Attempting to do too much without sufficient resources and an awareness of some basic security practices can put an organisation's security in jeopardy.

Small companies and small divisions of larger organisations often try to provide complete business functionality -- e-mail, Web presence, domain-based network -- with limited resources. When you come across client setups like the two I'll describe here, encourage the client to get back to basics and eliminate vulnerabilities created when networks aren't segmented correctly.

[ Read more ]