Selasa, 17 Februari 2009

Looking for New Business Ideas

When looking around for business ideas, bear in mind that these could be based on any of the following approaches:
A manufactured product where you buy materials or parts and make up the product(s) yourself.
A distributed product where you buy product from a wholesaler/MLM, retailer, or manufacturer.
A service which you provide.

You should narrow your search to specific market or product areas as quickly as possible. For example, the "food business" is too broad a search area. Do you mean manufacturing, distribution or retailing, or do you mean fresh, frozen, pre-prepared etc. or do you mean beverages, sauces, confectionery etc.? It is better to pursue several specific ideas (hypotheses) rather than one diffuse concept which lacks specifics and proves impossible to research and evaluate. Generally, you should always aim for quality rather than cheapness. Be very cautious about pursuing ideas which involve any prospect of price wars or are very price sensitive; of getting sucked into short-lived fads; or of having to compete head-to-head with large, entrenched businesses.

To locate ideas, observe consumer behavior:
What do people/organizations buy ?
What do they want and cannot buy ?
What do they buy and don't like ?
Where do they buy, when and how ?
Why do they buy ?
What are they buying more of ?
What else might they need but cannot get ?

Also, look at changing existing products or services with a view to:
Making them larger/smaller, lighter/heavier, faster/slower
Changing their color, material or shape
Altering their quality or quantity
Increasing mobility, access, portability, disposability
Simplifying repair, maintenance, replacement, cleaning
Introducing automation, simplification, convenience
Adding new features, accessories, extensions
Changing the delivery method, packaging, unit size/shape
Improving usability, performance or safety
Broadening or narrowing the range
Improving the quality or service.

source:www.planware.org/businessplantips.htm

Before Starting to Write a Business Plan

Before any detailed work commences on writing a comprehensive business plan, you should:
Clearly define the target audience
Determine its requirements in relation to the contents and levels of detail
Map out the plan's structure (contents page)
Decide on the likely length of the plan
Identify all the main issues to be addressed.

Shortcomings in the concept and gaps in supporting evidence and proposals need to be clearly identified. This will facilitate an assessment of research to be undertaken before any drafting commences. Bear in mind that a business plan should be the end result of a careful and extensive research and development project which must be completed before any serious writing of a plan should be started. Under no circumstances should you start writing a plan before all the key issues have been crystallized and addressed.

For more tips and suggestions, check the white paper on Writing a Business Plan and Free-Plan our free 150-page Business Plan Guide and Template (Word format). Also, refer to the 30-point Checklist for Preparing a Business Plan.


source:www.planware.org/businessplantips.htm

How to Assess New Business Ideas

Having built up a moderate list of new business ideas, these must be evaluated so that a short-list of preferred options with the greatest potential and lowest risk can be assessed in greater depth.

One way of evaluating ideas would be to use a simple scoring system using gut-feel with a limited number of criteria such as personal fit, degree of risk, funding need and so on - see a comprehensive list of factors at Getting New Business Ideas.

Before scoring individual ideas, run through the criteria and set what you feel should be minimum desirable scores for each. The resultant total could be used as your overall minimum threshold. If some ideas don't achieve satisfactory scores, drop them and look for better ones.

Once your short-list has been developed, you will need to start devoting substantial time to assessment, research, development and planning. For a start, you could pursue the following tasks:
Discuss products/services with prospective customers
Assess the market using desk & field research
Analyze your competition
Consider possible start-up strategies
Set ball-park targets and prepare first-cut financial projections
Prepare a simple action plan
Critically examine ideas from all angles

For more insights into these tasks, see Getting New Business Ideas.

Bear in mind that the incubation period for a new business can easily last several months or even years. Don't rush into the first feasible idea without letting it incubate or develop in your mind for a reasonable period. There might be a tendency to get all fired up and enthusiastic such that your heart is starting to rule your head. Instead, stand back and think!! Do not be afraid to seek external assistance from professional advisers or from enterprise support organizations which are virtually everywhere. These include SBDCs in the US, Enterprise Agencies & Business Links in the UK, County Enterprise Boards in Ireland, EC BICs throughout the EU and so on...... For help with converting your preferred business idea into a business plan, see Getting New Business Ideas and Writing a Business Plan.


source:www.planware.org/businessplantips.htm

Quotations to Inspire Better Business Planning

Here are some quotations to motivate and inspire the planning and development of your business:
Rise early, work hard, strike oil. (J Paul Getty)
The person who doesn't scatter the morning dew will not comb grey hairs (Irish proverb)
A chicken doesn't stop scratching just because worms are scarce (Grandma's Axiom)
A wise man turns chance into good fortune. (Thomas Fuller. Gnomologia, 1732)
A great fortune depends on luck, a small one on diligence. (Chinese proverb)
Luck is a dividend of sweat. The more you sweat, the luckier you get (Ray Kroc)
I'm a great believer in luck and I find the harder I work, the more I have of it. (Stephen Leacock)
Success is more attitude than aptitude. (Anonymous)
If, at first, you don't succeed, try again. (Proverb)
If, at first, you do succeed, try to hide your astonishment.(Los Angeles Times Syndicate)
There is nothing more difficult...than to take the lead in the introduction of a new order of things. (Niccolo Machiavelli)
If you want truly to understand something, try to change it. (Kurt Lewin)
Do not follow where the path may lead. Go instead where there is no path and leave a trail. (Ralph Waldo Emerson)
You cannot travel on the path until you become the path itself. (Gantana Bouddha)
There is no top. There are always further heights to reach. (Jascha Heifetz)
For the wise man looks into space and he knows there is no limited dimensions. (Lao-tse)
It is not best that we should all think alike; it is a difference of opinion that makes horse races. (Mark Twain)
It's not because things are difficult that we dare not venture. It's because we dare not venture that they are difficult. (Seneca)
It is a myth, not a mandate, a fable not a logic, and symbol rather than a reason by which men are moved. (Irwin Edman)
Great spirits have always encountered violent opposition from mediocre minds. (Albert Einstein)
Every wall is a door. (Ralph Waldo Emerson)



source:www.planware.org

Never Outsource your Business Plan

Here's the summary of a planning tip contributed by Intuitive Life: A Business Weblog by Dave Taylor:
A book I'm reading recommends that businesses consider outsourcing their business plan development because they'll "get a better business plan, faster, and at lower cost" than doing it in house. This is absolutely wrong-headed thinking: if you outsource your business plan process, your company will be more likely to fail, not less.

It's the process of creating the plan that's important not the end document. When you share your business plan with an investor or venture capital firm, they want to see something coherent and learn about a smart business, but just as importantly, they want to know that your team can sit in a room and hammer out a single, unified vision of your company, one that covers all the major bases, from marketing to defending your intellectual property, cost of sales analysis to partnership ideas. And yet, pop over to Google and you'll find hundreds of companies advertising that they'll write your business plan for you, that they'll "help you clarify your business goals" and that they'll "help you get funded with a rock-solid business plan." Reject these companies. All of them. The only part of business plan creation you can safely outsource is unbiased analysis. Once you're done with your plan, it can be a darn good idea for you to run it past a professional business startup consultant, because they can give you the investor's view of your plan. Expect to pay at least $1000 for this service.

It's really like a Zen Koan because the journey is the reward. If you think that having a beautiful printed business plan, perfect bound and with color illustrations is going to impress an investor more than one that your team has sweat over, fought over, and hammered out over time, you're wrong. It's the implementation, not the idea that investors are paying for: if you can't even own your business planning process, the odds of you getting your product out the door, executing on your plan and generating a return on investment are pretty darn low.

So here's some free advice from a serial entrepreneur and management consultant who's been there and read hundreds of business plans: write your own business plan. Fight your own fights with your partners, argue about sources of revenue, debate income projections, and force yourselves to figure out enough of Word and Excel to capture that moment of your company's life. Because business planning is all about process, not destination.


source:www.planware.org

SWOT before Planning your Business

A SWOT analysis is an assessment of the Strengths, Weaknesses, Opportunities and Threats facing a new or established business. It should always be conducted prior to the compilation of a detailed business plan. A realistic and unbiased SWOT analysis could form the basis for the strategies to be followed throughout the plan. A failure to determine SWOTs could result in a plan which is unclear, misguided and lacking focus and direction.

Strengths and weaknesses are essentially internal to the organization and relate to matters concerning resources, programs and organization in key areas.The objective is to build up a picture of the outstanding good and bad points, achievements and failures and other critical features within the company. If a startup is being planned, the strengths and weaknesses are related mainly to the promoter(s) - their experience, expertise and management abilities - rather than to the project.

The threats and opportunities are external to the company and relate to the industry and marketplace in which the business operates; changes or trends in competition, technologies and so on.

Once the SWOT review is complete, the future strategy may be readily apparent or, as is more likely the case, a series of strategies or combinations of tactics will suggest themselves. Use the SWOTs to help identify possible strategies as follows:Internal External
Build on strengths Exploit opportunities
Resolve weaknesses Avoid threats


If the business is seeking significant growth, it is important to fast-forward and assess SWOTs as they might exist a year or two hence. This will help ensure that strategies are ambitious and robust and that emerging issues are anticipated. Have a look at the discussion on SWOTs and related matters in Developing a Strategic Business Plan (and especially Sections 1.3 to 1.5).

The resulting strategies can then be filtered and moulded to form the basis of a realistic strategic plan - see Devising Business Strategies for further insights into the development of strategies and the free Online Strategic Planner for creating a 3-page strategic plan. Here is a sample strategic plan compiled using the planner. A plan along these lines should be incorporated into a business plan and it would, in effect, become the foundation for all the assessments, actions, projects and programs detailed throughout the plan.



source:www.planware.org

When Writing your Business Plan

Twelve things to do when writing your business plan:
1.Create a framework for the plan e.g. table of contents.
2.Identify possible appendices, attachments etc.
3.Estimate page lengths for each key section.
4.List main issues and topics to be covered within key sections.
5.Assign work programs based on the framework and lists.
6.Draft all key sections in a logical sequence.
7.Check the preliminary draft for completeness and plug gaps.
8.Stand back and take a detached overview of the draft.
9.Let an outsider or adviser critique the latest draft.
10.Redraft, fine tune and spell check.
11.Write the executive summary and plan's conclusion.
12.Get an independent assessment of the final draft.



source:www.planware.org/businessplantips.htm

Business Planning - Why you need a business plan

If ever there was a key skill you’ll need in your business – it’s planning.

You can still be your own boss if you’re not the most organised of people, but you’ll find it a very tough slog.

No matter how good or bad you are at forward planning, a solid business plan is arguably the most important business-related document you will ever create. It’s highly recommended for anyone starting a venture, as a way of ensuring you plan the kind of business you want to create.

If you’re going to need financial support from a bank, a private investor or you need to attract a business partner, it’s an absolute essential.

Your business plan need only be a few pages long, containing key information about the business. Don’t worry too much about the format; focus more on getting the information right and the correct message communicated.

Here’s a suggested list of contents:

1. Objectives: What do you want to achieve from your business? List key goals including a financial overview

2. Executive review: An overview of what the business will do and how. Include the legal structure, who will work in the business and what roles they will fulfill. Potential investors will use the information in this section to decide if the rest of the plan is worth looking at

3. Market analysis: How many businesses already offer this product or service, and where does your new venture sit in the marketplace?

4. Demand analysis: Who are your potential customers and how likely is it they will buy from you? Are you at the premium end, the budget end or somewhere in-between?

5. Environmental analysis: What impact will your venture have on the environment, and how can you minimise that?

7. Analysis of the competition: To launch a successful venture you need to offer something different. So work out what’s already out there and identify the gap that’s open to you.

8. Marketing strategy: Once you know the message you want to give out, show how you will do that. Don’t get into too much detail but give an overview of strategy

9. Success factors: What things must happen to make the business a success? Listing them in the business plan keeps them top of your awareness

11. Finances: List your likely costs and predicted revenue. This is normally done for three years. Remember most people underestimate costs and overestimate revenue

12. Conclusion: Sum up your business plan in a few sentences.

Remember that a busines plan should be a living document. It’s no good to you if you complete it and stick it on a shelf. Even when you are running your business, get in the habit of reviewing your plan at least once a quarter.


source:www.bytestart.co.uk

Ten tips on how to start your own business

If you want your new solo business to flourish, it makes good sense to review these tips on how to start your own business.

As a soloist starting your own business today, you have the advantage of being able to learn from those who have gone before. The business success statistics are well known: a staggering 40% of all new businesses fail within the first 12 months. Within five years, more than 80% will have failed.

Here’s ten ideas on how to start your own business and avoid that fate.
1. Define your unique point of difference

Why will a customer come to you instead of anybody else? Are you better, more accurate, cheaper, more convenient, easy to install? Whatever your unique difference is, this is the question that, once answered, becomes the basis of all of your marketing messages.
2. A powerful vision

Why are you in business in the first place? What’s the inspirational dream that convinced you to go out on your own? There may be times when you doubt yourself, but if your vision is strong, it will be the thing that sees you through those times.
3. Repeatable, scalable systems

Any activity that occurs more than once in your business needs a system or process so it gets performed exactly the same way, every single time. This consistency means that you can handle extra volumes in the most efficient way, and that the customer gets the same experience (hopefully a great one!), every time they do business with you.

Tell us what you think: rate this article
4. Love the numbers

You may not be an accountant, but you must have an overwhelming interest in the numbers side of your business. You don’t have to create the reports - outsource by all means - but you definitely need to look at your cashflow, budget and profit and loss on a monthly basis. And if you don’t know what it all means, get your bookkeeper to sit with you each month and explain your financial position.
5. Always add value to the customer’s experience

No matter what service or product you provide, you can be guaranteed that someone out there is trying to do it differently, better, or cheaper than you are. You must consistently focus on adding great value to your customers – always try and delight them in some way. Then they’ll never feel inclined to take their business elsewhere.
6. Continually add to your skills and knowledge

A business can only grow as quickly as the person who owns it. Your investment in your own development is super important. When you learn new skills and come across new ideas, you apply them in your business which in turn drives evolution and innovation.
7. Plans

The purpose of planning is simply to work out how to spend your time, money and other resources effectively. Without considered plans you may find yourself spinning your wheels, jumping from one priority to the next, or simply being undecided. Plans allow you to:
prioritise activities
step back from the day to day issues and take a longer term view, and
anticipate problems before they arrive
8. Product innovation

All products have a defined life cycle. People’s needs change, and so must your products or services. Solo businesses have a tendency to retain unchanged products and services for too long. Be conscious of reframing, restructuring, or refreshing your offer on a regular basis.
9. Surround yourself with the right support

Successful business owners know what their skills are. They also know exactly what skills they don’t (and probably will never) have. Believe me, you are not ‘saving money’ by doing it all yourself, you are wasting time. Outsource those things that aren’t your specialty, and use that time to go and get some new business!
10. Stay close to your customers

The best people to give you feedback about how you are going are your customers. Successful soloists regularly ask their customers for feedback and ideas for improving what they do. And more importantly, they follow through on the feedback they get.


source:www.flyingsolo.com

Financing Your Business In 2009 by Joseph Lizio

There are many criteria that banks require in approving loans for businesses. What usually comes to mind first is credit, given today’s financial crisis. While credit is extremely important, there are many other factors in addition to credit scores that businesses must be aware of and account for when seeking capital for business growth. The following outlines a company’s ability to repay or service a new debt facility. Banks and other financial lenders will not just give you money because you think you need it; you have to be able to pay for it as well.


You must be able to repay your new debt – both the principle amount and the interest. Now, there are many structures to business debt like interest only (which I do not recommend), balloon payments, quarterly payments, etc. Still, you have to generate enough income from the business to service the payment amount. Further, not only do you have to generate enough money to pay the P & I, but you usually have to have a little bit more – usually 25% to 50%.

Why? This additional cushion provides the bank with assurance that your business could have a down period and still cover their payment.

Now to the numbers: To determine if your business could service a $100,000 business loan, begin with your net income. To this amount, add back depreciation (this is a non-cash accounting anomaly) and any and all interest payments that you already make and your taxes. This should be the net amount that your business has to cover your total debt service – this is essentially your earnings before interest, taxes, depreciation and amortization (EBITDA) or your actual cash profits from your operations.

For the remainder of this analysis, we will ignore taxes. The interest on your loan is an operating cost – meaning it reduces your taxable income. However, the principle portion that you pay comes straight out of your net income – after all other obligations are paid including local, state, and federal taxes. The reason we will ignore taxes is to make this analysis simple and demonstrate why banks and other financial lenders require higher debt service ratios.

At 8% for 48 monthly payments, a $100,000 loan would require a monthly service of $2,442 or $29,296 per year (straight amortization for simplicity purposes). Assuming that your business does not have any other debt, you would have to, at the least, earn this amount over and above all other business costs – over your EBITDA. However, most banks want to see a debt service ratio of 1:1.25x to 1:1.5x – meaning that you need to generate EBITDA between $3,053 and $3,663 per month in this case.


Should your business have other debt that is not being paid off with this new facility, add that amount to your debt service minimum payment above. You will then have to cover up to 1:1.5x all your debt obligations.

Further, banks do "what if" analysis on this debt service requirement. Take your operating profit (EBITDA) and reduce it by 10% and 20%. After these calculations, does this new income amount still cover the original payment amount of $2,442? If not, no loan. Again, banks want to ensure that your business could survive a down turn and still make its payment obligation to them.

Keep in mind that the above analysis is based on past financial (past results of your business). While the lender will make every attempt to forecast future projections, it does not significantly rely on expectations of what your business will or may do.

While this is a very basic analysis, I hope you get the gist of what banks look for when underwriting loans. Should your business not be able to meet these requirements, then negotiate a lower payment through interest reduction, loan amount reduction, or balloon payments or reevaluate your need for a loan. If you can’t pay for it, you don’t need it.

Additionally, there may be many other ways to finance your growing business. The most widely used for working capital loans and advances are accounts receivable financing (factoring), purchase order financing, and business cash advances. These types of facilities can help bridge the gap between cash outlay and revenue.



source:www.businessknowhow.com

Senin, 16 Februari 2009

Sources of Capital for New, Start-up Businesses by Joseph Lizio

As the economy continues to face credit challenges, small businesses, especially new, start-up companies are finding it even more difficult to find the capital they need to take their ideas and concepts and turn them into viable businesses.


Private equity firms and angel groups are no longer actively seeking new investments. They are more concerned with preserving and protecting their current portfolios. Further, private investors, like your neighbor or local doctors, accounts, lawyers, are not investing in local companies as their investments and retirement portfolios (usually the main source of their investment capital) have taken such large hits that any new investments are just out of the question.

Bootstrapping, by far the greatest source of capital for new businesses, is drying up fast. Credit card issuers and backers are pulling programs, tightening approvals and reducing limits. Friends and families are struggling just to survive themselves and do not have the disposable income to investment in your company.

Taking loans from retirement accounts are nearly impossible today as the market values of these assets have drop so dramatically over the last two quarters. There just isn’t the value there to take a loan against.

SBA backed loans remain just a difficult and costly to obtain as always. These loans still need to be underwritten by traditional lenders who are not making any loans at all as well as be underwritten by the SBA who has followed the banks’ course in tightening standards.

So, what are new, small businesses to do?

A few suggestions are as follows:

First, start smaller and work your way up. Small scale operations mean smaller capital needs. Thus, the small amount of capital a new entrepreneur does have (savings, home equity, retirement plans) can be used to jump start a business if it is designed on a smaller scale.


Micro-Loans: Micro-loans are loans for small organizations or start-up companies that do not qualify for regular loan facilities. These loans usually range from $500 to $25,000 and take up to five weeks for approval and funding.

Personal Loans: There are still a few companies that make personal loans from $10,000 to $100,000 provided the borrower has excellent (and I mean excellent) credit and a demonstrated ability to make the loan payments.

Asset Based Facilities: If your business has some proven track record, even if it is just for a few months, and has generated some financial assets like accounts receivables or credit card receipts, you may qualify for capital against those assets.

Account Receivable Factoring can help speed up your cash flow while you wait for your customers to pay you. You can then access working capital that can be used to generate new business, cover current liabilities obligations, or make payroll. There are companies that will factor receivables as low as $200.

Included with Accounts Receivable Factoring is Purchase Order Financing. If your business has an order to be filled but does not have the money to complete the order (e.g. buy supplies or equipment or hire needed labor) Purchase Order financiers will provide the funds needed based on that order.

Business Cash Advances, while not really a loan, can provide working capital against FUTURE credit card sales. The funds can be use for any purpose and could provide the capital your business needs to get it through these troubled times.

Equipment: Do you own some equipment outright? If so, you can sale that equipment (including tools and machinery) to a leasing company. Then, lease the equipment back from the lessor. You get the cash you need now and still benefit from possible tax deductions of the lease payments and other costs.

Where there is a will, there is always a way. These may not be the cheapest financial products in the market but for most business owners and start-ups, these may be the only option.

When seeking capital in this market, try to keep in mind that it is only temporary. The markets will turn around and lending standard will loosen. So, what you seek now should only suffice enough to get your new, start-up business through this down period.

Copyright 2009 - BusinessMoneyToday.com

Joseph Lizio holds and MBA in Finance and Entrepreneurship and has a strong commercial lending background. In his current venture, Mr. Lizio is the founder of www.businessmoneytoday.com - a site designed to help business owners find and obtain capital to grow their businesses.



source: www.businessknowhow.com

Senin, 09 Februari 2009

Simple Startup Tips

When going into business for yourself start out simple. In most states, the first step to starting your business is simply to register in your county for a fictitious business name, also called a “dba” (for “doing business as”) registration. This is very common. If you want to be “Dawn’s Design” or “Acme Furniture” or “Joe’s Diner,” or whatever, the registration makes you a legal business.

I did this in California a couple of times for $35 a pop, and once in Oregon, more recently, for $25. Normally you go to the county seat and establish that nobody else is using the name, then register it. In most states you will have to do a legal advertisement too, but they have forms in the registration office and local papers make this easy. Then, you go to your bank and take out a bank account with the new name, and you’re in business.

You may also need a business license, this would depend on local laws. Some areas require it, some don’t. Most don’t, actually.

If you will be running your business from your home the laws depend on the city rules, normally, zoning laws, and local licensing requirements. You could call your town hall or the chamber of commerce to ask. When I ran a home office business in Palo Alto in the early 1980s, you were not allowed to put a sign outside your house or take commercial deliveries. Otherwise, the city didn’t care.

As you look at these details, the best source of real help at an affordable cost is your local Small Business Development Center (SBDC). These are funded by federal, state, and local funds, and there are almost 1,000 of them throughout the country. They vary by state, but I know New Hampshire has an excellent program. Definitely one of the better ones.

Because SBDCs are publicly funded, they tend to offer business counseling for relatively low rates. I recommend them highly. You can find a list of SBDCs at our website.



source: http://articles.bplans.com/business-articles

Understanding Cyberspace Threats

SQL injection. Drive-by downloads. Social engineering. Rootkits. Malware. Rogueware. To the busy small business owner these words and phrases might sound like gibberish, but they're actually terms that describe some of the more destructive security risks lurking in cyberspace today. Since the first step in helping prevent harmful hacker attacks to your company computers is getting up to speed with the ever-evolving threat landscape, here's a brief overview:

Malware. Short for malicious software, it includes all forms of computer viruses, worms, Trojan horses, rootkits, spyware, dishonest adware, crimeware, and other malicious and unwanted software. When you see the word "malware" in a news story or threat report, keep in mind that it covers a variety of forms of hostile, intrusive, or annoying software or program code.

Rootkits. Popularized by the Sony digital-rights management case, a rootkit is a form of malware that allows an attacker to maintain a stealthy presence on an infected computer. Rootkits are typically used in spyware and other programs to avoid detection and allow another piece of malware to monitor traffic and keyboard strokes. A rootkit is considered the most insidious form of malware.

SQL injection. SQL injection is an attack technique used by hackers to insert malicious code into the database layer of a Web application. These types of attacks are typically used to plant harmful code into hacked Web sites and use that code to launch drive-by-downloads against end users.

Drive-by downloading. Drive-by downloading is a catch-all name for malware that gets installed on a computer when a user simply surfs to a (maliciously rigged) Web site. Over the past year, there has been a dramatic surge in these types of attacks where a hacker uses SQL injection to infect legitimate Web sites for use in drive-by download attacks. The exploits used in these types of attacks typically target unpatched vulnerabilities in desktop applications, so the best defense for this is to adopt safe browsing habits and ensure that all installed software programs are fully updated.

Rogueware, fraudware, or scareware. These are types of malware that attempt to trick computer users into buying useless and dangerous software. They typically generate a legitimate-looking pop-up warning that purports to be antivirus or antispyware software or a registry cleaner. These are fake warnings that claim the computer is infected with a large number of viruses and point the user to a Web site to pay for a virus cleaner. Rogueware/fraudware/scareware is such a big problem that Microsoft recently added removal detections for this class of attack and removed fake security software programs from 994,061 distinct machines, most in the U.S. and Europe.


source: http://www.businessweek.com/smallbiz/tips/

Putting a Computer Security Policy in Place

A friend of mine setting up an online printing operation e-mailed me a few weeks ago to ask for advice on setting up formal computer security policies to keep his business safe from intrusion. We went back and forth on the obvious ones—keep antivirus subscriptions current; enable a properly configured firewall; block access to the darker parts on the Internet.

The more we e-mailed, it became clear to both of us that it's a real predicament for startups that do business on the Internet to ever be safe from hacker attacks. The nature of Web-based threats, drive-by malware downloads, and clever social engineering attacks make it nearly impossible to be fully secure. Having acknowledged that, we narrowed down some must-do items that could help to minimize exposure to risk.

• Invest in anti-malware protection and make sure signature databases are current. When evaluating security software, ask about approaches to "whitelisting" (application control), "behavior blocking," and the use of "herd-intelligence."
• Stay on top of high-priority patches for Web server and desktop software programs. Be vigilant about software that gets installed on employee computers and stay away from programs without auto-update mechanisms. Pay special attention to patching known vulnerabilities in applications that are constant hacker targets. Some examples include Adobe PDF, Adobe Flash Player, Apple QuickTime, RealPlayer, and WinZip.
• Diversify browser usage and make it a policy for employees to use certain browsers for certain sensitive transactions. Microsoft's Internet Explorer, a popular target for hackers, should be avoided for high-value transactions.
• Adopt strong password policies. A strong password should be between 8 and 20 characters and must combine random upper- and lower-case letters, numbers and symbols. The longer and more complex your password is, the harder it is to crack using dictionary-based hacking tools.


source:http://www.businessweek.com/smallbiz/tips/