Server Security Rules

Do not share your account or password with anyone under any circumstances

While it may be convenient in some circumstances to share user accounts, this practice creates numerous security concerns. It makes it harder to track down the source of breeches, is a common vector for phishing attacks, makes it easier for passwords to be stolen. Doing so should be considered a sackable offence.

Do not ask other employees to share passwords or accounts

Don’t put people in a position where they are pressured to break security rules. In particular, don’t ask subordinates to break any of these rules as it will be difficult for them to turn down their boss. 

Practice good password security

Do not use the same password as another account, such as your email or Facebook account. The best passwords are not complicated combinations of letters and numbers, but a longer phrase, such as “nimbusfinancialisgreat”. You may store passwords in a password manager such as LastPass.

Control data access

While it is convenient to have all the data in one big directory that everyone can access, it is better practice to only give people access to the data they need. We will help you set this up. You should audit your files every so often, check that everyone has the right access, that the files are stored correctly.

Everyone is responsibility for security, so please ensure you are doing your part. If you’re unsure about anything, don’t hesitate to contact us.

Most importantly, speak up if you have any concerns.