Passwords: They seem to have been with us forever. As we continue to suggest things you can do to protect the integrity of your company and customer data, here is a blog that covers an old level of security that we still rely on everyday. That protection is the password, so let's talk about bedding up your employee’s handling of passwords. Password hygiene - Passwords remain the most common everyday tool to ensure only authorized personnel have access to secure material. The issue is that passwords need maintenance and attention to be effective. Here are some common problems to avoid. And again, this requires a routine employee training program. Passwords that are too simple Simple passwords are easy to remember but easy to crack. Words, in any language, are not ideal either. That is why many sites require a mix of letters, characters, and numbers. And yes, some people are still using Myname123 . One universal password Sometimes people find it difficult to remember mul...

Prying eyes: Keeping your data safe Even the simplest business possesses data that is proprietary and confidential. Customer and prospects lists, sales data, and personal data about customers such as their credit cards, names, addresses, birth dates. Maybe even medical information or social security numbers. If any of this data is compromised, you could face legal and reputational consequences. It is important you stay vigilant in making sure this data is as safe as it can be from cybercriminals. If you have extremely confidential data, it may be important to use methods to address physical access. Should your server rooms be key-coded or require biometric access? Access codes for physical entry to a room are relatively simple to install. However, passcodes are pretty easy to steal or they can be shared by employees. In addition to limiting access they can also identify when and who accessed a secure location. One step beyond passcode entry is biometric authentication. Examples of ...

Four Basics to follow for Everyday Data Security One of the biggest questions we get from clients and prospects is "What can we do to protect ourselves from cyber attacks?” It is a sensible concern. A cyber attack that freezes operations or seizes data can ultimately shut a company down for good. There are some basic, simple things you can do to protect your company and there are more sophisticated tools available. In this blog, we look over a spectrum of 4 things you can do to improve your data security, from the simple to the high tech. Employee training - It may seem so simple, but training your employees on an ongoing basis about their role in cyber security may be the best thing you can do. Why? Because well-meaning people do things when they get near a computer that can be very risky. Simple things like forbidding the use of external storage devices being brought to the workplace. One of the more notorious data breaches occurred because a subcontractor employee–who ...

5 ways to make passwords more effective You should be using an array of security tools to protect your business data. Some can be highly sophisticated, but there is one tool that we all still rely on heavily to secure access to our business systems and data. The password. But they can be hacked and shared. As long as we still rely on them, are there things we can do to make them more effective? Yes. There are two main areas where you can improve the security of passwords. One is improving the security of the password itself, the second is multi-factor authentication. First, there is the password itself. This is often known as password hygiene. Good password hygiene includes Passwords that are too simple Simple passwords are easy to remember but easy to crack. Words, in any language, are not ideal either. That is why many sites require a mix of letters, characters, and numbers. easy to And yes, some people are still using password123. One universal password Sometimes people fin...

Infection protection: Nine steps to start protecting your company today Malware is a generic term that covers all manner of software that is designed to attack your devices, applications, programs, and networks. It is software that has bad intentions. Yes, stealing. Either by directly pulling money out of accounts, or improperly acquiring data that ultimately provides access to funds. Example: Stealing your SSN and setting up a credit card to use that info, or convincing you to provide the password to your checking account. Others will snatch your organization's data and hold it for ransom. As usual, it is all about money. What can you do? Nine steps to avoid malware 1) Don’t go it alone - As a small- to medium-sized business, you have limited resources, all of which need to be focussed on running the business and planning for the future. That makes it difficult to direct an IT operation that has the depth to address all of the security issues you face. For example, a busines...

So, what, exactly, is Malware? Listen to the news? Read the internet? You know cyber crime is a very big business. Hackers and criminals are out there doing all sorts of nefarious things. Most generally, you hear that malware is some kind of virus that attacks your software programs, infects your hardware, and bungles up your network. But there are many different types of malware, just as there are many types of criminals–each with their own MO and bad intentions. In this e-guide, we will run through some of the major categories of malware, and then suggest 7 different ways you can work to protect your business from malware. Malware defined - Malware is a generic term that covers all manner of software that is designed to attack your devices, applications, programs, and networks. It is software that has bad intentions. Malicious + Software= Malware. Hackers and criminals create malware for an array of reasons. Some may create it just to attack massive amounts of machines just to sh...

Thing to do this week to start protecting your customer data You have client or customer data in your possession. It is part of running your business in a digital marketplace. If that data is breached, it could permanently damage your reputation. We talked in an earlier blog about types of malware. There are many steps that you can take to protect your systems and data. Here are a few suggestions to protect your business from malware. Consider a Managed Service Provider - Cybercriminals are very sophisticated and every day are releasing new, cutting-edge tools to attack businesses and individuals. Small- and medium-sized businesses do not have the resources to staff an IT department sufficiently to be aware of all the newest tools and technologies needed to protect a business. For example, a business owner cannot possibly keep up with the changes and details of tax laws. Doing it themselves, they would likely overlook important tax advantages or inadvertently break some IRS rule. A...

Seven things that pandemic taught us about data security As workers fled home to handle everything remotely, organizations had to quickly address new threats and questions that were raised about maintaining the integrity and safety of their data. From the IT perspective, the pandemic... Reinforced the need to follow good password hygiene Brought to light the need to engage in data security and access best practices through mechanisms like multi-factor authentication Showed us how important staff training is in terms of data security. The ability of employees working remotely in a less secure environment to identify phishing scams or malicious attachments that could compromise the entire business data setup is really critical. Your data security’s first line of defense is your staff. And this is never more true when they are working remotely. Proved that smooth, secure and timely access to data is a must-have for business continuity. This means technologies facilitating remote w...

What exactly is Malware? A definition and some common types. So what happens when you get software that has been mixed with a strong dose of malicious intent? You get malware, the term used to describe all manner of software invasion that has been designed to do bad things to your computers, networks and digital devices. It may have been created to steal something from you, such as data that can be monetized. It may try to directly steal money from you by draining bank accounts, or using credit card numbers. Sometimes, malware’s intention may be political: it may be about governmental intrigue or industrial espionage, Or it may just be about showing off or causing chaos for its own sake. Whatever the motivation, every organization needs to be constantly on guard to protect its data. Failure to protect the data of your clients and employees can result in serious damage to your reputation and brand as well as lead to fines from regulatory bodies. It can also open you up to liability fr...

Stars of the show: Cloud and VOIP Despite annoying challenges presented by the abrupt shift to the WFH model thanks to the pandemic, there were some tech heroes that saved the day. These two made WFH possible. The cloud The cloud is that platform whereby you outsource your data storage as well as many of your applications. With the cloud, your data and software applications are no longer physically located in a specific geographic location. Therefore, access is no longer tethered to a user's physical location. The cloud was the biggest game changer during the pandemic because it allowed businesses to get anytime, anywhere access to their data as well as critical applications. It wouldn’t be wrong to say that if it weren’t for the cloud, a lot of businesses wouldn’t have been able to survive the pandemic at all. VoIP Along with the cloud, VOIP proved to be one of the most critical elements when it came to business continuity during this pandemic. It revolutionized business c...

Two reasons to pay attention to software Software matters. What your employees use can impact your firm and your customers. Pay attention. Make rules. New software applications In the pre-pandemic phase, even when companies had staff working from home they were fewer in number and a lot of them even came into the office a couple of times a week to ‘just catch up’ on work and with colleagues. So, no one really had paid any attention to collaborative software programs because engagement levels were pretty high with just a handful of staff working remotely and connecting on the phone or in-person anyway. It was only after the pandemic forced organizations in their entirety began to operate –from CEO to intern–that businesses recognized the need for collaborative software programs such as Microsoft Teams, Zoom Meetings, Google Meet, etc. Similarly, from the productivity tracking perspective, software programs such as TimeDoctor, Roadmap, Tick, Timely, etc., became popular. The challe...

Access matters when things go to **&?)! The COVID-19 pandemic brought a multitude of lessons along with it, on both the personal and professional fronts. From the business perspective, the pandemic turned things upside down across almost every industry. One of the biggest trends that the pandemic brought was remote work. While working from home (WFH), or telecommuting as it was called earlier, existed in some industries, the pandemic made WFH mainstream for everyone. From doctor’s offices, to SMBs to IT companies, almost every industry had to resort to remote operations to stay in business. This shift from on-site, brick-and-mortar offices to WFH brought along with it some serious challenges. This blog discusses 2 ways businesses leveraged technology to overcome the various challenges businesses faced with the sudden shift to the remote work environment. Data access This was one of the first and foremost challenges. When shelter-in-place orders and lockdown restrictions were im...

Outsourcing: an overview Outsourcing today simply involves using external entities to handle specific, specialized business functions so that organizations can focus on their core competencies. The idea of seeking outside support for areas that are not core to a business is many decades old. However, seeking support from external providers can make a lot of sense, especially in fields that involve considerable complexity. One example, as human resources becomes increasingly complex practice, especially in areas that involve often complex and arcane laws such as benefits and employment law, many smaller companies are increasingly outsourcing some or all of their HR tasks. IT is another example. Like human resources, IT covers a wide range of specialties, for which no one or two individuals can possibly hope to be fully versed in. As the CEO of a small- to medium-sized firm, or perhaps a line manager, why should you consider outsourcing all or part of the IT function? One immedia...

Can you do this at home? Outsourcing HR, real estate portfolio management, tax audits, etc is fairly common nowadays. This whitepaper discusses another function which, when outsourced, can bring greater efficiency and effectiveness to your business’s overall functioning--IT. IT is one of the core functions of any business. There’s no aspect of a business that is untouched by IT. Outsourcing IT is a big decision and it is not surprising that many organizations choose to manage their IT in-house rather than relying on outsourcing. However, outsourcing your IT to a managed service provider offers numerous benefits. Availability Depending on your service level agreement with the MSP, you get access to an IT team 24/7 when you bring a managed service provider on board. With your in-house IT team there will be days when some of them may be on a vacation or an unexpected day off. You also probably cannot justify 24/7 internal IT support, even though your IT needs to run 24/7. All of th...

MSPs save money. And you get stuff that matters. Outsourcing has become a fairly common element in business processes today. What started off as a means to cut business costs and take advantage of cheaper resources based offshore has now become an essential part of running a business today. (Its definition doesn’t necessarily include offshore outsourcing, of course) This blog looks at two additional areas where IT outsourcing can dramatically improve revenues. In particular, outsourcing can avoid high-fixed costs when you are trying to meet peak demand periods or have 24/7 coverage available. Cost benefits Having an MSP manage your IT infrastructure completely offers tremendous cost savings vis-a-vis having an in-house IT team. When you have FT IT professionals on your payroll, you incur many other HR and training-related costs that come with employing full-time staff. These may include 401(k) expenses, health insurance, paid time-off, etc., which can be avoided by outsourcing you...

Quality matters: Get the best IT is one of the core functions of any business. There’s no aspect of a business that is untouched by IT. Outsourcing IT is a big decision and it is not surprising that many organizations choose to manage their IT in-house rather than relying on outsourcing. However, outsourcing your IT to a managed service provider offers numerous benefits. Here are two areas where outsourcing at least some of your IT can be especially beneficial. Expertise The first and foremost benefit of outsourcing your IT to a reputed MSP is the expertise they bring into the process of managing your IT infrastructure. As we discussed before, outsourcing is all about leveraging the expertise of another organization that specializes in something that is not your core competency. Managed service providers are experts in IT and will be able to manage your IT infrastructure more efficiently. Sure, you could hire IT experts and make them a part of your in-house IT team, but that would...

Train your staff: Your first and best firewall Protecting your organization against cyber threats can seem like a challenge that involves extremely high-tech wizardry, sophisticated knowledge etc.. Much of this is true. Protecting your data and your company against cyber threats requires skilled professionals. But that isn't only what is needed. The first line of defense in data security is everyday common sense and diligence on the part of everyone who works in your organization. Some thoughts . . . The first challenge in beefing up your data security is creating awareness among all of your employees that they really do have a serious role in data security. Many of the ways they can protect your data are simple, but until they are aware that they may represent a threat to data integrity they won’t take their role in protecting your company seriously. Provide training that both explains that their actions may unknowingly create problems, and then review what they can do to av...

Three best practices to protect your data. While malware and phishing attacks have evolved over time and are constantly becoming more and more sophisticated, there are ways to protect your data from them. Here are two best practices to observe no matter the size of IT infrastructure needed in your company or organization to follow that can help safeguard your business. Install a strong firewall A firewall can help prevent unauthorized access to your network by monitoring access attempts and allowing or rejecting them. Firewalls are flexible in the sense that you can choose how stringent or lenient you want it to be in terms of limiting access. There are different kinds of firewalls, each serving a particular purpose and offering different protection levels. An MSP with deep experience with these technologies, as well as your specific industry, can be an excellent resource. Firewalls basically work to block unauthorized traffic to your network based on various factors including IP ...

Ransomware vs. other malware attacks There is no end to the volume and type of malware out there in cyberspace. For a very long time, organizations were aware that viruses could attack their data, render it corrupted and unusable. They were also aware that malware was used to steal data and use it for–primarily–monetary gain. Sell off banks of credit card numbers, steal identities, re-sell Social Security numbers, etc. Phishing, as we talked about in an earlier blog, is a set of tricks to get access to personal information and probably even to your IT network by stealing access credentials, but that’s not the only way. Cybercriminals also deploy various malware such as viruses, worms and trojan horses to attack IT networks. These malware usually gain entry into the system disguised as genuine email attachments, links to file downloads, etc. and then corrupt the data. If it is a case of a virus whose sole intent is criminal mischief, your surest protection are consistent and frequen...

Everyone wants to go phishing. You are very much aware that your company or organization is at risk, every minute of the day, from cyberattacks, malware, ransomware, and even benign errors that can put your data at risk. Even a failed backup procedure could mean a loss of critical company and customer data. In today’s blog we’re just going to review one of the most common methods that bad actors use to try to gain access to your data. Phishing. Phishing isn’t a particular type of malware or virus that attacks your data. Instead, it refers to the tools cyber criminals use to get access to your data. Phishing refers generally to the bag of tricks they use to break into your house. In phishing attacks, cybercriminals generally send a web link that is disguised to look genuine, and prompt the receiver to share information that will then be misused. For example, an email may be sent to you that looks as though it came from your bank or the IRS announcing a tax refund that your business ...