进行安全评估。你需要了解你的公司在哪些方面容易受到攻击。弄清你应该保护什么,如果那部分信息丢失的话,会对你公司的业务能力造成什么样的影响。聘请一家第三方机构质询当前的安全性问题;你公司内部的雇员并不是判断公司业务潜在危险的最佳人选。你需要在一年时间内至少进行两次这样的安全审查/网络评估,确定软硬件的增加和修改将会对安全性起到什么样的影响作用。 Conduct safety assessment. You need to know where your company is vulnerable. Find out what you should protect and, if that part of the information is lost, how your business will be affected. Engage a third party agency to question current security issues; employees within your company are not the best candidates to judge the potential dangers of your business. You need to conduct such a safety review / network assessment at least twice a year, to determine how the addition and modification of hardware and software will affect safety.