Passwords They seem to have been with us forever

Passwords: They seem to have been with us forever. As we continue to suggest things you can do to protect the integrity of your company and customer data, here is a blog that covers an old level of security that we still rely on everyday. That protection is the password, so let’s talk about bedding up your employee’s handling of passwords. Password hygiene – Passwords remain the most common everyday tool to ensure only authorized personnel have access to secure material. The issue is that passwords need maintenance and attention to be effective. Here are some common problems to avoid. And again, this requires a routine employee training program. Passwords that are too simple Simple passwords are easy to remember but easy to crack. Words, in any language, are not ideal either. That is why many sites require a mix of letters, characters, and numbers. And yes, some people are still using Myname123. One universal password Sometimes people find it difficult to remember multiple passwords for various files and applications, so they use a single good, strong password everywhere. This renders the good password virtually pointless and also increases the amount of damage that can be inflicted in the event that one ‘good’ password is compromised. Unauthorized password sharing Generally done with benign intentions, employees often share passwords for convenience or to expedite handling the sharing of data. Not good. Writing down passwords Sometimes, people follow all password best practices but find it difficult to remember complicated passwords and then write them down on a piece of paper or worse still, make a file containing all the passwords and...

Prying eyes: Keeping your data safe

Prying eyes: Keeping your data safe Even the simplest business possesses data that is proprietary and confidential. Customer and prospects lists, sales data, and personal data about customers such as their credit cards, names, addresses, birth dates. Maybe even medical information or social security numbers. If any of this data is compromised, you could face legal and reputational consequences. It is important you stay vigilant in making sure this data is as safe as it can be from cybercriminals. If you have extremely confidential data, it may be important to use methods to address physical access. Should your server rooms be key-coded or require biometric access? Access codes for physical entry to a room are relatively simple to install. However, passcodes are pretty easy to steal or they can be shared by employees. In addition to limiting access they can also identify when and who accessed a secure location. One step beyond passcode entry is biometric authentication. Examples of biometric tools are fingerprint, iris or facial recognition. The advantages to these are clear. They cannot be easily stolen and for the user, there is no passcode to remember or a keycard to lose. An MSP can provide guidance about how to go about installing a biometric authentication system to secure specific locations. On the other end of the spectrum, there is one excellent tool out there that can protect against one of the most common tricks criminals use to get into your data banks. That tool is employee training about phishing emails and fake websites. Phishing emails, the emails that trick you into opening a link that has been...

Four Basics to follow for Everyday Data Security

Four Basics to follow for Everyday Data Security One of the biggest questions we get from clients and prospects is “What can we do to protect ourselves from cyber attacks?” It is a sensible concern. A cyber attack that freezes operations or seizes data can ultimately shut a company down for good. There are some basic, simple things you can do to protect your company and there are more sophisticated tools available. In this blog, we look over a spectrum of 4 things you can do to improve your data security, from the simple to the high tech. Employee training – It may seem so simple, but training your employees on an ongoing basis about their role in cyber security may be the best thing you can do. Why? Because well-meaning people do things when they get near a computer that can be very risky. Simple things like forbidding the use of external storage devices being brought to the workplace. One of the more notorious data breaches occurred because a subcontractor employee–who had access to a large corporation’s IT infrastructure–found a thumb drive in the parking lot and plugged it in to see what was on it. Beyond that, simple phishing scams are still very effective at tricking people into opening nefarious websites. Ask your MSP for guidance on creating ongoing training programs that explain phishing scams and similar tricks and instruct everyone how to avoid them. Do it on a regular basis. It is easy to forget and let your guard down. Software updates – This one is also basic, but it carries a lot of value. Each...

5 ways to make passwords more effective

5 ways to make passwords more effective You should be using an array of security tools to protect your business data. Some can be highly sophisticated, but there is one tool that we all still rely on heavily to secure access to our business systems and data. The password. But they can be hacked and shared. As long as we still rely on them, are there things we can do to make them more effective? Yes. There are two main areas where you can improve the security of passwords. One is improving the security of the password itself, the second is multi-factor authentication. First, there is the password itself. This is often known as password hygiene. Good password hygiene includes Passwords that are too simple Simple passwords are easy to remember but easy to crack. Words, in any language, are not ideal either. That is why many sites require a mix of letters, characters, and numbers. easy to And yes, some people are still using password123. One universal password Sometimes people find it difficult to remember multiple passwords for various files and applications, so they use a single good, strong password everywhere. This renders the good password virtually pointless and also increases the amount of damage that can be inflicted in the event that one ‘good’ password is compromised. Unauthorized password sharing Generally done with benign intentions, employees often share passwords for convenience or to expedite handling the sharing of data. Not good. a Writing down passwords Sometimes, people follow all password best practices but find it difficult to remember complicated passwords and then write them down on a...

8 Ways an MSP can help implement an AI solution

8 Ways an MSP can help implement an AI solution AI has some real attractions, and now that it has become so advanced, it has gained the attention of the public and the media. However, just because something is a fad, doesn’t mean that it is either new or something everyone needs. Before an organization, especially a small- to medium-sized business, initiates the use of AI in its business processes, it needs to understand that because the tool is so powerful, it also comes with some real risks. Although its predictive capabilities can be transformative for business, they can also be wrong or present legal and ethical issues. As a result, businesses should utilize the experience and skills of experts with a deep knowledge of AI and how it may be applied to your specific organizational goals. Eight ways an MSP can help with an AI solution AI, on its own, is a complex tool. It is also a tool that can be misapplied. Remember, the term artificial is key. To be used effectively and wisely, AI needs to be applied by someone with experience using it in your particular business. An MSP can offer the following to help you begin to integrate an AI solution into any aspect of your business. Step one: Are there potential places where you might use AI? This is where your MSP can be of help. They understand your business and can help identify where it might assist your operations or marketing, for example. Step two: Understand your KPIs and organizational goals, from the top down. It is obvious, but too often forgotten....

Eight ways an MSP can help with an AI solution

Eight ways an MSP can help with an AI solution AI, on its own, is a complex tool. It is also a tool that can be misapplied. Remember, the term artificial is key. To be used effectively and wisely, AI needs to be applied by someone with experience using it in your particular business. An MSP can offer the following to help you begin to integrate an AI solution into any aspect of your business. Step one: Assess your organization’s potential use of AI. Basically, with the holistic understanding of your business that an MSP has, they can evaluate where there is opportunity, and prioritize where to implement first Step two: Understand your KPIs and organizational goals, from the top down. Before you do anything, it is essential to articulate your specific goals. What do you identify as the key strategies and how will you measure your success? Step three: Propose a possible range of AI solutions. Here is an area where your MSP can be of particular value. An MSP will be knowledgeable about the variety of applications out there and lead you to select those most appropriate for your goals. Step four: Estimate the solution’s ROI. Remember, measurement is important. And you can not do everything. So identify each potential AI solution’s ROI. This will guide you to make the most effective use of your resources. Step five: Ensure compliance: For example HIPAA, PCI. HITRUST. ISO27001, SOC1, SOC2. AI is a powerful and potentially intrusive tool. Compliance is critical. Step six: Implement the solution. An MSP can implement the solution for you. Most business owners do not...