THE INFOTECH BLOG

Get smart about smartphones

2022-01-21T08:36:00.001-08:00

Get smart about smartphones

With flexible working schedules, remote teams and Bring Your Own Device (BYOD) policies in force, it is has become commonplace for employees and business owners alike to use smartphones for work purposes. A quick reply to an email, sharing that sales presentation, glancing over that vendor proposal–all on a smartphone–is something we all do on a daily basis. But with this convenience comes great security risks.

This blog discusses what they are and how you can avoid them.

Mobile devices are lost/stolen more easily

Unlike desktop computers, your smartphones and tablets are easier to steal. O, you may even forget yours at the restroom in the mall or in the subway, and along with it, goes all confidential data.

Phishing: Avoid biting the bait

A smartphone user is more likely to fall for a phishing scam on two accounts--one, with messaging apps like whatsapp, facebook messenger, etc., chances of getting phishing links are higher. The smaller screen size can make it difficult to clearly verify the authenticity of the site being visited.

Free Wi-Fi = free malware

Free wifi makes everyone happy. The smartphone user, the shopkeepers and also malware distributors! Your smartphone literally travels everywhere with you. The mall, the coffee shop, the movies and then to work as well. Just like how humans can catch the flu and make everyone at work sick, your mobile device can get infected with a malware and spread it across your network in the office.

What you can do?

You have antivirus for your computers, why not for your smartphones and tablets? We all know how disastrous a malware attack can be to your data, devices and your brand, in general. Consider installing antivirus software in your mobile devices to safeguard them from such attacks.

How do you prevent misuse of your debit card? With a PIN number, right? You can do the same to your phone by protecting it with a passcode so the miscreant will not be able to use it to access your data. Also, there are apps that let you wipe out all the data from your smartphone remotely in case you lose your device.

Be careful when downloading data and even 3rd party apps on your phone. Double check URLs when browsing online using your phone and don’t click on messages with links that seems malicious. In such cases, remember, if something seems too good to be true, it almost always is. Chances are, you may have not won that million dollar lottery or that all-expenses-paid trip to Europe.

And, spread the word amongst your employees. Their phone has the power to damage your brand! Take care.

Assessing your MSP in the first appointment

2022-01-14T08:26:00.001-08:00

Assessing your MSP in the first appointment

Handing over your IT to a MSP is a major decision. Who do you choose and more importantly, how? While there’s no rulebook that will tell you exactly how to proceed, here are a few hints that can help you decide how invested your prospective MSP is into you.

How well do they know your industry vertical

It is important that your MSP truly understands the industry-specific IT challenges you face so they can help you overcome those challenges effectively. For example, do you have a commonly used software program or any governmental or regulatory mandates that you must be adhering to. Is your MSP knowledgeable on that front?

How well do they know you and your values

How well does this MSP know your business in particular. Have they invested time in learning a bit about you from sources other than you--like your website, press releases, etc.? Do they understand your mission, vision and values and are they on the same page as you on those? This is important because you and your MSP have to work as a team and when start to see things from your point of view, it is going to be easier for you to build a mutually trusting, lasting relationship with them.

References and testimonials

References are a great tool to assess your prospective MSPs. Ask them to provide you with as many references and testimonials as they can. It would be even better if their references and testimonials are from clients who happen to know you personally, or are in the same industry vertical as you or are well-known brands that need no introduction.

Are they talking in jargons or talking so you understand

Your MSP is an IT whiz, but most likely you are not. So, instead of throwing IT terminology (jargons) on you, they should be speaking in simple layman terms so you understand and are comfortable having a conversation with them. If that doesn’t happen, then probably they are not the right fit for you.

Were they on time

Did your MSP show up when they said they would? Punctuality goes a long way in business relationships and more so in this case as you want your IT person to ‘be there’ when an emergency strikes.

While there are many factors that go into making the MSP-client relationship a success, the ones discussed above can be assessed during your very first meeting. They are kind of like very basic prerequisites. Make sure these basic conditions are fulfilled before you decide on a second meeting.

3 things your Managed Services Provider (MSP) wants you know

2022-01-07T08:25:00.001-08:00

3 things your Managed Services Provider (MSP) wants you know

Are you considering bringing a MSP on board? Or perhaps you already have one. Either way, for you to truly benefit from your relationship with a MSP, you need to build a solid bond with them. As a MSP who has been in this business for long, I can tell you the 3 important steps that will help you get there.

Share, share, share

Your MSP is your IT doctor. Just as you would share everything about your health with your doctor, you need to share everything related to your business that impacts your IT, with your MSP. Give us an overview of your business and answer questions such as

What you do exactly as a business
Who are your key clients
Which industry verticals do you serve
What are your peak and lull seasons, if you have them
What are the core regulatory codes that apply to you based on the industries you work for
What are your business expansion plans for the near future and in the long run

Sometimes clients shy away from discussing all these things because they don’t trust the MSP enough. There is a fear of the MSP sharing business plans and other confidential information with their competitors. As a MSP, I can tell you that we work best with clients who trust us. When you are trusting us with the lifeblood of your business--your IT infrastructure, you should be able to trust us with your plans for your business.

Let’s talk often

While it’s great that you outsource your IT completely to us, it is still important that we meet and talk. Your business needs may change over time and we don’t want to be caught off-guard. We know you are busy, but set some time aside every month or even every quarter to catch up with us and discuss your IT challenges and needs.

Take us seriously

Your IT is our business, and we take our business very seriously. So, when we tell you something, such as--to implement strong password policies, limit data access, upgrade antivirus, etc., please take notice!

Teamwork forms the core of any successful relationship. Same holds true for your relationship with your MSP. Trust us, pay attention to us and hear us out. We’d love that...and we’d love to work with you!

Website cloning: Don’t fall for that trap!

2021-12-31T08:07:00.001-08:00

Website cloning: Don’t fall for that trap!

Have you watched one of those horror movies where the something impersonates the protagonist only to wreak havoc later? Well, website cloning does the same thing--to your business--in real life. Website cloning is one of the most popular methods among scammers to fleece you of your money.

As the name suggests, the cybercriminal first creates a ‘clone’ site of the original one. There can be a clone of any website, though retail shopping sites, travel booking sites and banks are the favorites of cybercriminals. The clone site looks exactly like the original one, barring a very miniscule change in the url.

Next, they will create a trap intended to get unsuspecting victims to visit the clone site. This is usually done via links shared through emails, SMS messages or social media posts asking them to click on a link to the clone site. The message urges the recipient to take an action. For example, a message that presents itself as though it is from the IRS, asking the recipient to pay pending taxes by clicking on a specific link to avoid a fine or business shutdown, or an SMS about a time-bound discount on iPads. Sometimes, they go straight for the target and masquerade as a message from your bank asking you to authenticate your credentials by logging into your banking portal--the only glitch, the banking portal will be a clone.

Staying safe

So, how do you identify a clone website and a dubious message?

Does the email sound too good to be true? Well, then it probably is. Nike giving away free shoes? Emirates Airlines giving you free tickets to Europe? Apple iPhone X for just $20? All of these scream SCAM!
Even if the message sounds genuine, such as an email from your bank asking you to authenticate your login credentials, check the email header to see if the sender’s email domain matches your bank’s. For example, if your bank is Bank of America, the sender’s email ID should have that in the domain. Something like customercare@bankofamerica.com could be genuine, whereas, customercare@bankofamerica.net is suspicious.
Check the final URL before you enter any information to make sure it is the actual one. Most shopping/banking websites, where payments are made and other personal details are shared are secure (HTTPS)and will have a lock symbol at the beginning of the URL. Also, check the domain. For example, something like- www.customerauthentication.com/bankofamerica is not

Identifying a cloned website is tricky, but it is not something you can afford to ignore.Giving away your personal and financial information to a fraudster can cause a lot of harm to you and your business.

Why you need the cloud?

2021-12-24T07:51:00.001-08:00

Why you need the cloud?

When talking to our clients, we have noticed that SMBs often think the cloud is something for their bigger counterparts to explore. We hear objections like, “But, it’s too complicated.”, “The cloud sounds expensive.”, “We are a small business, we don’t think we need the cloud.”, Hold on!

In reality, it is the SMBs that benefit the most from the cloud. Here’s how...

The cloud grows with you

Yes, you may be a SMB today and perhaps a few desktops and in-house hard-disks are sufficient as of now. However, as you grow, your data storage needs will increase and you will need much more than a few external hard-disks. Servers become expensive and wholly owning one is not very cost-effective.Change the dynamic:he cloud grows with you--you can scale up or down on cloud usage easily and save on costs. Plus, when using cloud storage, you are sharing your server space with others, so you essentially pay for only what you use.

Security is not your concern

When you store your data in-house, the headache of security, backups and updates falls on you. However, with the cloud, all of that becomes your cloud service provider’s responsibility. You focus on running your business and your cloud service provider will take care of your data’s security and accessibility. .

Accessibility

When you store your data on the cloud, it is accessible from anywhere using the internet. That lends a lot of flexibility to you. You or your employees don’t have to be in the in the office or have immediate access to their computers to be able to work. A quick order can be processed or an invoice can be raised even using an iPad or a smartphone!

So, don’t you think it may be beneficial to get a little ‘cloudy’? For more, download our whitepaper- Demystifying the cloud in layman’s terms

BYOD=Bring your own disaster?

2021-12-17T07:37:00.001-08:00

BYOD=Bring your own disaster?

Workplaces today have changed. They extend beyond the working hours, beyond the cubicles. Whether you are commuting to work or even vacationing, chances are you or your employees take a break from the break to reply to those important emails that require ‘immediate action’. Plus, there may even be employees who are not even on the same continent as you. What does all this mean for your business in terms of IT security? Does BYOD translate to bring your own disaster to work? This blog explores the risks of BYOD culture and offers tips on how you can avoid them.

When you adopt a BYOD culture at your business, you are opening the virtual floodgates to all kind of malwares and phishing attacks. Your employee may be storing work-related data on their personal devices and then clicking a malicious link they received on their personal email or (even whatsapp in case of tablets or smartphones) and put your entire network at risk. Secondly, you cannot control how your employees use their personal devices. They may connect to unauthorized networks, download unauthorized software programs, use outdated antivirus programs etc,. Even something as simple and harmless as the free wifi at the mall can spell danger for your data.

What you can do?

First of all, if you have decided to adopt the BYOD culture in your organization, ensure you have a strong BYOD policy in place. It should cover the dos and don’ts and define boundaries and responsibilities related to the BYOD environment.

It also makes sense for you to invest in strong antivirus software and mandate those employees following the BYOD model to install it. You can also conduct device audits to ensure your employee’s personal devices are up-to-date in terms of software, security and firewall requirements to the extent that they are safe to be used for work purpose.

And one of the most important aspects--train your employees on the best practices related to basic data security, access and BYOD environments. This will ensure that they don’t make mistakes that prove costly to you. You can conduct mock drills, tests and certifications and provide the BYOD privilege to only those who clear your tests. You could also use positive and negative reinforcements to ensure everyone takes it seriously.

BYOD is great in terms of the flexibility it lends to both--the employer and the employee, and the trend is here to stay. It is up to businesses to ensure it helps more than it can hurt.

Don’t sign up with that MSP just yet!

2021-12-10T07:32:00.001-08:00

Don’t sign up with that MSP just yet!

The decision to sign up with a MSP is a big one--you are essentially trusting someone with the backbone of your business–your technology infrastructure, so you need to make sure you pick someone with whom you can have a mutually beneficial, long-term relationship. This blog discusses what you need to know before you sign up with a MSP.

Values: Your MSP is your technology partner and for your partnership to be smooth, make sure you pick a MSP whose core value system matches yours as a business.

Knowledge, skill set and experience: Does your MSP have the skillset and the resources to cover all your IT needs? Are they experienced in working with SMBs? How long have they been in the business? Make sure you have satisfactory answers to these questions before you bring your MSP on board.

Flexibility: Does your MSP let you pick and choose whatever services you want, or do they sell it as a fixed package? Having the option to choose what you want lets you invest your money where you really need to.

Service and support: You are opting for a MSP so you can get solid IT support--the kind you can’t get with an in-house IT team owing to resource constraints. So, make sure your MSP will actually provide you that. Talking to their existing clients can help you figure out how good they are in terms of service and support.

To have a MSP manage your IT needs successfully, you need to create a strong partnership with them, where they help you grow and are agile enough to scale up or down to suit your business demands. There are plenty of MSPs in the market, but not everyone will fit well with your needs.

Our recent whitepaper explores this in detail as it discusses the 8 things you need to know before you partner with a MSP for your IT services. Please click here to download the whitepaper.

3 Things to consider before you sign-up with a cloud services provider

2021-12-03T07:28:00.001-08:00

3 Things to consider before you sign-up with a cloud services provider

More and more SMBs are migrating to the cloud and that is not a surprise considering the numerous benefits the cloud can offer them. For a SMB, the cloud is a cost efficient and secure answer to their growing data needs and IT security requirements. The cloud grows with them and lets them scale their business without worrying about a corresponding rise in IT costs. Plus, with the cloud, the important aspects of security and backups are mostly taken care of by the cloud service provider. And then, there’s the convenience of any-time-anywhere data access. With all these benefits that the cloud brings, what’s there to think about before signing up with a cloud service provider? While are a lot of benefits of storing your data on the cloud, but your data is still yours, so there are a few things you need to know and be comfortable with before you jump onto the cloud.

Data storage location

Ask your cloud services provider where, (as in the location of the data center) your data will be stored. Ask them if they have multiple data centers and if yes, then, will they be backing up your data and storing them at different places. It is great if your cloud services provider does that, since that ensures higher safety of your data.

How secure will your data be?

Yes. When you hire a cloud services provider, a major chunk of your data’s security responsibility is passed onto them. You don’t have to really worry about your data security, but, you still need to know how they plan to keep your data safe. Ask your cloud services provider for details regarding their data security procedure. Have them share all policies, SOPs and data security frameworks that they claim to have in place.

Past performance/data loss history

Everyone talks about their best projects in a sales meeting. What you really need to know are the worst ones. Ask your cloud services provider to share with you their data loss/downtime trends for the past one year. Observe the trend. How often does their system give way and how long does it last? This is important for you to understand, because this metric translates into loss of business for you.

And finally, don’t forget to ask for a client list. Like we said before, everyone highlights the good things about themselves in a sales meeting. If you really want to know how good your cloud service provider is, ask them for a client list--both current and past. Check how many of them are from your industry vertical. Try reaching out to those who are willing to talk. Find out what they like the most about your cloud service provider and what aspects they find negative. Find out why their former customers left them. Usually customers are pretty good indicators of the quality of service a business provides. Hope these tips help you finding a cloud service provider who fits in well with your needs.

The biggest threat to your IT infrastructure: Your own employees

2021-11-26T07:18:00.001-08:00

The biggest threat to your I.T infrastructure: Your own employees

Did you know that your employees often unwittingly ‘help’ cybercriminals gain access to your system? Often, employees play a part in compromising the security of your IT infrastructure, even without them realizing it. For example-

When your employees use their own devices for work purposes such as to access emails, to connect to work servers or to work on office files. In the event their device gets infected by a malware or hacked, the virus or the hacker gets access to your data as well. Your employees may put your network at risk by connecting to unauthorized networks, downloading unauthorized software, using outdated antivirus programs etc, on their personal devices and then using it to access work files.Then, there’s the chance of them losing their devices such as smartphones, laptops or tablets putting your data at risk.

Your employees may also fall victim to phishing messages and scams and expose your network to the biggest risks out there, unintentionally. Plus, there’s always a slim chance that a disgruntled employee looking to make a few quick bucks may actually compromise on confidential business data intentionally.

So, what can you do to keep your IT safe?

Train your employees through drills, workshops and classroom training sessions that help them identify possible IT security threats
Establish clear IT usage policies related to password management, use of personal devices, data sharing and internet access
Conduct timely audits and have positive and negative reinforcements in place to ensure policy adherence
Install physical and virtual security mechanisms like CCTVs, biometric access, software programs to track employee activities when they are accessing your network and data, etc.,

IT is the lifeblood of your business and when you let your employees access your IT network, you are, in a way, trusting them with your business. Make sure they are trained and trustworthy enough.

IT Red Flags to Watch Out For

2021-11-19T07:07:00.001-08:00

IT Red Flags to Watch Out For

As someone running a SMB, you probably have a lot on your plate. You are the core decision maker, responsible for growing your business, keeping your clients happy and getting all the working done. Often, when you have so much going on, one area that gets overlooked is IT. When you are so busy looking into other things, the start of IT issues may slip your watchful eyes. In this blog, we discuss the IT red flags that you need to watch out for.

Adware ambush

This happens generally when your internet browser has been hijacked and an adware has been sneaked into your system. When you try to surf the net using a hijacked browser, you will find online ads popping up everywhere. And by that we don’t mean the few sponsored search results or a couple of ads that show up when you browse a site. We are talking about ads showing up just about everywhere on your browser. Even a simple link click will take you to an unintended page. It is so evident, you just cannot miss identifying an adware ambush!

Strange pop-ups

Much like the Adware ambush, strange pop-ups show up when you least expect them. For example, you may be trying to open a presentation or a document and a series of pop-up windows will appear before you are allowed access to the file. Watch out for these, as they indicate the presence of a malware in your system.

Spam/Fake emails

If, all of a sudden, you see a lot of spam emails being sent from your/your staff’s official email IDs, there may be a worm at work. Often email worms enter the IT system through the download of one infected file and then replicate themselves across the network via email. Worms do this by penetrating the victim’s email security and spread itself across all of the victim’s email contact list through automated emails that look as if they were actually sent by the victim. So, is Sam from Accounting sending you a lot of junk emails? Probably time to get his PC checked.

A lot of what used to work before is now broken

We all have minor software and hardware issues here and there. But, if all of a sudden, a lot of stuff that used to be up and running seems to be broken, it screams “Red alert”! It could mean that the malware is slowly taking over your IT system, one program at a time.

Bottomline--Surprises are good, but not so much in IT. If you find anything amiss, anything different, like a machine that suddenly slowed down, or a program that just doesn’t work anymore or a new plug-in added to your browser or a new homepage, it’s better to take a deeper look and arrest the problem before it spreads elsewhere wreaking havoc through your IT network.

Hiring seasonal staff? Here are a few things to consider from the IT

2021-11-12T06:47:00.001-08:00

Hiring seasonal staff? Here are a few things to consider from the IT perspective

In many industries, there are seasonal spikes in business around specific times. For example, CPAs/Accounting firms, though busy all year, generally see a spike in business around the time of tax planning, IRS return filing, etc., the retail industry sees a boom around the Holiday Season, and so on. During such peak times, it is common practice in the industry to employ part-time staff to meet the immediate resource needs. While this works well in terms of costs and for handling additional work/client inflow, this poses a few challenges from the IT perspective. In this blog, we explore those challenges so you know what to watch out for before bringing part-time staff on board.

Security

When you are hiring someone part-time, security could be a concern. You or your HR person may have done a background check, but their risk score nevertheless remains much higher than permanent employees who are on your payroll. Trusting a temp worker with customer and business data is a risky choice.

Infrastructure

Having seasonal employees is a good solution to temporary spike in workload. But, there is still a need to provide your temps with the resources they need to perform their tasks efficiently. Computers, server space, internet and phone connectivity, all need to be made available to your temp workforce as well.

Lack of training

Your permanent employees will most likely have been trained in IT Security best practices, but what about your temps? When hiring short-term staff, SMBs and even bigger organizations rarely invest any time or resources in general training and induction. Usually brought in during the peak seasons, temps are expected to get going at the earliest. Often IT drills and security trainings have no place in such hurried schedules.

Collaboration needs

Often businesses hire seasonal staff from across the country or even the globe because it may offer cost savings. In such cases when the seasonal staff is working remotely, there is a need to ensure the work environment is seamless. High quality collaboration tools for file sharing and access and communication needs to be in place.
Having part-time or seasonal staff is an excellent solution to time-specific resource needs. However, for it to work as intended--smoothly and in-tandem with the work happening at your office, and without any untoward happenings--such as a security breach, businesses need to consider the aspects discussed above. A MSP will be able to help by managing them for you, in which case hiring temps will be all you need to think of.

Don’t make these IT mistakes as you grow!

2021-11-05T07:31:00.001-07:00

Don’t make these IT mistakes as you grow!

During the course of IT consultancy, we come across a lot of clients who are not happy with the way their IT shaped up over the years. They feel their IT investments never really yielded the kind of returns they expected and come to us looking to change the trend. When analyzing the reasons for the failure of their IT investment, here’s what we come across most often.

Not prioritizing IT

This is the #1 mistake SMBs make. When focusing on growing their business, most SMBs think marketing, sales and inventory, but very few consider allocating resources--monetary or otherwise towards IT. IT is seen as a cost-center, rarely prioritized and any investment in IT is made begrudgingly.

Going for the fastest, latest or even the ‘best’ technology--which may not be the best for you

This is in contrast to the issue discussed above. Many SMBs realize the key role that IT plays in their business success. But they tend to get carried away and invest in the latest IT trends without considering whether it fits their business needs well, or if they really need it. Sometimes it is just a case of keeping up with the Joneses. But, why spend on the fastest computers or largest hard drives when you get only incremental productivity benefits?

Your team is not with you

When you bring in new technology or even new IT policies, it is your team that needs to work on it on a daily basis. If your staff is not on the same page with you, your IT investment is unlikely to succeed. So, before you make that transition from local desktops to the cloud, or from Windows to iOs or roll out that new BYOD policy, make sure you have your staff on your side.

You are not sure how to put it to good use

The lure of new technology is like a shiny, new toy. Investing in something popular and then not using it to its maximum is commonplace. Make sure you make the most of your investment in IT by providing your staff with adequate training on how to use it.

IT can seem challenging to navigate when you have to do it all by yourself. It entails steep costs when taken care of in-house. Add to that the complex task of deciding what IT investment you will benefit the most from and then training your team to use it...all of this is pretty daunting when you have to do it all by yourself. A MSP has the experience and expertise needed to be your trusted partner and guide in these challenges, helping you make the most of your IT investment.

Cybersecurity Toolkit

2021-10-27T08:07:00.001-07:00

Cybersecurity Toolkit

I remember the first time my dad gave me a box of tools. I was moving out for the first time, and he gave me a box filled with an old hammer, two screwdrivers (one flathead, the other Phillips head), a rusty wrench, and a tape measure. It wasn’t much but it showed me that he wanted to make sure that I was ok. He gave me those tools so that I could fix any problems that came up in my time away from him. Well, I want to do the same for you but with cybersecurity. Now I’m not your father, but that doesn’t mean that I don’t want you to be safe online and there are tons of tools online that can help you strengthen your cybersecurity.

Listed below are seven powerful tools, normally be found bundled together in one cybersecurity awareness program, that will turn your company’s digital security from zero to hero!

Continuous Dark Web Monitoring: As we went over in the last blog the dark web can be a terrifying place. Cybercriminals use it as a home base for malware attacks, phishing schemes, and all sorts of other digital terror activity. It’s not recommended that you ever delve into that Marianas Trench of the Internet, but you should know if your data is being passed around down there. A dark web monitoring service will alert you if certain emails, names, passwords, usernames, and more appear in the deep web. This will give you the chance to change passwords or back-up data before an attack occurs. A service like this could save you from having your identity stolen down the line.
Simulated Phishing: Over 1/5 of all data breaches involved phishing schemes in some way (source), so there is never too much protection against it. In a phishing simulation, you and your employees will receive fake phishing emails disguised as real emails to help you learn how to identify when you are being scammed. If you fall for the phishing scam, often you are prompted to take a training course on how to avoid them in the future. But congratulating those who pass is just as important as educating those that don’t. Positive reinforcement and gamification are invaluable aspects of simulated phishing that make it that much more effective. This tool builds habits that will only benefit your company in the long run.
Email Analysis Tool: Phishing attacks are one of the most prevalent scams on the Internet. Not only that but they can be very hard to catch if you are not paying attention. With an email analysis tool, however, you only have to be suspicious of an email to know if it is a phishing attempt. An email analysis tool allows employees to test whether an email has signs of phishing just by clicking a button. Once triggered, these tools tell the employee what parts of the email make it likely to be a phishing attempt and what they can look for in the future. Save IT some time and possibly yourself some grief with a tool that will put the power to uncover phishing schemes into the palm of your hand.
Weekly Micro Training Videos: One of the most important parts of strong cybersecurity is constant and regular training. Many training programs provide an annual training course that covers the basics, but if you let that information fall into the recesses of your mind it isn’t going to do you any good. That’s why short weekly trainings can be extremely helpful for your business. Reminding your employees every week of the dangers that lurk on the Internet and the ways with which they can combat them is extremely important. These trainings will also keep your employees informed on the newest trends of cybercrime. Cybercriminals are constantly evolving so you and your employees must remain constantly educated. These trainings tend to be 5 minutes or less and they are normally sent directly to your inbox. Five minutes for exponentially stronger cybersecurity sounds like a good deal to me!
Gamification & Employee Engagement: As you read through this blog, you may be thinking, there’s NO WAY my busy employees have time for all of this...and there’s no way you have time to nag them the entire way. That’s why a training program that puts gamification and employee engagement first is a HUGE key to a program’s success. That, and participation from upper management of course. When looking for a training program, make sure it’ll make your life easier, not harder. With positive reinforcement, gamified training, and a competitive leaderboard, you’ll do less nagging and more celebrating.
Simplified Management: Implementing a training program can seem daunting. All the time it would take you to rummage through all your employee’s data sounds IMPOSSIBLE. But if you find the RIGHT program that helps you, and doesn’t hurt you, you’ll be on your way to cybersecure in no time. Find a program that simplifies all the messy metrics into one, easy-to-understand risk score to help your management team understand where their company’s cybersecurity stands. No more data overwhelm, just one score indicating whether an employee is high, medium, or low risk and how to improve. Adding a metric to your employee evaluations has never been easier.
Security Risk Assessment: You can’t fix a leaky roof if you don’t know where the water’s coming from. You can’t repair your engine if you don’t know what broke. It’s impossible to fix a problem if you don’t know what the problem is. That is where a Security Risk Assessment comes in. This examination will tell you where the holes in your cybersecurity are and how best to plug them up. There’s no point in guessing with something as important as cybersecurity, go through an SRA to get a more confident answer.

Anything can happen at any time. That is the sentiment with which my father gave me his toolbox. He understood that being prepared is extremely important in life. That is exactly why you should always be prepared for a criminal to pounce. All these tools will keep your staff on their toes and prevent your business from falling victim to the next digital villain’s master scheme. The only thing I’m asking of you, is to have the foresight to open the toolkit and use them.

But you don’t need to go to your dad for a toolbox when we’ve got everything that you need right here! InfoTECH Solutions, L.L.C. can provide everything mentioned above so that your company never has to worry about cybersecurity again. Contact http://www.infotech.us/ to learn how your company get can the jump on cybercriminals with one easy-to-use program that’s automated, ongoing and easy to use!

The 7 Ghosts of Cybersecurity

2021-10-22T08:14:00.001-07:00

The 7 Ghosts of Cybersecurity

October is Cybersecurity Awareness Month, but it also well known, among the vernacular of the younger generation, as Spooky Season. Most people are more concerned with ghosts, ghouls, and goblins than they are with the dangers lurking in the dark corners of the Internet. Which is understandable, it’s more fun to think about the fake monsters than the real ones who could change your life in an instant. So, let’s make a compromise. We’re going to list the 7 scariest ghosts and monsters when it comes to cybersecurity, and we’ll try to make it as spooky as possible.

Social Engineering: The definition of social engineering is the manipulation of people in order to get access to confidential information. This malicious practice has been used for centuries but it has gotten even more effective in the Internet Age. Examples of social engineering include sending an email disguised as your friend or a trusted source, baiting you with free goods, and catfishing you into a fake romantic relationship. Once the needed information is obtained, the social engineer can then sell it or use it to line their own pockets. Think of them as shapeshifters who change their form in order to get what they want out of you.
Phishing: While many of the items on this list are types of software, phishing is more of an attack vector. Cybercriminals most often craft an email or text message that appears convincing but once interacted with (through clicking on attachments or links) could prompt you to enter login credentials or install software that is infected with malware. Imagine someone installing a listening device into your home by packaging it in a box from a store you would normally shop with. Sounds a lot scarier now, doesn’t it?
Malware: Malware is a broad term encompassing any type of intrusive software designed to damage computer systems. It has many different subsets, but malware is the umbrella under which they all live. Malware is a lot like another M-word: monster. There are many different types of monsters, but in the end, they are all monsters.
Viruses: We all know about the viruses that can infect your body, but what about the ones that infect your computer? They are often attached to a file sent to you by a cybercriminal. These malicious chunks of code spread from device to device, damaging your software and stealing your data. Think about it this way, how much scarier would biological viruses be if they could record your thoughts and give them to someone else?
Keylogger: This specific form of spyware can be extremely dangerous. Keyloggers allow hackers to see the keystrokes made on their victim’s keyboard. This information could lead them to usernames, passwords, bank information, and other personal data. It’s like if there was someone learning all your personal secrets by reading through your texts and emails. Just the idea of it sends shivers right down your spine.
Ransomware: All malware is dangerous, but there is not a subset more directly harmful than ransomware. This code-based demon infects your computer by encrypting the data stored on the device and forces the owner to pay a ransom to get it back. These types of attacks can occur on a personal or business level. To make a spooky comparison, ransomware is like a demon possessing your friend and forcing you to give up your soul in order to get them back.
The Dark Web: The Dark Web may not be something that can infect your computer, but it is definitely something you should be scared of. The Internet we use is only the tip of the iceberg, with the Deep and Dark Web taking up the rest. This shadowy hive of villains and ne’er-do-wells is where many attacks are launched from and where a lot of the stolen data is sold. There isn’t a good enough spooky metaphor for this one because the Dark Web is terrifying enough on its own.

There they are! Seven terrifying digital ghouls that will be haunting you for weeks to come. Join us next week to learn some techniques and tools that will help you avoid these possible threats!

Man-Made Problems in the Digital World

2021-10-20T08:02:00.001-07:00

Man-Made Problems in the Digital World

If you’ve watched any sci-fi movie, you probably understand the perceived dangers of the digital world. Primarily the unrealistic dangers of artificial intelligence. Now, I’m not saying that AI won’t be a threat in the future but it’s important to note that right now the people using the Internet pose a much bigger threat than an incoming Robo-Apocalypse. And I’m not just talking about cybercriminals. Regular, everyday human error is what poses the most dangerous threat to your company’s cybersecurity. Don’t believe me? Well then, let’s take a quick look.

If one of your employees is involved in a data breach and they happen to use the same password across all their accounts, that could give cybercriminals access to your whole network of data including employee W2’s and customer billing information.
If just one person isn’t paying enough attention to their email and falls for a phishing scam, it could expose your company to a data breach or ransomware attack. Something like that could shut down your company for days or even weeks. Think about how much that could cost you in revenue and reputation.
A less than thought out photo posted to social media with PII (Personal Identifiable Information) or PHI (Personal Health Information) visible in frame could lead to a data breach or a HIPAA violation. You don’t want a poorly timed selfie to be the reason you have to deal with an onslaught of lawsuits.
Something as simple as a lost phone could be fatal if that employee used their personal phone for work. A hacker could use that hardware to break into your integral systems that hold employee and customer data. Not as easy to fix as a trip to Best Buy.

All these missteps are unintentional, but that doesn’t mean that you shouldn’t plan aheadfor them. Make sure that you’re giving your staff proper cybersecurity training and making your digital policies well-known. Be an active participant in making sure no one falls for scams.

Luckily for you, this Cybersecurity Awareness Month we’ve got you covered. Join us on October, 27 at 11AM CST for a comprehensive webinar about the cost of human error when it comes to cybersecurity. Everyone who attends the webinar will receive a downloadable graphic with even more digital security tips! Sign up here to attend the webinar and learn simple steps that will put you on a path to less human error and stronger cybersecurity!

The Secret History of Cybersecurity Awareness Month (And its Not-So-Secret Future)

2021-10-12T11:51:00.001-07:00

Have you ever wondered where all those weird holidays come from? Like, who got to decide that April 23rd was National Talk Like Shakespeare Day? Or that Squirrel Appreciation Day would fall on January 21st? Or that the last Friday of every April would be National Hairball Awareness Day? An entire day to make sure that your feline friends aren’t spewing wet clumps of hair on to the floor seems like a waste of time, but do you know what isn’t? An entire month dedicated to cybersecurity. Now that’s a topic worthy of a holiday!

Cybersecurity Awareness Month was created by the Department of Homeland Security and the National Cyber Security Alliance in October of 2004. It was launched in an effort to help Americans to be safe in the rapidly growing Internet. Since its inception, the month has only grown more important as our lives become increasingly digitized. Many high-ranking US officials have been a part of the event including former DHS Secretaries and former Presidents. We are only one of many industry participants who are taking this month to educate our community on the importance of cybersecurity. College campuses, non-profits, and other organizations frequently join in on the fun as well.

This October, we will be participating in Cybersecurity Awareness Month in a big way. For all 31 days of the month, we will be giving you integral tips on how to build up your personal and business cybersecurity. Each one of these tips will bring you new avenues for protecting yourself online and will help you build a fortress of digital protections around yourself. Also, stay tuned for weekly blog posts that will give you even more information on how to stay safe online. Make sure that you’re following us on social media so you don’t miss out on any of the cybersecurity goodness we have in October.

The Cloud: Are there security issues

2021-09-21T08:00:00.001-07:00

The Cloud: Are there security issues?

For many, the idea of offloading their data to another physical/virtual location can seem like a security risk. It seems counter intuitive that moving data away from “ home” is safer. But is that really true? Any server stored at your location is probably more physically vulnerable than one protected in a large server farm. If you had a fire, flood, or other physical damage that included damage to your server, what would be the result? Also, are your backups stored on–site? If a major event damaged your entire physical location, those backups would be also lost.

There is a second reason the cloud may be safer: security. All of your data, no matter where it is located, may be vulnerable to cyber attacks and data breaches. However, cloud storage providers probably offer some of the most sophisticated security projection available. It is unlikely that a small or even mid-sized firm has the internal resources and research capacity to maintain an equivalent level of security.

So give some thought to the cloud as tool to preserve your data and the integrity of your business (as an added bonus, it likely will be a money saver, too).

How the cloud saves smaller firms money

2021-09-14T08:16:00.001-07:00

How the cloud saves smaller firms money

OK. You pay someone to store all of your data in the cloud, as opposed to keeping it on your own server and backing it up. And you pay on an ongoing basis. How is that possibly going to be cheaper than just making a one-time investment and keeping it your self?

Let’s count the ways:

(1) You lose the hardware expense –a capital expenditure cost.

(2) If that hardware fails, you are out in the cold.

(3) Someone has to maintain that hardware. In house IT labor is expensive.

(4) If you need more capacity, you have to ramp up at a tiered level, which means you may need to buy capacity you don’t presently need

(5) All of that hardware runs on software, which costs money

(6) All of that software needs to be installed, updated, etc. (see # 3)

(7) All of that hardware and software has to run 24/7. Are you large enough to pay for in house monitoring and support 24/7? (See again #3)

(8) All of that data has to be protected with security software, which means skilled IT support and expensive virus protection

Ok. The list doesn’t end here, but this blog will. Talk to InfoTECH Solutions, L.L.C. about how the cloud can be a really budget saver for small and medium sized firms.

Data regulation and our business: You are probably regulated by these laws

2021-09-07T08:04:00.001-07:00

Data regulation and our business:
You are probably regulated by these laws

Small firms are probably aware that there are laws regulating the handling of data, but they probably assume that these apply only to larger firms and that they are too small to have any data that is worthwhile or protected under state/provincial or federal laws. Think again. Data protection laws generally worry about the content of your data, not the volume of it. That is, you don’t need to have “tons” (not the technical term) of data to be to regulated by data privacy laws. If you maintain personally identifiable information (PII) you may be regulated by these laws which may include penalties and fines for non-conformance. PII means you store a person’s first name/initial, last name and then link it to another piece of personal information, such as, but not including:

Social Security Number
Driver’s license, or state ID
Passport
Some financial account number, e.g. credit/debit card, checking account, etc.
Health insurance ID

You are very likely required to observe regulations regarding protection of that data, and reporting of data breaches.

This isn’t an issue for the faint of heart. Contact a managed service provider with expertise in your specific industry or field of business to make sure you are in compliance. Failure to maintain compliance can lead to some very expensive fines and penalties.

A security hack doesn’t have to mean the end of your company

2021-08-31T08:08:00.001-07:00

A security hack doesn’t have to mean the
end of your company

Statistics are showing that each year over 50% of small firms are victims of a cyber attack or data breach. Why does this matter? Most smaller firms have not prepared business continuity plans to keep their IT infrastructure going in the event of an attack. Failing to do so often leads to the failure of the business. Delaying the creation of a business continuity plan is a bit like a younger person delaying writing a will, on the grounds that they are not likely to die soon. That may be true, but if the worst occurs the consequences can be severe for their heirs.

If the chance of a breach that could compromise your data or cripple your IT infrastructure is over 50%, there is every reason to immediately develop plans for how your business could maintain operation in the event of an attack on your IT systems.

This is an effort that shouldn’t be delayed. Contact InfoTECH Solutions, L.L.C. to help you develop a complete and holistic business continuity plan immediately. Your income and your future depends upon it.

Don’t steal… It isn’t nice and makes you vulnerable to security hacks

2021-08-24T08:15:00.001-07:00

Don’t steal… It isn’t nice and makes you
vulnerable to security hacks

Don’t steal. It isn’t nice. And... it make you extremely vulnerable you security hacks if you “steal” software packages. Smaller firms often will use unlicensed software packages to save money. This is especially true if they only need a program for a specific task. Aside from the legal and ethical issues involved here, there is a very selfish reason not to do this. Software providers are constantly sending users updates to their programs, and those updates aren’t just about features. They include fixes to security holes and protections against specific new viruses that have been discovered. So, the longer you have an old, outdated software program on your PC or laptop, the more vulnerable you become. Is it really worth saving $200.00 when your entire business’s IT infrastructure could be put at risk? We suggest not.

Cybercrime: In-house protection that only YOU can provide

2021-08-17T08:02:00.001-07:00

Cybercrime: In-house protection that only YOU can provide

From the political world to the corporate, all we hear about is hacking, hacking, hacking. Everyone gets hacked, data is stolen, etc. So, the cry goes up for better security protections for everyone's data. Firewalls, virus software, etc., etc., etc.

Want to know one of the best ways to protect your data? Train your employees to stop opening any emails or links unless they absolutely know they are safe. Scam emails that try to trick you into opening a link to a bogus site, or worse, trick you into providing your password or ID for a known site are exceptionally effective ways for hackers to get into your internal system and compromise data. Yes, ransomware is a serious issue, and malware is out there, but employees naively opening phishing emails remain one of the biggest risks to data security. Talk to your employees on an on-going basis and provide training and tips on how to ID phishing scams

VoIP: A money saving solution for your company’s technology backbone

2021-08-10T08:05:00.001-07:00

VoIP: A money saving solution for your
company’s technology backbone

When small business managers think about their IT infrastructure, they think about their employee’s mobile devices, cabling, Wi-Fi, laptops, a printer, and Internet connectivity. These are the basics of their IT infrastructure. However, there is one other aspect of a modern corporate IT infrastructure and that is an internal phone system that can connect “voice” over the internet, rather than traditional copper wires. Once upon a time, every office had an internal phone system that connected to the world via wire/cable/fiber. That wire/cable/fiber then connected a person in your office to a person somewhere else via the local phone company and a long distance carrier. And they did it for a per minute fee. And a very high per minute fee if you called internationally.

A VoIP phone system eliminates the phone company’s per minute connection, sidestepping them and running the voice call over the Internet.

Talk to your managed service provider about this money saving addition to your firm’s technology backbone.

SAFETY PUP SAYS Update

2021-08-03T08:20:00.001-07:00

SAFETY PUP SAYS…. Update

One thing smaller firms and individuals are often reluctant to do is download updates to their operating systems and individual apps and programs. Why? Well, because it takes time and you have to reboot the device. Other reasons are a fear that the newest update will have a bug and cause problems. The perception is that it is better to wait a few weeks. Finally, there is a fear that anytime you update a program or OS, something always starts acting weird.

All of these may have a certain legitimacy. Even procrastination has its defenders. But why should you download updates ASAP? Because they are not only about new features and a new gadget - they include patches to security issues that have been identified. One of the easiest ways to protect yourself from hacking malware and other nefarious online viruses is to always update your software. Do it the day the update comes out, because it may be released specifically due to the discovery of a brand new malware or ransomware hack.

Everyone talks about security. Be the person who acts. It is easy.

With Ransomware, The ONLY Cure Is Prevention

2021-07-27T11:57:00.001-07:00

With Ransomware, The ONLY Cure Is Prevention

It just keeps showing up in the news. Ransomware seems to just not come to an end. If you haven't heard, ransomware is a particularly nasty virus that freezes access to your data and then demands a ransom, usually in bitcoin. The worst thing about it is that once you are hit, there is almost nothing you can do. There are only 2 options: don't pay the ransom and lose your data, or pay it. There is no "downloadable" fix. You are stuck. With ransomware, the ONLY cure is prevention.

In the case of ransomware you need to be constantly updating your data and securing it in isolation from your network. Even then, if your backup system overrides your older data each time it backs up, you can actually save the virus if it has infected your system at the time of the backup. To make sure you are as protected as you can be, we strongly recommend you contact a technical security expert to consult on the best way to protect against ransomware and other security hacks.

THE INFOTECH BLOG

Get smart about smartphones

Get smart about smartphones

Assessing your MSP in the first appointment

Assessing your MSP in the first appointment

How well do they know your industry vertical

How well do they know you and your values

References and testimonials

Are they talking in jargons or talking so you understand

Were they on time

3 things your Managed Services Provider (MSP) wants you know

3 things your Managed Services Provider (MSP) wants you know

Website cloning: Don’t fall for that trap!

Website cloning: Don’t fall for that trap!

Why you need the cloud?

Why you need the cloud?

BYOD=Bring your own disaster?

BYOD=Bring your own disaster?

Don’t sign up with that MSP just yet!

Don’t sign up with that MSP just yet!

3 Things to consider before you sign-up with a cloud services provider

3 Things to consider before you sign-up with a cloud services provider

Data storage location

How secure will your data be?

Past performance/data loss history

The biggest threat to your IT infrastructure: Your own employees

The biggest threat to your I.T infrastructure: Your own employees

So, what can you do to keep your IT safe?

IT Red Flags to Watch Out For

IT Red Flags to Watch Out For

Adware ambush

Strange pop-ups

Spam/Fake emails

A lot of what used to work before is now broken

Hiring seasonal staff? Here are a few things to consider from the IT

Hiring seasonal staff? Here are a few things to consider from the IT perspective

Security

Infrastructure

Lack of training

Collaboration needs

Don’t make these IT mistakes as you grow!

Don’t make these IT mistakes as you grow!

Not prioritizing IT

Going for the fastest, latest or even the ‘best’ technology--which may not be the best for you

Your team is not with you

You are not sure how to put it to good use

Cybersecurity Toolkit

Cybersecurity Toolkit

The 7 Ghosts of Cybersecurity

The 7 Ghosts of Cybersecurity

Man-Made Problems in the Digital World

Man-Made Problems in the Digital World

The Secret History of Cybersecurity Awareness Month (And its Not-So-Secret Future)

The Cloud: Are there security issues

The Cloud: Are there security issues?

How the cloud saves smaller firms money

How the cloud saves smaller firms money

Data regulation and our business: You are probably regulated by these laws

Data regulation and our business: You are probably regulated by these laws

A security hack doesn’t have to mean the end of your company

A security hack doesn’t have to mean theend of your company

Don’t steal… It isn’t nice and makes you vulnerable to security hacks

Don’t steal… It isn’t nice and makes youvulnerable to security hacks

Cybercrime: In-house protection that only YOU can provide

Cybercrime: In-house protection that only YOU can provide

VoIP: A money saving solution for your company’s technology backbone

VoIP: A money saving solution for yourcompany’s technology backbone

SAFETY PUP SAYS Update

SAFETY PUP SAYS…. Update

With Ransomware, The ONLY Cure Is Prevention

With Ransomware, The ONLY Cure Is Prevention

Data regulation and our business:
You are probably regulated by these laws

A security hack doesn’t have to mean the
end of your company

Don’t steal… It isn’t nice and makes you
vulnerable to security hacks

VoIP: A money saving solution for your
company’s technology backbone