A network security checklist you can really use.

Many of you may know that our affiliate firm, McGladrey & Pullen, LLP, performs financial audits each year for more than 150 private clubs. As part of our service to those clients, the audit staff administers a "Network Security Checklist" designed to quickly identify any significant security

issues associated with a particular client's PC-based computer network. Each year we review the responses from our private club clients--and the results are nothing less than shocking! Less than 20 percent of the clubs surveyed with this tool get a clean bill of health. In many cases, we must serve up a lengthy list of "Management Letter Comments" with our audit report, pointing out serious deficiencies in the club's network security.

To assist you in measuring your own club's network security health, we've included below our actual checklist for your use, along with the explanations provided to our audit staff for each checklist question. We recommend that you apply the checklist at your own club, and where appropriate, take immediate corrective action.

PC-Based Computer Network Security Checklist

1. Is the client's network connected to the Internet via DSL, cable modem, or some other "'always on" connection? DSL and cable modem are the most popular methods used by our clients to achieve a high-speed connection for Internet and e-mail access. If the client is using DSL or cable modem, they are vulnerable to hacker attacks--especially since their connection is "always on." These connections place all of the clients computers on the Internet unless the client has implemented other appropriate security measures discussed below.

2. Does the network have a firewall product (software or firmware) installed and operational at all times? Firewalls can take the form of a software program such as BlackIce or ZoneAlarm, or as an electronic appliance such as Watchguard, Sonicwall, Nokia/Checkpoint, or Cisco PIX. Firewalls are designed to keep outside intruders (hackers) out of the client's network. Once inside the network, hackers can do great damage to the client's systems. They can steal or destroy information, crash the network, or use the system to attack other networks. We need to assure that our client networks are secure from hacker damage, and firewalls are an important part of that security.