Best Practice Summary

• Security budget calculationWork with clients in advance to determine their acceptable risk and budget levels.

• Use Windows XP SP2Update all workstations to Windows XP SP2 to give you more control and tools.

• Removing local administratorConsider deploying workstations without full rights to the desktop. The use of local administrator is usually not needed by all in the firm.

• Educating the business owner on handling virusesAlways install a server-based antivirus that covers the server, workstation, and email.

• Choosing the right vendorAntispyware is currently mostly a standalone desktop product, but you may consider corporate centrally managed versions.

• Educating the userKeeping your end users up to date in security awareness may require unusual methods for implementation but will be your most effective security tool.

• Flattening the machineDon't hesitate to reformat and reload a workstation if you find you cannot trust that system anymore.