A technology plan is designed to ensure compatibility with existing technology on the market, increase quality standards and efficiency, customer data security, information integrity, and validity, reduce cost and false starts, and above all, address the unique needs and situations of your customers. The plan should be in alignment with your organization\u2019s vision statement, objectives, expense and budget, and the needs of the employees, organizational processes, and current technology. This includes customer systems, internal systems, proprietary and legacy systems, and operating systems.<\/p>\n
You Security Team:
\nYour Information Technology Management Team should be sourced from its existing staff structure.<\/p>\n
The team sets technical priorities, assists in decisions in technology plan implementation, and advocates for technology in the budgeting process. The team should be made up of a representative cross-section of the Organization. This will become increasingly important as your technological capacity grows and the needs of its users become more diverse. Your tech team\u2019s training should ensure continuity that outlasts the tenure of any one individual.<\/p>\n
IT Management Team Responsibility:
\nRecommends budgets.
\nProvides oversight of technology problems and user-related issues.
\nEstablishes standards for hardware, software, and training needs.
\nDevelops technology policies and procedures.
\nPeriodically reviews the Organization\u2019s technology plan to ensure that it coincides with the Organization\u2019s mission.
\nPeriodically reviews the technology-related roles of staff members to ensure primary responsibilities are not being overtaken by technology-related ones.
\nDetermines if the scale of technology administration requires hiring for a specific role
\nLeads technology-related initiatives.
\nCommunicates the Organization’s technology support expectations, capabilities, and escalation paths.
\nIT Technology Strategist (Chief Information Officer) ensures the continued integrity of your networks and systems, and that a Chief Information Officer’s position has been established.<\/p>\n
The CIO is charged with the following responsibilities:
\nBudgeting, approving, funding and creating technology plans, policies, and strategies
\nDesigns maintain, and reviews IT policy
\nIs a Member of the technology team
\nMakes final decisions for hardware and software standards
\nApproves all IT projects
\nIT advocates for other executives and board
\nEnsures IT operates in step with the strategic plan
\nEnsures IT operates in step with Organization\u2019s mission<\/p>\n
Database Manager Responsibilities are:
\nSystem maintenance
\nSystem documentation
\nIdentifies potential IT problems and needs
\nManages system upgrades, Including software and hardware
\nManages IT projects such as database design and development
\nWorks with CIO to prepare a budget or other reports as required
\nManages relationships with vendors, contractors, and service providers
\nConduct and lead training as required<\/p>\n
Password Security Guideline should be as follows:
\nPassword should not be left blank.
\nPassword should be a minimum of 6 characters long
\nPassword must use at least one number and\/or a special character (i.e. %^!#)
\nNever use birthday, family names, Organization names,s or other things that are easy to guess
\nUsers should change their passwords on a regular basis.<\/p>\n
Additional measures to ensure passwords are not blank or set as the default are as follows:
\nDefault DSL provider account
\nFirewall or router
\nAdministrator account for network server
\nAdministrator account for web hosting
\nAdministrator account for email hosting
\nPassword Protected File Sharing
\nSystem files are password-protected and can only be shared securely.<\/p>\n
Secure Data Management Applications:
\nThe use of secure data management applications helps to keep track of mission-critical information, such as data about customers. Your business should incorporate a client tracking database to further secure clients’ information.<\/p>\n
YourCompany.com Domain
\nCritical aspects of the domain should have SSL protection to ensure added security layer to your data and that of our customers.<\/p>\n
Payment Gateway:
\nYour Shopping Cart System guarantees the safety of our clients\u2019 information by providing the following:
\nProtects cardholder data
\nMaintains a vulnerability management program
\nImplements strong access control measures
\nRegularly monitors and tests networks
\nMaintains an information security policy
\n100% PCI\/CISP compliant (Among the first to be fully certified by Visa)
\nProvides Secure HTTPS\/SSL encryption
\nProvides Password-protected administration login area
\nProvides Time-limited access for clients to download digital products which prevent copyright theft
\nProvides SPAM checker for emails<\/p>\n
Your Organization-wide Backup Systems:
\nYour practice should have an organization-wide consistent and redundant backup system that\u2019s made up of backup drives with a designated backup manager. The system backs up all system files and data to avoid the risk of losing important files and programs. This involves an automated backup scheduling system that backs up the system’s data at predefined intervals on a daily basis. Independent software programs and systems are routinely backed up and redundantly duplicated and hosted remotely to prevent the risk of data loss in the event of natural disasters such as fire, flood, etc.<\/p>\n
Encryption:
\nSSL Encryption is provided as part of your added secure server layer data protection technology for the safety of our data and that of your customers.<\/p>\n
Firewall Protection:
\nAs part of the overall organization-wide protection measures, a firewall helps protect computers by preventing unauthorized users from gaining access to the systems through either a network or the internet.<\/p>\n
Comprehensive Server-based Virus Protection:
\nYour virus protection program generally works together with the Firewall program to help protect the systems. Antivirus program helps protect against viruses and other security threats that can try to sneak in maliciously.<\/p>\n
Network Security:
\nYour company’s network security measures should include setting up a Virtual Private Network. VPN provides a secure means of giving multiple users access to your network from any point on the Internet securely.<\/p>\n
Email Protection:
\nTo ensure secured communication via email, your business could deploy Microsoft Exchange Server to help apply and enforce broad sets of security blankets across your email communication structure.<\/p>\n
Technology Plan Summary:
\nOverall, your business technology systems, capabilities, and management processes should include redundant server systems, computers systems, secure internet connection, and policies on information access, usage, and distribution, file sharing and organization, email and internet usage, password security, licensing, usage guidelines, data backup systems, antivirus programs, network integrity, and customer protection measures and systems.<\/p>\n\n\n