Security

Security Tips

• Audit your user list regularly; make sure that former employees or contractors are removed from the system, and that those who are active only have access to what they should

• Use role-based separation; enforce a work flow process by way of internal procedure. Only allow the content producers to upload content; the digital sign network operators should review and approve content for scheduling - don't allow one person to perform both functions if you want an opportunity to review content before it goes live.

• Require password changes; enforce a password rotation policy for MediaCast logins. Prohibit users from using their web browser to 'remember' the login for the site! Any laptop with a remembered password that gets stolen automatically grants the thief access to your digital signage network. (Note: this is a real security risk, but it might incite panic - what do the marketing folks think?)

• Require strong passwords; passwords should include upper and lower case letters, numbers, even symbols from the keyboard, and should be at least 8 characters long. Users should be discouraged from using something that's too simple, or something they routinely use for other logins around the Internet.

• Don't use email; email is a notoriously insecure method of communication is a preferred method for hackers to sniff out usernames and passwords to systems that they shouldn't have access to. If you need to send a login to someone, pick up the phone!

• Digital signs are valuable; don't tell too many “interested” people where all your signs are located. If they want to see one, select a couple flagship locations to send prospectives to check them out. you never know who might be looking to take advantage of you for an easy score. (Again, something we want to mention? maybe it's over-stating the obvious, but I think a lot of people in business just think about business and don't take a step back and think about reality...)

• Beware of URL Files; though the MediaCast system supports URL Files which can be automatically retrieved and displayed on your signs, be certain that you trust the source of the content and whoever has access to it because you will not have any oversight as to what gets displayed.