Avoiding crime and fraud in international trade

How to safeguard your IT against fraud

Guide

Computer security takes three forms: physically protecting your hardware, electronic protection and educating yourself and your staff on social engineering attacks that can leave your systems vulnerable.

Protect your computers physically

You should:

  • hold regular equipment audits and track movement of computers
  • keep computers in a locked room and secure your premises
  • keep records of serial numbers and identification marks
  • allocate responsibility for equipment to individuals
  • establish measures to control use and movement of equipment
  • mark your IT with postcodes or passive electronic-marking devices
  • use a burglar alarm
  • ensure that your staff take care of mobiles and laptop computers when using them away from business premises

Protect your computers online

You should ensure you have the right IT security installed and that staff understand security processes. You can take the following measures:

  • put an IT Security policy in place
  • limit your employees' access to information and restricting access to the level needed for each job
  • keep your passwords and PINs safe and change them regularly
  • use up-to-date anti-virus software
  • install a firewall
  • update all software with patches
  • don't write down your password or other security information unless it's well disguised
  • always take reasonable steps to keep your password and other security information secret at all times - never reveal it to family or friends
  • always access internet banking by typing the bank's address into your web browser
  • never visit a website from an email link to enter personal details - if in doubt, contact the bank separately on an advertised number
  • check your bank's website for safety tips
  • check your statement thoroughly
  • look for a locked padlock or unbroken key symbol in the bottom right of your browser window before accessing the bank site - the beginning of the bank's internet address will change from "http" to "https" when a secure connection is made
  • don't leave your computer unattended when logged in to internet banking
  • wipe your hard drive before you sell or give away an old computer
  • always have a disaster recovery plan in place and updated

Bank Safe Online sets out simple steps you can take to keep safe and provides updates on the latest scams. You can also report any suspicious emails or websites via the site.