and verified by IT stuff.
3. Internet is just one of the sources that users can use for their work. Do not ban private use; there should always be permission to use internet sources also for a private use.  But make it clear that internet use can be filtered and banned if necessary.
4. Use proxy. Proxy gave you a perfect view on internet use. Users should be aware that proxy gave administrators a good internet usage statistic.
5. Teach users about internet use, internet communication. Teach them about internet frauds, ways of how others can gain personal information. Sharing that kind of knowledge with your users is usually well accepted. Users will become more aware of the dark side of internet and in the same time we have some better chances that our system is not going to be compromised.
6. Regularly control public and temporary folders. Do not allow users to store their private stuff on company data storage. Why spend many on expensive fast storage to collect data that is not relevant to business process. But do allow users some private data on local machines. But make it clear that you do not create backup of their personal data.
7. Encourage users to read manuals, use F1 key or just search the internet for their problem.
8. Every new policy you apply and restrict any kind of usage of computer's HW or SW in a company should be explained clearly to all users.
9. Try to choose one or two brand names for your HW (notebooks, desktop, server, printer) that way you are going to have better support, lower price and no compatibility problem. Just allow users to choose their HW from list you provide or accept.
10. Do not be a part of your user mailing list for jokes, funny links etc. If you want to have a strict policy and users who are going to accept them, than you have to be strict to yourself, otherwise all effort is worth nothing.

Just remember, everything your users learn is important as much for him/here as for your SME and you. Less technical support, less error and less time spent on solving problems give use more time to work on improvement and innovations in IT.

In the case mentioned above, the professional should first of all evaluate the available the courses of actions in an unbiased and professional manner keeping in mind the affect his decision will have on the stakeholders. He should also consider his moral responsibilities and priorities on the basis of code of ethics. In the present scenario, the professional should realize that according to ethical code he should use his knowledge in an honest manner to serve the community loyally.

He should maintain the integrity of his profession and inform the employer and client if he feels that the project will not be in their interests due to some reason. In this case the reason being the unreliable information from other units. Also the professional should not mislead a client knowingly about the result of the project and should give unbiased opinions and realistic estimates to a client. All these codes of ethics suggest that the professional should go against the decision of his supervisor and contact the client to appraise him of the situation so that proper and timely corrective action may be undertaken.

Image source: Michael Tan

At the first glance, I mistakenly took it as the sound card, network interface card, TV tuner card or any sort of cards. I could hardly guess what this thing was, and finally someone told me that this is a masterpiece of a Japanese company. It is known as PCI Disk Card which is inserted into the PCI slot of a computer or a laptop. It is indeed a magical imagination. Such invention really makes me wondering the unique as well as the creativity of the Japanese imagination.

Isn't it strange from its aluminum appearance? It looks like mosquito spray.

(Image source: Michael Tan)

What's this? Can you guess? Perhaps you will think that it's a mosquito spray as what I've thought of while looking at this bizarre stuff. I'm sure that you haven't seen something like this so-called USB anti-mosquito spray elsewhere. Now, something makes you doubt about this. Where got USB anti-mosquito spray, never heard of it before. If not, is this an USB exploding device? No, impossible, its line is too short to have even burnt your hand when you light it up. Then, what on earth is this crazy thing?

(Image source: Michael Tan)

Well, this is actually called USB sound card with its external appearance fully coated in aluminum. It was a product of Hercules Audio which is named as USB External Soundcard. This is cool, right?

Is this a blue hoop or a life buoy? What's its connection to IT?

(Image source: Michael Tan)

Crazy! What's this? Is this a blue hoop or a life buoy? Impossible, a hoop or a life buoy will not have two-legs attached at its bottom. Instead of saying it's a two-leg appliance; it seems more like two wooden rods. You will never know what this thing is by just judging from its external appearance. I'm certain that you'll have problem to guess for this thing if I decide not to tell you the answer. Well, this is a stereo headphones launched by a company called Tube. Though it may look small, it has 5.1-channel audio capability to enhance its performance. It's indeed shocking to know that it has 6 built-in speakers. Due to its extraordinary audio capability, it will cause you about 150 Euros.

Is this a product from an alien planet?

(Image source: Michael Tan)

I'm sure that every one of you may have watched science fiction movie of Minority Report 2002 directed by Steven Spielberg and starring by Tom Cruise, Colin Farrell, Samantha Morton, Max von Sydow, and Lois Smith. You would come across with numerous technologically advanced gadgets in this movie, but this gadget with a blue semi-translucent cap attached on its top is somewhat looks like the film projector in the science fiction films. Now, you will be amazed to learn that this is a high-tech product of a Caller Display invented by Olympia InfoGlobe, and it is a model of OL 3000 caller display device. Whenever there is an incoming call, the caller ID (or calling number identification) will be automatically displayed on its screen.

What're you saying? A golden ladybird is used for a computer?

(Image source: Michael Tan)

This golden ladybird gives me a good feel to look at it. Though it's not made of the pure gold, it's manufactured with an excellent artwork to give you a delicate and sophisticated sensation.

(Image source: Michael Tan)

It's not for MP3 as you couldn't find a headphone slot to fit its plug into your laptop or computer. If not, what's this? Please guess, dear friend! Hmm, this is a U-beetle or in a simple word, U-dish. It's attractive and yet strange, right?

What's this stuff then? Its transparent body is packed with many “top secrets.”

(Image source: Michael Tan)

A first touch on this stuff made me thinking that it's a USB hub. However, this couldn't be a USB hub as its circuit is designed to be more complicated than the USB hub. As this gadget has a D-Sub interface, then it must be a graphic card. However, this guess is not true. The graphic card is an important part of the computer, it couldn't be connected externally. Even for a modern computer nowadays, there isn't any standard I/O interface that could meet the data transmission speed in this manner. The next possibility guess is that it's a screen. Again, it's incorrect as the screen will require more than one D-Sub interface but this device only has one. In fact, this is an external graphic card designed by the Japanese. A bit incredible …….Well, this stuff is not manufactured for you to play games; rather it's a dual mode, enabling multiple displays with different contents via a computer or a laptop. I don't think it could meet the requirement for 3D data processing speed, as it uses USB 2.0 interface so its speed is far behind the former mentioned earlier.

Besides showing time, what can this stuff do?

(Image source: Michael Tan)

You need no my answer and you'll tell me that this is a watch. You're right! This is a simple designed watch judging from its external appearance. Of course, its function is to show time. But, wait, my friend; don't make this as your final conclusion. Let me telling you that this is not just a watch, it's a product resulted from a micro-electronic technology. Not only it's a watch, but it has a close link to a computer. Now, at this point, you may challenge me for talking rubbish here.

(Image source: Michael Tan)

This thing is not hard to guess instead. If you keep yourself abreast with the IT news, I'm certain that you'll know that this is a U-watch. Again, this is a U-disk which is cleverly made convenient and portable for you to bring along elsewhere but it has a limited capacity for data storage.

Is this an insect of Y2K?

Image source

I can't imagine that this gigantic insect got to do with a computer. It's amazing to find that it's a computer's mouse. When you lift up its wings, it doesn't show you that it's a mouse. Instead, it looks like a housefly or any types of insects with a typically known six legs.

(Image source: InTozgc.com)

It's regarded as an insect of Y2K. Because of this invention, I've to accept the fact that human thinking is complicated and beyond the imagination. Needless to say about this Y2K's insect, could you imagine that your computer hardware is invented as the smelly toilet ball as listed in Desmonrock21's article entitled Gizmo: Cool Computer Case Mods 2. Gosh, stink, it gets me vomiting to look at those disgustingly designed computer products!

Oops, something totally unknown!

(Image source: InTozgc.com)

Now, my brain is poor enough to guess what this device is. It's not appearing to me as a computer's mouse. If I was not told that it's a mouse, probably I'll mad at guessing at it. And, I may never be guessed it right, I believe.

(Image source: InTozgc.com)

As shown in the above picture, its usage is very easy.

Is this a UFO?

Image source

This pumpkin-like computer product is designed to make it looks attractive as well as delicate to indirectly show the beauty in the art of the modern computer technology. The wooden treasure box which is attached with the pumpkin part looks very antique indeed! This product was on display in the exhibition of the Pentium 4 E3 in 2002.

Run, run! It's going to explode!

(Image source: InTozgc.com)

Wow, this explosive looks grand and elegant! Is this going to explore, I doubt of it. It's so beautiful. Incredibly, you couldn't imagine that it's a computer's mouse. I couldn't figure it out what's the feel when touching on it to move the cursor around the computer's screen.

Yuck, a strange human hand!

(Image source: InTozgc.com)

Yuck, a strange human hand to be your computer's mouse?! I hope this is just a nightmare but it happened to be a real fact that I've to accept while sitting in front of the computer. This hand looks so disgusting and I'm not going to touch on it. I believe that it'll bring a bad luck for me. Could you examine it closely? This strange human hand even comes with a look-real fingernail and some hair on top of its surface. Now, what do you feel? It's hilarious and bizarre though!

Yuck, another scary human body part!

(Image source: InTozgc.com)

The scary story about the designs on the mouse not only stops on a human's hand, but it also extends to the human's mouth. Look, the mouth is attached with two rows of teeth; one is located on the upper jaw, while the other one is located on its lower jaw. Whoever will want this to become his or her mouse? It's so disgusting to look at!

This is a computer and not a Christmas house. Can you believe your eyes?

Image source

Oh, I'm confusing with this device. I couldn't believe my eyes that this is a computer. Its design looks very attractive, but you can't eat the butter spreading over its top roof. While looking at this computer, it reminds me that the Christmas is around the corner.

Hey, are you kidding with me? This is a computer, you said?

Image source

This is a WMD computer, an abbreviation of its name: Weapon of Mass Destruction. From its name, you might judge that its killing power must be very scary and destructive. Why the inventor wanted to design the computer in this manner? Perhaps, the inventor just wants to show its greatest ability in terms of speed, capacity, and its operating systems. Anyway, this design is indeed hilarious!

Wow, what an odd-looking computer!

Image source

Hey, is this really a computer? Where's its CPU (processors)? Its main MOD systems are all attached to the surface of the wall, can't you see? Its motherboard, drivers, hard drives, graphic cards, and even its power cords are all hung to the side wall of the cupboard. I guess this inventor do this to avoid removing out parts of the components too often from his computer. Or else, he must be the weirdest person who feels comfortable to look at the computer in this crazy and illogical manner. See, the label pasted onto the side wall “Intel Outside!” Such a cool and ridiculous bastard!

Wow, what a good idea to have a microwave oven bake your programmes.

Image source

Do you want a microwave oven to bake your “programs?” Interesting stuff indeed! You'll get interested with this cool stuff, I'm sure. It's completely a perfect microwave oven ever designed to become a computer. This computer was displayed in CES Exhibition in 2003. This microwave oven is equipped with a liquid crystal display door. To operate this computer, you just press either its button located from the right side of this image. Its main operating system is “grilling” inside once the power button is pressed. Cool stuff though!

Do you want some cute animals running around your computer?

(Image source: Michael Tan)

Pets such as dogs, cats, hamsters, and etc. no longer will they sit on your lap, palm, or sleep beside or under your table. They are now active enough to run around parts of your computer.

(Image source: Michael Tan)

It must be enjoyable watching these cute animals or pets crawling along the cables, USB flash drive, power cords, external disks, U-disks and other computer's components. The addition of these computer by-products will definitely refresh your feeling while sitting in front of a computer or a laptop.

These are very creative designs!

(Image source: InTozgc.com)

This luxurious car designed mouse will definitely add in a sense of fashion while contributing a constructive design to the IT world. It's so nice and beautiful that I'm going to have one as my new computer's mouse. It can move just as smooth as the sport car could move along its track.

Is anyone hungry here? Would you like some fast food or Japanese delicacies?

In the past, a USB flash drive was shaped into either a rectangular or a square shape. Its shape was limited to a fundamental pattern and design. But, nowadays, the USB flash drive has shaped into a strange, wield and extraordinary pattern to increase its sale in the market. The design of USB flash drive has appeared as a fast food menu that will definitely capture the computer user's attentions worldwide.

Hamburger, Pizza, and Hotdog Menu

(Image source: Korean Monthly Technology Magazine, March 2007)

These USB flash drives take a theme of a fast food menu. They can be ranged from hamburgers, pizzas and hotdogs that you are familiar at any fast food outlets. As their appearance are manufactured in a framework resembles to hamburger, pizza, hotdog and sandwich, and thus they sometimes tempt people to eat them. Presently, these types of USB flash drives have a capacity up to one gigabyte.

A strange Menu of KFC

(Image source: Korean Monthly Technology Magazine, September 2007)

This is not a real set of KFC menu, it is a strange design of USB flash drive. If you examine it closely, you will find that the rice is actually a USB 2.0 Hub with four openings. Each opening is connected to a chicken, pudding and prawns. They are furnished with a ready boost facility with their capacities up to one gigabyte.

Octopus Sushi Menu

(Image source: Japanese Monthly Technology Magazine, January 2006)

The main design of these USB flash drives is an octopus (or tako in Japanese). If you do not examine them closely, probably you will be perceived to believe that they are real octopus. The manufacturer made them so real to give people a convenience feel of their completeness. When you pull out the head of the octopus, you can see the body of the USB flash drive. Of course, the other part of its body is a protective casing for the USB flash drive. When you insert this USB flash drive into the slot of the computer, the body of the octopus will shine or glister in blue light. It is fun and interesting to look at, isn't it?

Sushi Menu

(Image source: Japanese Monthly Technology Magazine, January 2006)

These USB flash drives are shaped into a Japanese cuisine or Sushi menu. Sometimes, you may come across a variety type of Sushi found in a Japanese restaurant which includes kappa(cucumber), California Roll, makizushi (rolls), inarizushi(toppings stuffed into a small pouch of fried tofu), Chirashizushi(scattered sushi), temarizushi (ball-shaped sushi with a filling of fish) and omelette. These USB flash drives have a capacity as big as one gigabyte.

Hmmm, this one looks rather odd!

(Image source: Jackson)

Not everyone will prefer to have their computer designed in a conventional manner, some computer enthusiasts may prefer to have their computers looking weirder than others to show that theirs stand out to be more striking and extraordinary. Despite of this perception, they started modifying their computers in this weird manner as what you see in the above picture is one of the examples. What's your opinion? Do you like this skeleton's computer? Tell me your idea, perhaps someone is going to modify his or her computer in a rather odd manner than all the stuffs I've managed to list here.

• Data corruption: If the incident causes data corruption, the organization may be forced to take systems offline until you can recover or rebuild the data. In large databases, this process can take several days, even on the fastest available computers.
• Denial of Service (DoS): A concentrated attack, especially when it originates from large numbers of systems, can render a server or an entire network of servers unreachable to customers and partners. Such attacks can last for hours, days, or even weeks.
• Forensics: Your organization (or law enforcement) may need to carry out forensic operations on affected systems to gather evidence for a possible prosecution. Trained personnel usually conduct forensics on quiescent systems (systems in which activity is halted) to provide stability, ensuring the best possible evidence gathering.

To reduce the effects of a security incident, consider these measures:

• Alternate servers and storage systems: Place alternate systems and storage systems into service while trained personnel perform forensics on affected systems. Before you place affected systems into service, however, the organization needs to be certain that they won't be compromised, too.
• Distributed Denial of Service (DDoS) defense: Some Internet service providers offer a DDoS defense service that may help to restore connectivity to customers and partners. These solutions can cost you, but so can being offline.
• Alternate network locations: If an organization is experiencing a Denial of Service or Distributed Denial of Service, you may be able to avoid disruption by relocating affected servers or networks to another logical place on the Internet. Whether this move works has a lot to do with the determination of the attackers and their ability to change their intended target.
• Backup data: Replication and mirroring are great technologies that can compensate for hardware failures. However, in the case of a deliberate attack, replication or mirroring may propagate the corruption to other storage systems. If this widespread corruption occurs, you may need to recover data from a recent backup - but only if analysts can determine that the attack hasn't affected a recent data backup.
• Heterogeneous (similar) systems: If attackers attack through known vulnerabilities in software, using heterogeneous systems may prevent an attack from reaching some systems. For instance, if an application uses both a Sun system with Oracle databases and a Windows system with SQL Server databases, an attack through the Windows system can't succeed on the Sun server.
• Forensics training and tools: This measure is an up-front investment of dollars and training. With better forensics preparedness, your business can respond more quickly when you need forensic activities, as well as develop alternate strategies that can minimize impact on business operations.

• Uninterruptible Power Supply (UPS): Usually two systems in one. A UPS has circuitry that cleans incoming power of spikes, surges, and other noise so IT equipment receives the cleanest possible power. A UPS system also has banks of batteries that can become the primary power source for a short time - usually a fraction of an hour.
• Electric generator: For power outages that last more than several minutes, you need an electric generator, in addition to a UPS, to assure power availability for as long as several days.
• Fuel storage: For organizations that may experience power outages that last more than a few days (and if you can't easily get fresh supplies of fuel), consider building a fuel storage facility. With such a fuel storage facility, you can have continuous electric power, even during prolonged outages. UPS and generators work together - you need both to assure continuous power. Generators take up to two minutes to come online, so you need a UPS to fill the gap between the utility outage and when the generator can come online. Similarly, a UPS can't supply power for very long, which requires a generator to provide power for up to several days.

FIGURE 1: The POS Functions

on your fingertip, imagine the power of the WebPOS (Point-Of- Sale) system to serve the needs of the customers. Built in accordance with the latest trend, it offers features quite more advance than the traditional.

Power Key Features

• Item keys corresponding to the products, goods, and stuffs offer by the branch store with just a touch
• Function keys such as the Subtotal key that computes the total prices of the items purchased, the Check Barcode key that verifies the encoded price, the Cash In / Cash Out keys that ensure the amount of money entered in the cash drawer, the Search key that allows the user to find the appropriate items he is searching for, the Void key that declares the invalidity of the transaction, the Return key that revisits your previous transaction, the System Configuration key that allows the user to configure the system with the appropriate commands, the Change Keylock key that allows you to change passwords, the Reset Printer key that changes the previous action of the receipt's printer, the Journal key that keeps track of the transaction, and the Credit Card Journal key that tracks down every credit card transactions.
• Number keys with allowable decimal values that use to compute the given price of the items further supported by the Clear, Quantity, and Price keys primarily use to clear the typed values, displays the total amount of the items, and shows the appropriate prices respectively.

Identification Features

• Up to date displays and monitoring of time and date of the daily transactions with the corresponding number of weeks of operation
• User authentication functions that logs in and out the user with the corresponding password.
• User / operator properly identified with the equivalent code and password with the appropriate display of the name and code on the screen in addition to the existing terminal ID number
• Screen display of the descriptive items with its equivalent price, quantity, amount, and deductible tax.

FIGURE 2: Sample Form

FIGURE 3: Touch - On Map List of the Specified Locations

FIGURE 4: Touch-On Specified Location in Europe

FIGURE 5: Touch-On Specified Location in Asia

Advanced Features

More than the usual POS, WebPOS offers superior advancement for more satisfaction of the consumers.

• Location Specific.This function allows the user to choose the specific location of the product to be bought by the consumers. Before the transaction takes place, the user may first choose from the more general to the more specific places all over the world sub classified by its continent. Each map corresponding to the different countries can be selected by just touching on it.
• Convenient Access. The whole operation can be controlled using a 'touch screen' function. But then the user has the option whether to use the mouse, his fingertip, or both to access or operates the system.
• Security Proof. Security questions were asked on every action provided by the dialogue box. Every access has appropriate passwords to verify before the user may get into its transactions.
• Dual Screen Function. Two back to back screens were provided, one facing the user and the other facing the customers (customers' side). While the user side displays the different access, the customers' side displays the amount he is going to pay intended for verification purposes and advertisements of different products and services to provide leisure to the customers.

Eliminate Public Access to Wiring Closets and Cables - Wherever possible locate all wiring closets in locations that are not accessible to the public.

Limit Insider Access to Wiring Closets and Cables - Try to ensure that general insider access to wiring closets is restricted to “the few” (the IT team).

Naming Wiring Closets and Cables - Ensure that you build naming conventions that include wiring closets and cables. An earlier article entitled “Building Your Own Naming Conventions” explains how to do this. Click this link to go there Building Your Own Naming Convention.

Securing Wiring Closets and Cables Labeling Systems - Now to apply labels to your wiring closets and the cables inside them. For more information about developing and implementing, your very own highly secure labels click this link Making Your Own Indexed Labeling System.

Partitioning the Wiring Closet- When multiple utilities must share the same wiring closet then it is a good idea to partition the available space in your wiring closet. The basic idea here is that each utility will have its own dedicated and locked wiring closet partition.

Dedicated Wiring Closet Compartments - Thus, electrical wiring will use its own dedicated self-contained compartment in the wiring closet if need be. Other utilities, including IT infrastructure and components will have their own dedicated compartments as well.

Reducing Electro-Magnetic Interference (EMI) - For the IT related wiring closet partitions, I strongly recommend that the different cabling types have their own compartments as well. This will help to reduce the negative impacts of EMI (noise/cross talk) from external sources.

Wiring Closet Cable Bundling and Grouping - With multiple types of IT cable to be found in wiring closets it is essential to subdivide these cables into groups of related cable types, functionality and the services that each cable transports. Use cable ties to keep the individual member cables of a custom group together.

Destination and Services - One practical grouping system would be to bundle all cables heading to the same destination together. Another would be to bundle wiring closet cables involved in the delivery of the same specific services together.

Dedicated and Exclusive Fiber Optic Cabling Compartments - Although fiber optic cables are “immune” to EMI they still require careful planning, management and maintenance. Accidental damage to a very small number of the individual fiber optic lines within a fiber optic cable often necessitates the replacement of the entire cable. I can tell you from experience that this is no fun.

Cable Conduit - Using conduit to encase cabling will add an additional layer of physical protection for cable runs is a smart move.

• When using conduit for cable runs always ensure that there is ample room inside the conduit for all cabling you wish to run through it
• Do not squeeze cable into conduit
• Leaving space in the conduit will help to reduce the amount of “inside the conduit” cross talk that your cabling will experience

Regulatory Compliance - Always check to ascertain what if any regulatory compliance aspects pertain to your network specifically. You may need to employ the services of a duly qualified and registered cable technician.

Network Backbone - All network backbone cabling (fiber optic and copper) should have their own dedicated wiring closet compartments.

• Building-to-building network backbone fiber optic cable runs should be in fiber optic backbone only wiring closet compartments
• If traversing open spaces then it is a good idea to bury these fiber optic backbone links

Locks - Wiring closet locks need to be robust and tamper proof. When the wiring closet contains multiple internal compartments, each compartment must have its own discrete locking mechanisms.

Auto Locks - Here is a group of locking devices that will automatically lock immediately upon engagement of the locking elements.

• You do not need a key to lock them
• You do need a key to reopen them
• This type of lock comes in both the normal physical lock variety, the electronic variety and as combination locking mechanisms that employ multiple strategies

Keys - Implementing a secure locking system with appropriate lock and control mechanisms and policies will fall flat on its face if you do not take the same due care and attention with respect to the keys and keying mechanisms.

Master Keys - I think you will already be familiar with the concept of one key that will open many locks. I have implemented the use of “master keys” successfully on many occasions myself.

• Because we had deployed fully self-contained internal wiring closet compartments, we are able to let the electrician into the wiring closet using a master key and keypad combination to regulate entry into our wiring closets
• The electrician can do his job without ever needing to expose every other wire and cable also contained in any given wiring closet
• All of the key mechanisms to open the individual compartments inside use different key mechanisms and types
• In our case, not only are we using master key and keypad combinations to regulate external access to the contents of the wiring closet, we are doing likewise for the interior dedicated compartments as well

Fastening - Securely fasten all wiring closets and cabling.

• For cabling use plastic or plasticized fixatives wherever possible
• Do not use staples or U-Tacks to fasten cables to fixtures
• Cable ties or telephone wire clips are preferable

Redundancy - Having spares to hand can save much angst in a time of crisis.

• Most users consider a missing cable that prevents their using the network to be a real time of crisis
• Hot swappable devices also have a role to play here

Inspection - Conduct regular infrastructure inspections that incorporate the physical inspection of your wiring closets and cables. Be on the lookout for Vampire Taps (devices similar to those seen in the movies used to “tap” the line).

Policies - The planning, design, development, implementation, maintenance and updating of organizational policies is more important now than ever before.

• Develop and implement appropriate wiring closet and cabling security procedures and policies
• Develop and implement appropriate lock and key policies
• Use drills and rehearsals to test the effectiveness of your lock and key policies
• Document your policies thoroughly

Documentation - Thorough documentation of all production environment implementations is a vital element of all aspects of networking. Doing so will come undoubtedly prove its worth down the track.

• This includes the traditional IT network, communications networks and now the Unified Communications (UC) networking implementations
• Do likewise for any proposed implementation amendments
• Physical Constructs - Diagrams and other illustrations detailing the physical layout of the wiring closet and network cabling are more than just pretty pictures. They serve to aid rapid identification particularly when troubleshooting.
• Diagram Placement - Place a copy of the physical wiring closet and cabling diagrams inside the wiring closet. For lockable, fully self-contained, wiring closet compartmentalization solutions place the appropriate diagrams into the appropriate compartment.
• Logical Constructs - You may also find it to be of value to include diagrams of wiring closet, cabling and network logical constructs inside the appropriate wiring closet compartment.

Auditing - Conduct audit processes to ensure compliance with your policies.

• In a Windows Server environment, do this by turning on auditing through the Microsoft Management Console (MMC)
• Most aspects of physical security relating to wiring closets and cables will need some degree of manual verification on the part of the IT team

Drills and Hypothetical Scenarios - It is often very helpful to “dry run” possible scenarios from both a “very likely” to a merely hypothetical scenario to determine your current state of preparedness should any of these situations eventuate.

• It also helps build confidence in the IT team
• Having practiced what to do in a given situation will help the person in the “hot seat” to better deal with the situation than would otherwise be the case

Well that is all for now. So until next time when I will discuss the physical security aspects of peripheral devices enjoy!

Physical Security

From the IT, computer and networking perspectives physical security describes measures that prevent or deter attackers from accessing a facility, resource, or information stored on physical media. It can be as simple as a locked door or as elaborate as multiple layers of armed guard both patrolling and stationary at predefined established sentry posts such as points of entry.

Familiarity

We are all too familiar and accustomed to these aspects of security and the multitude of other more recent and sophisticated measures such as metal detectors, x-ray scanners, electronic sensors and magnetic security features that are commonly used in retail stores.

Even sniffer dogs with their highly educated noses poised should the faintest whiff of explosives be carried their way on the prevailing winds as you finally proceed; all be it delayed as a direct result of implementing these security measures, in an ecstatic and gleefully euphoric state through the airport boarding processes and onto the jet that will whisk you away to some sunny tropical paradise.

Information Technology Related Security

Those of us involved in IT and IT related security are also well aware of the extremes that a perceived “need” for greater security has invaded our daily working lives and yet as we hear only all too often on the news it is not enough.

Some security related scandal or other seems to be occurring every other hour and yet if we are to believe many analysts this is but the froth on the tidal wave of incidents that actually occur. Business is only too well aware of the negative effects a security breach and any subsequent media publicity that ensues can bring.

So Where Do We Begin?

The answer to this is surprisingly simple and maybe so obvious that it is often overlooked and the answer to which I refer is the physical security of our systems and the data contained within or stored as a result of the activities of our systems (sales, backups, records etc.).

I will begin by discussing locks, keys and locking device authentication systems from both the human physical access perspective and the device(s) perspective.

Locks

Lock and key is one of the oldest security systems known to human-kind. The ancient Egyptians, Greeks, Romans, Chinese and many more civilizations have used various forms of the lock and key system to secure physical assets. One of the more notable and legendary of this class of security devices is the chastity belt which we will not be discussing any further; rather we will explore how the lock and key system is used today to secure IT assets.

The first set of lock and key systems pertains to access-ways such as doors by which humans gain access to restricted areas.

• Lock-Up

  Physically secure your Server Room(s) including the Network Communication(s) & the Administration Facility as well as the datacenter and on-site storage facilities.

• Quality

  Ensure that all locks; not just those to your server room are of high quality and reliability.

• Security In-Depth

  The principles of security-in-depth are of particular relevance here. Multiple layers of security are far harder to penetrate than those exhibiting a single-point-of-failure. This is why banks, armored security services (Chubb®, Wormalds®, Amourguard® and Brinks® etc.) use these strategies.

• Change Frequently

  Design, implement and maintain a system whereby all locks are changed-out frequently and regularly at irregular intervals. Pattern avoidance is one of the most crucial elements in maintaining the integrity of all locking systems. This includes the physical locks and their associated keys as well as the electronic varieties. For reasons of economy you may consider implementing a rotation policy to be appropriate here.

• Key Code Access Locks

  Many organisations have gone down the electronically keyed physical locks pathway. This type of mechanism teams a number of different technologies all targeting the regulation and flow of physical access.

• Lock Unattended/Vacant Facilities

  Always lock currently unoccupied offices. This is in fact considered by most organisations to be the responsibility of the regular occupant of that office. The usual occupant may be on vacation and so the network administration and security teams should know this and take the appropriate actions.

Keys to all locks in this situation should reside with the organisation's designated general key holder and not go on holiday with the worker. You never know it may become necessary to enter the office while its regular occupant is away.

The designated general key holder and no less than one other individual; preferably from a different department (security would be ideal). In this case both will be the other's witness concerning their actions inside this office.

Workstation Power-Down

If an employee is known to be away for a given period of time it is wise to power-down their workstations. We live in an ever greening world so do your part and save money to boot. Unattended workstations always pose a very real threat to the overall security of an organisation.

Lock Cases

We now move on to lock and key from the PC perspective. All of the above conditions relating to lock and key in general are also applicable here.

• Case Locks

  Case locks help to prevent unauthorised access to internal components

• Lock-Down Kits

  There are many specialty and general purpose computer lock-down kits available on the market today

• Lock-Down Anchors

  When it comes to mobile devices that are on display then some means of physical restraint to a permanent fixture is a good way to go as this permits you to use and demonstrate the device and its capabilities with a greater degree of freedom.

By using anchors which are longer than the bare minimum necessary to fix the device firmly you have the freedom; albeit limited, to adjust the device as you see fit. This is usually done for reasons of comfort.

Locking Device Authentication Systems

• Authentication Systems - can be built into the locking devices, so that a smart card, token, or biometric scan is required to unlock the doors, and a record is made of the identity of each person who enters.
• Automated Security -We are now beginning to move towards transitioning to more automated type of security systems
• Multiple Points - of authenticity can be implemented here. We may use physical electronic identification systems such as smart cards in conjunction with biometrics and standard authentications such as complex passphrases for entry rather than passwords or pass sequences.

Physical Lock and Key Policies

Developing policies that define how it should be done, where it should be done, when it should be done, by whom it should be done and why it should be done as well as policies that detail why it shouldn't be done are all very important elements in any comprehensive security regime and physical security policies are no different.

Here are some of the policies that should be developed, implemented and maintained with regards to locks. Note all of these sub-categories will generally in the real small business world be wrapped into a single expansive policy detailing all of these sub-policies and much more.

• Locks Policy

  Develop a Policy that ensures that all rooms are securely locked-down whenever the facility or the room is unattended

• Key Holder(s)

  Include in your policy provisions for a “key holder”. This is essential because in the event of some calamity such as fire outside access to open doors locked from the inside in order to facilitate the rescue of personal that may be trapped inside is a statutory regulation almost everywhere in the Western world.

• Secondary Key Holder(s)

  Provide for a secondary key holder in case the primary key holder is unavailable

• Rotate Responsibility

  Rotate key holder responsibilities

• Key Code Access Policies

  Define and implement additional Key and Key Code Access and Key Code Holder(s) Policies as required

I thought I could write well, but now I realize I'm struggling to spell the word guyz, and now I'm struggling to write the next line. I don't even know why "m writing this, but I know 1 think, “I just want my article to be hap or cool or wacky enough for my blog.”

I work in the IT industry. People think we are paid well. But me and my dad thinks otherwise. According to him, by the age of 24, I should have made enough cash to buy him a house (I know, even I thought he was kidding when he told me for the first time), a luxury car (Ya right), and should have sent him and mom on a world tour. I, on the other hand am actually saving money to send my Boss on some loooooong tour. I just am looking for an opportunity to click hi ass. Now it"s up to you to substitute the word click with either Kick or Lick. I on the other hand am ready to do both, but since life isn't all that sweet, licking is the only alternative left with me, as that would make him happy, so I'll be happy( with a bad taste in my mouth, of course). And no, this article is not about my Boss's ass, it's about mine.

Most people don't realize that like Call Centre, IT life is tuff too. Plus we don't have those good looking gals working with us all night long. The only thing we have here are the slim Deadline and fat waistline. Almost all the people working with me in the office are non-localities. So I guess its fun for them to slog for 5 days and the chillax on the weekends. But there are some unfortunate people like me, who work in Pune, but their family stays in Mumbai. And as I have told you before, I have an over expecting dad, so he wants me to come down to Mumbai on every weekend. You can't even imagine how tiring it is to travel on weekends, even though the journey takes hardly 3-4 hours. I'm too unhappy for any other guy whose salary is equal to mine.

Sorry guys I just cant help myself from buttering, I was programmed to do so during my four years in engineering college. The rule says: Whenever you need to get some work done from someone, don't waste your time by showing your talent "n all, just butter "em. It works all the time.

Finally I would like to give some piece of advice to the young IT industry aspirants,

• Only idiots can make it big here, if you are smart n talented n all, please don't bother to try, we wont let you in, coz we don't like competition.
• If free internet and air-conditioning is all you need to get an orgasm, this is the place for you my friend (I'm having one right now, ohhhh aahhhh, yeeeessss yeesssss)
• If you are a hot chic and admire ugly people, then forward your CV to me, I can help you get a great job, all you have to do is a little compromise.
• Read the third point again and think over it (its ok if you are not in for some compromise, I'll manage, please mail me)
• Read it again, its ok even if you are not a hot chic, but anything that falls in the female category, mail me. We are DESPERATE.