Do most people take a DIY approach to Security?

Portal Home > Knowledgebase > Articles Database > Do most people take a DIY approach to Security?

Posted by shortie256, 04-06-2015, 07:27 PM
Hi all Whats your plan of action when it comes to security? could anyone share their experiences of using professional security/penetration testing services? How useful were they? Do most people take a DIY approach to security? Thanks Tom
Posted by TmzHosting, 04-06-2015, 07:43 PM
Hi Tom, It really depends on what type of security we are talking about. The security of a software, website, code? - Daniel
Posted by Mr Terrence, 04-06-2015, 08:17 PM
If you are not an expert or have somewhat good working knowledge I wouldn't recommend DIY when it comes to security.
Posted by RDO Servers, 04-06-2015, 08:28 PM
Security is not something to guess at. If your not sure, I would suggest paying a company to do a security audit and making the needed changes
Posted by eth00, 04-07-2015, 07:59 AM
DIY here, then again if you have the background... It is really not something to mess with, there is a lot out there and it is constantly changing. Security is all about risk management and usability vs security. You have to find a fine balance between all of the factors. Each situation is going to require at least a quick analysis. Regardless an external pentest is still a great idea. Having somebody with an outside view and idea on things may help find weaknesses previously not thought of. A pentest from a reputable company is not cheap!
Posted by RDO Servers, 04-07-2015, 08:17 AM
I take the same approach to security as I do with SEO. I know about SEO. I can do SEO. BUT SEO/security changes daily. You really have to be up on every little change as it comes out in order to be effective. To me, its worth the expense to pay someone who specializes in it.
Posted by brianoz, 04-08-2015, 07:51 PM
Great comments here from the above. Be aware that eth00 is considered an expert around here, so it's a little different if he does DIY The good news though is that most of security can be about getting the server setup right, and once that's done most of the work and cost is over. Getting it done right first up will save you money and hassle as time goes on.