Laptop Security Configuration For Small Business

Laptop security configuration for small business is a complete management policy package ensuring safety and security for the lifecycle of the laptop asset.

If Attention Is Given To Creating And Implementing Strong Policies For Laptop Security, Small Businesses Will Position Themselves To Protect Their Company And Their Employees.

Contents

Laptop Security Configuration

Securing laptops is one part of a larger and more complex security posture for small businesses. Procedures and policies need to be designed and enforced to cover all aspects of business security.

Small businesses often find it difficult to maintain strong security protection such as protecting confidential data on laptops.

Often, it’s difficult for small businesses to understand the scope of security measures. In fact, it has been reported that up to 47% of small to medium-size businesses do not back up their data.

Acknowledge laptop security policies are essential to your business.

Create A Laptop Security Management System

Laptops are increasingly important tools to any business today. Employees are more mobile than ever and need access to mobile devices constantly.

Generally, best practices across the industry are adopted and customized for each particular business use. For example, you can customize an asset management procedure so it covers mobile devices in your business environment.

This guide will deal in the area of laptop security for the user to adapt to their business model. It’s important that all employees understand and buy into the security plan.

Repeatable processes should be well documented and explained to all employees. In addition, routine training for all is a critical element of any security policy.

I will break laptop security down into individual policy segments. Again, these should be subsets of broader policies in regard to your business security.

Small businesses may not realize that written procedures and policies are just as important as in larger corporations. The FCC convened a round-table and came up with security tips for small businesses. This is an umbrella approach covering start to finish, meaning initial laptop rollout to end-of-life asset disposal.

Also, be sure to read my other top articles:

Laptop Security Configuration Policies

Create these individual policy go-to documents for securing laptops, and ensure every employee reads and acknowledges them. These policies cover the life of the laptop asset and can be stand-alone documents or addendums to current security procedures. See the small business security plan template I created below and customize yours to suit.

Laptop small business security plan template

Information Management

Laptop Security Starts With The Employees.

Information Management generally deals with the ownership and distribution of data or information from start to finish. In tailoring this policy to be laptop-specific, we’ll define it as laptop data and information.

Create a written Information Management Laptop Policy that sets expectations for all employees to know and follow in regard to laptop security.

In your Information Management Laptop Policy, describe the actions required to protect the types of data your organization deems sensitive, such as personal information.

Encrypt laptop hard drives for personal sensitive data or higher. Some OS’s have built-in encryption programs. Make sure to enable these and use them if available, if not, consider investing in one for your business.
Install virus protection software and malware removal tools. Set the same schedule for every laptop to run virus protection and malware programs.
Apply OS updates on a set schedule, monthly for example. Updating your software with the latest patches protects it from vulnerabilities.
Unsolicited E-Mails and Phishing attempts. Opening suspicious emails or clicking improper links is one of the most widely used tools hackers use to gain access. Teach and remind employees that when in doubt, do not open or click such emails. Employ 2-Step authentication wherever it is available and possible.
Apply firmware updates as needed, such as twice yearly. An IT person in the business is a good point person to handle this task. This person can check and install BIOS and firmware updates on all laptops. Keep a spreadsheet of laptop serial numbers and date of updates. See below for more on the importance of updating firmware.
Use strong WiFi passwords. At the WiFi router, enable the highest level of security available, and use a strong password.
Enable and use the OS firewall. Windows OS has its firewall enabled by default. Check the settings and set to Home, Office, Public network.
Make backup copies of laptop data to store securely. If a laptop is lost or stolen, having backed up data to restore on a replacement will come in handy. You will need to decide on the solution that works in your situation. Perhaps USB drives will be enough or external drives. Either way, protect these devices and store them securely. Best practice says to keep multiple backups and ensure one of these backups is off-line at all times.
Erase all data from laptops before disposing of them. It’s easy to download a data erasing program to run on all laptops before getting rid of them. This just makes sense to use.

Employee buy-in is crucial for a successful Information Management Policy.

Also read: Best Business Laptop 2022: Top 4 Models

Access Control Management

Minimize The Risk To Employee Laptops.

Access Control Management’s overall scope covers Authentication, Authorization, and Accountability.

We’ll tailor the Access Control Management Policy for our purposes to be laptop-specific. We’ll define this policy to include:

User verification for laptop access
What the user is authorized to access
How the company expects the user to behave while accessing the laptop and data.

It’s good practice to include in the Access Control policy your audit procedure.
State when and how audits will be performed, such as periodic checks for password rules.

Require every laptop to have strong passwords, including power-on and OS passwords. Passwords should be at least 8 characters long, a mixture of upper and lower case letters, and make use of a special character or number.
Administrative passwords should not be used. They allow full access to everything which is dangerous on mobile laptops that could get lost or stolen.
Require password changes. State in your laptop security policy that passwords must be changed every 90 days. Do not allow reusing of old passwords.
No unauthorized software. Do not allow unauthorized software to be installed on business laptops. This potentially allows exposure to your network and data.
Set expectations early. Create policy documentation detailing expected behaviors in regard to secure laptop use and set reasonable penalties for failure to follow.

Access Control should be taken seriously as more bad actors are on the internet trying to steal your company’s data and information.

Asset Management

Protect Laptops.

An Asset Management For Laptops Policy will help your business efficiently track the life cycle of every laptop you own, from purchase to disposal.

This doesn’t just let you know who has what, but can also track OS level, firmware release, and the age of their laptop.
This policy should direct the asset management person to maintain current up-to-date records for proper laptop security.

Record the purchase date and specs. Your small business needs to know when the laptop was bought, what laptop it was bought, and the details of each laptop.
Track the laptop serial number to the employee currently in possession of the laptop. Data is king, stay ahead of the curve with complete record management.
Record operation system levels. So you know what operating system level each laptop is currently running and what patches and updates might b needed.
Record firmware levels. So you know what updates are needed to be included in the scheduled update policy.
Create a refresh and disposal schedule. Set an age limit for laptops. Prepare by ordering new laptops and refreshing old and outdated ones. Erase the hard drives of all data prior to disposing of the old laptops.

Robust record keeping equates to laptop security. Keep records up-to-date.

Security Incident Management

Laptop Security Failures.

Security incident management concerns itself with identifying and managing threats and or failures. As well as then analyzing these security incidents to help improve the overall security posture going forward.

Your small business Laptop Security Incident Policy should allow you to respond quickly to mitigate and protect your data. An incidence response plan for small businesses needs a reporting chain of command to be in place and includes a managing supervisor.

Report every security breach and incident. Each employee is responsible for following the policies of your small business. Any deviation or security incident has to be reported to management. Remediation steps should be outlined in this policy. For example, if a laptop is lost or stolen, determine if you have data exposure. Is it appropriate to remove that user’s access or change the network password for them, etc?
Develop a post-incident analysis. You simply need to learn from the incident and put your small business in a better position in the future.
Determine possible impact and severity. How does the loss of the employee’s laptop impact the business? Was there a failure in following the written policies?

SophosLabs reports seeing more than 100,000 unique malicious software samples every single day.

A Laptop Security Incidence Policy has to stress the importance of taking quick remediation actions.

The Importance of Applying Firmware Updates

Traveling employees, especially those that travel overseas, are potential targets of hackers, scammers, and thieves.

The opportunity to access an organization’s private data has bad actors coming out of the woodwork. Firmware attacks are on the rise and pose a difficult-to-detect risk. Just as with applying software updates on a set schedule, make sure to keep laptop firmware updated as well.

According to Eclypsium.com “2019 had the most firmware vulnerabilities ever discovered, marking a 43% rise over the previous record in 2018, and a staggering growth of 750% since 2016.“

Laptop Security Configuration Best Practices

If your company is concerned with the potential theft of trade secrets or any of its data, follow these best practices:

Apply all firmware updates on laptops, as well as OS updates
Provide loaner laptops to employees traveling overseas
Limit the types of data on traveling laptops
Encrypt the hard drives of these laptops
Wipe/Erase the data and reinstall an OS on these laptops

Periodic laptop security configuration audits and checks will help with compliance.

These steps cannot guarantee data protection but they do help mitigate any attack.

Summary

Use the laptop security configuration for small business policies you’ve newly created to have security awareness training for all employees. Any small business security policy should include details on your company’s laptop asset posture.

The goal is for everyone to have the same understanding and knowledge about what is required of them in regard to laptop security for your small business.

You want to motivate employees toward a common goal with doable, repeatable processes and policies. In addition, it’s also important to periodically have reviews of these policies, update them as needed, and have refresher meetings for employees.

Here is where audits come into play. Perform laptop security checks to ensure compliance with your written policies.

As employees become more mobile, developing written laptop security configuration policies for your small business has become increasingly important. Taking the time to develop and maintain a strong posture for laptop security will prove beneficial now and in the future.

J.S. is the owner, content creator, and editor at Upgrades-and-Options.com. I’ve worked in the IT and Computer Support field for over 20 years. The server hardware in my computer labs has mostly been IBM, but I’ve supported Dell, HP, and various other hardware. In addition, as part of my lab administrator responsibilities, I’ve learned, supported, and repaired/upgraded network hardware such as Cisco routers and switches. READ FULL BIO >>

Related: Best Business Laptop 2022