Editor's note
Learning the hard way

Why is it that almost everything that is worth learning, we have to learn the hard way? Particularly in the area of cyber security, it often takes a bad experience before management realizes the impact of not preparing adequately for cyber attacks and not plugging security loopholes.

Like many small and medium-sized businesses, TSMP Law Corporation's attitude toward security today was shaped by a bad experience.

About four years ago, the law firm's e-mail system was disrupted by a virus which infected its computer systems and network. The incident not only created technical problems, it also negatively affected the company's reputation and credibility. Responses to customer queries were slow, and the law firm was adamant that the unfortunate episode will not occur again. TSMP took steps to minimize their business risk exposure.

Security experts at Ernst & Young told ZDNet Asia's Aaron Tan that one of the biggest mistakes SMBs make is to place too much trust in their internal systems and staff. Many threats arise from the lack of proper internal defense.

This month's special report highlights several ways that SMBs can take to protect their systems and data. Hewlett-Packard's Philip Lee offers tips for locking down computer systems, while BCP expert Nathaniel Forbes shares seven creative tips for business continuity planning. ZDNet Asia's Jeanne Lim also checks out the different storage technology options available to businesses.

But securing a company's assets, brand and reputation goes beyond patches, firewalls and disaster recovery plans. As companies rely more on technology to communicate with customers and partners, they need to be fully aware of the legal implications so as to avoid legal problems.

For example, did you know that contracts which are not established on written documents can also be enforced? Lawyer Vijai Parwani highlights a landmark case where the Singapore High Court changed the traditional mind-set of what constitutes "writing" or "signature".

In this issue, we also explain why it pays to comply with the new laws governing intellectual property rights and why firms should retain e-mail for at least six years.

If you've got a story to tell or comments on the stories published here, write to us. We'd love to hear from you!