Preparing for Vista

After many years in
development, Microsoft�s new operating system, Windows Vista, became
available to businesses with volume license agreements on November
30. The home version of Vista will be available on January 30, 2007.
The Vista launch has been highly anticipated, as it took more than
five years for Microsoft to release this updated version of Windows.
Vista offers a variety of new features ranging from a streamlined
and enhanced user interface to faster data transfer for remote data
sources. Windows Vista is also being touted as a more secure
operating system. However, industry experts question the level of
security it is able to offer since Vista�s primary function is as an
operating system and cannot address all security issues including
viruses and Trojan horses.

Additionally, as with
most new releases, there may be unforeseen vulnerabilities that
could be discovered and exploited by hackers. In fact, even though
Vista has not been released to the public yet, Microsoft has already
issued numerous patches for its preliminary version of Vista for a
graphics-rendering problem. If left unresolved, this problem could
force a machine to run arbitrary code that could result in the
downloading and execution of malicious code. There have been several
other issues regarding security that have been discovered recently,
and Microsoft has advised users to run an automatic update a second
time to access the additional package that is necessary.

While improvements have
been made, no operating systems is completely secure Any time you
introduce new software into your IT environment, there is potential
that unforeseen security vulnerabilities may emerge. If this
happens, you will need to address the vulnerabilities immediately.
There are some things you can do now that will help strengthen the
security of your IT environment should it be faced with a security
issue.

Recommendations

Here are some things small and mid-size businesses can do to protect
their IT environment:

• Install
  security software: Though Vista is supposed to integrate
  security features into the operating system itself, it is
  important to note that it is not a substitute for security
  software. For instance, there have been numerous tests conducted
  using Internet Explorer 7 (IE7) on Vista, resulting in the
  discovery of vulnerabilities that could be exploited by hackers.
  Even though patches have been released, the possibility of more
  vulnerabilities makes it more important than ever to have
  security software installed, which should include firewalls and
  virus protection.
• Update patches:
  When you install a new operating system, be on the lookout for
  patches and news updates about the product. And as more people
  use the new operating system, additional vulnerabilities may be
  discovered, for which the vendor will create and offer patches
  on their website. By staying on top of patches, you reduce the
  amount of time that your computers are exposed to
  vulnerabilities, helping to prevent security breaches and
  threats.
• Implement a
  layered security solution: Since malicious code threats and
  security breaches can occur at different levels, it is important
  to implement a layered security solution. This means installing
  security software at different levels of your infrastructure �
  at the gateway, mail server, and desktop tiers. This can help
  deal with communication challenges such as IM threats, which
  likely bypass the mail server and company firewalls but can be
  dealt with at the desktop. A layered security solution can also
  help deal with another type of situation – if an employee
  disables antivirus on the desktop, for example, the protection
  at the gateway tier can help thwart a security breach.
• Upgrade to
  newer versions of security software: As you upgrade to a new
  operating system, it may be necessary to install new versions of
  security software that are compatible with the new system, since
  your existing security software may not be compatible with the
  new OS. Check with your security vendor to see if your software
  is compatible and if you are eligible for any upgrades.

Conclusion A new
operating system often has technological advantages, but it may also
create vulnerabilities and issues that are discovered over time.
However, you can still enjoy the benefits of Vista without
compromising security, by ensuring you have the necessary security
measures in place and taking proactive precautions and staying
informed about patches and updates.

from Symantec