The computer security of hotels should be a priority for the administration, because there is nothing more valuable than the data that is stored, no matter if it is of the company or its guests.
by Alejandra García Vélez
Companies, businesses, banks, all types of institutions must today have efficient strategies to guarantee the security of their computer systems, and protect the data of their customers. Hotels cannot be left behind in this race for safety and must know what vulnerabilities they are exposed to and how to avoid them.
The first mistake of companies is not to prevent; anyone can be the victim of a computer attack, although many companies seem to be unaware of this fact and do not implement the necessary security measures.
Proof of this is the survey conducted by the security firm McAfee, in which IT security managers were interviewed in companies with more than 500 employees. Among the main results of the study, it is highlighted that although companies know the possible vulnerabilities that could affect their IT systems, it is difficult for them to implement measures to solve them.
In the study, titled Risk Compliance Outlook 2011, which was conducted in Australia, Canada, France, Germany, New Zealand, Singapore, the United Kingdom and the United States, respondents stated that the main challenge their companies face is to identify threats and discover vulnerabilities in their systems.
In the hotels
If we analyze the specific situation of hotels in this field, we can see that more work is needed in this regard. And it is precisely that a report by Spider Labs, security laboratory of the consulting company Trustwave, revealed that hotels have one of the highest levels of vulnerability. One of the main reasons is the interception or theft of data through WiFi systems.
On this reality, Osvaldo Callegari, systems analyst at Umbrella Security, explains that for a hotel it is important to have a good strategy because this is a guarantee that increases the degree of reliability of the client. "The absence of IT security systems can currently lead to the loss of prestige, showing a vulnerable face in the eyes of the customer," says Callegari.
But what are the necessary tools to maintain IT security in a hotel? Basically, combined hardware and software tools must be implemented to achieve a better defense. To begin with, it is essential to have a perimeter firewall, which prevents intrusions by restricting the handling of information for certain levels of users.
Second, an intrusion alert software must be installed, which sends a warning to the person in charge of the hotel when suspicious activity occurs. Finally, have a good antivirus to remove any harmful files that may contain Trojans and other threats. In addition, it is essential to carry out a consultancy with an expert.
"The ideal for the case of vulnerabilities is to request a security consultancy from experts in the sector, this type of reports should be considered an investment and not an expense, since through an exhaustive report they will tell you how your network is today and what are the improvements you should have for a better service", Added.
For his part, Hervé Calderón, general director of the Oxten Group, commented that the main factor to take into account for the computer security of the hotel, is to be clear from the beginning what you want to offer, that depends on the measures that will be taken to protect the networks.
For example, if networks are offered for guests and internal users, each of them must have specific security measures. Calderón highlights the importance of segmenting networks for each of these audiences, either by physically separating them by using different wiring for each one or with the help of programs. "Guest networks should have nothing to do with internal networks," he stresses.
Data, the greatest treasure
Nowadays one of the main challenges is to protect the personal data of users, banking information such as the credit card number are very susceptible and that is why they must be protected with spatial care. For this it is necessary to install a Hot Spot with security settings, which allows to prevent the user from navigating in potentially dangerous places.
There is no denying that WiFi Internet access is a must for all hotels; guests claim this service, but it is also essential to protect the information of users who use the hotel connection. It's not enough to simply assign a password to the connection.
In addition, in Callegari's opinion, it is essential for the hotel to have a policy of use that clearly establishes the scope of navigation and the responsibilities of the hotel.
The Hot Spot allows that before accessing the Internet the user reaches a page designed by the hotel in which the user's authentication can be requested by means of a nick and a password. This seemingly basic procedure prevents the guest from connecting to nearby non-hotel networks that are potentially risky. In addition, a cleaner network and greater control of users are guaranteed.
Calderon pointed out that although many companies worry about the reliability of wireless networks, if they have a good level of security they do not have to be breached. "It's much easier for someone to connect to a node on the wired network and steal information by that means," he said.
Case Study
The Oxten group shared with HOTEL AND RESTAURANT MANAGEMENT the experience in a facility they recently made for the Presidente InterContinental Hotels chain, in order to improve guest service and internal communications, using a wireless networking solution with Motorola equipment in three of its main hotels in Mexico City (661 rooms), Guadalajara (450 rooms) and Puerto Vallarta (250 rooms).
Before implementing the system, wireless Internet service to guests was outsourced to a third party. This made it difficult to manage and control it, in addition to the fact that it was difficult to ensure the quality of service to the guest; security levels were dubious and employees could not access such a network.
The implementation of wireless solutions was carried out at night and by zones so as not to leave guests without Internet service at any time, in addition to taking advantage of the existing wiring to optimize resources. The whole process lasted three months, from the configuration of the equipment to the development of the interface with the hotel management systems.
"The development of this interface with the hotel's administration systems allowed us to be able to manage user registrations and cancellations automatically as well as to be able to offer time of wireless Internet use per hour, day or week to individuals or groups," Calderón said. As for the security of the system, an advanced application for the administration of the Hot Spot was designed in conjunction with Hoteles Presidente InterContinental.
