A discussion of the concept of managed services security, including some important factors that your organization MUST be aware of. In an effort to remain technologically competitive in increasingly crowded industries, more and more businesses are turning to managed services providers to meet these needs. While being able to leverage the power of modern IT to their advantage without a massive upfront expense is attractive, the real benefits of managed services for many businesses can all be summed up in a single and critical word: security. There is a host of different ways that organizations are leveraging managed services to their advantage regarding keeping themselves protected that you need to be aware of before you make the jump yourself. Patches and Updates According to a Cyber Security Report conducted by Cisco in 2017, one of the most important steps that a business needs to take to protect itself involves evaluating which patches and updates are most important to network safety and then placing them at the top of their “to-do” list immediately. This is an area where managed services providers shine, as all of this is traditionally handled “behind-the-scenes.” You don’t have to worry about whether you’re using the latest version of a program, or whether your in-house IT team has remembered to upgrade to the newest version of an operating system. Because all of your resources are being provided on demand, you always have the latest patches and updates – no questions asked. Data Mining Another important way that managed services providers are offering a superior level of security to businesses has to do with data mining. According to a 2016 study on data breaches conducted by the Ponemon Institute, many of the most severe violations were only able to attain that status because they took so long to identify and rectify. Managed services providers, on the other hand, allow even smaller organizations to take a proactive approach to security. Teams of experts quickly sift through data from thousands of different points to weed out false positives and to identify patterns and suspicious behavior that could be leading to an incident. This not only helps businesses avoid the attack altogether but take steps to make sure it doesn’t happen again in the future. Protected From All Angles Finally, managed services providers also help businesses continue to stay protected as their IT needs grow and evolve. If a company migrates into the cloud, it exposes them to data breaches in an entirely new way – one that their existing methods will not be sufficient to cover. Managed services providers can offer intrusion detection, security invents and incident management, identity management, firewalls and more to help a company cover all of their bases, even while those bases are still in flux. As managed services become more popular in the not-too-distant future, managed services security is going to get critical to the future health and prosperity of your organization. If you’re in {city} and would like to find out more information about this or any other security-related topic, or if you’d just like to discuss your own personal situation with an expert in the field, don’t delay – contact {company} today, either by email at {email} or by phone at {phone}. Used by permission

Mobile devices can create significant security and management challenges, especially if they hold confidential information or can access the corporate network. Require users to password protect their devices, encrypt their data, and install security apps to prevent criminals from stealing information while the phone is on public networks. Be sure to set reporting procedures for lost or stolen equipment.

Free Ransomware Decryption Tools to Get Your Business Back on Track Free ransomware decryption tools are essential for removing malware from your computer and allowing your system to work once again.   Ransomware will wreak havoc on your computer system and your data files. While there are some preventative measures, you can take to avoid ransomware, once your system is infected with this type of malware your data can be held hostage. The ransomware demands a bitcoin fee that most IT security experts suggest you don’t pay because it rarely works. Your better choice is to find a ransomware decryption tool that can help you get back your data and get your system back under firm control. Creators of ransomware are looking to take data to steal identities or to find out sensitive information. While the name implies that a ransom is requested and could be paid, there is little proof that paying a ransom is going to get your system back to where it needs to be. The Wildfire Ransomware Decryption Tool Wildfire was developed after cyber criminals made away with $80,000 over a period of a month and infected more than 5,600 systems with malware. Kaspersky Lab was able to seize the server along with all the encryption keys, building a ransomware decryption tool in the process. The Chimera Ransomware Decryption Tool Chimera utilizes working decryption keys that were discovered on an internet forum. IT security experts were able to test the decryption keys and found that they were effective at removing ransomware. The Rannoh Ransomware Decryption Tool The Rannoh decryption tool cleans your system of CryptXXX and Rannoh malware. There has to be one file that hasn’t been corrupted by the CryptXXX malware in order of the Rannoh decryption tool to be effective. Otherwise, you’ll have to try a different decryption tool to clean your system. The CoinVault Ransomware Decryption Tool If you have files encrypted with CoinVault or Bitcryptor, you can utilize the CoinVault decryption tool to remove the malware from your system. This tool includes more than 14,000 decryption keys and is highly useful when your system has been compromised by malware. Free ransomware decryption tools are prevalent on the internet, and it’s important to find the right tool for your specific needs. Ransomware can cause serious problems with your system, steal all of your data and give you few options to deal with the malware. With new malware always being created, decryption tools are always trying to stay ahead of the game by coming up with solutions to the most likely problems you’ll encounter. When strategies in place didn’t keep your system free from malware, it’s important to remove the malware as soon as possible using a free decryption tool. Used by permission

The increased adoption of chip cards has fraudsters moving online, but businesses are fighting back with improved online security. Security is one of the biggest concerns of our IT clients and for a good reason. The more the digital age advances, the more inventive criminals become. As one vulnerability is addressed, numerous others pop up. The adoption of credit card chips and the subsequent behavior of offenders – moving from targeting brick and mortar businesses to targeting online companies – is a perfect example of this kind of phenomenon. Credit Card Chips Push Criminals From Brick And Mortar To Online Stores In a recent article in SF Gate, statistics on the use of stolen credit card data point to a growing trend in online fraud attempts. According to Javelin Strategy & Research, the use of stolen data for making unauthorized purchases was up 40 percent last year, a substantial increase. Because the number of attempts at fraud are increasing so drastically, merchants are being forced to respond in kind – spending billions of dollars to protect online customers from criminals trying to use stolen credit card information. Some speculate that the rise in online fraud attempts is related to the increase in the adoption of chip cards. If you have gotten a new credit card or debit card, chances are you have seen the chips that indicate new security measures put in place by banks and financial institutions. The chips are supposed to make it harder to counterfeit credit cards. The success of credit card chips in protecting consumers seems to be pushing criminals to attempt fraud where they can be more successful – online. Businesses Are Pushing Back With Improved Security Financial institutions and online retailers and businesses are increasing their spending on the safety to combat the fraud perpetrated by criminals. According to Juniper Research, by 2020 these organizations will spend approximately $9.2 billion dollars on fraud-detection systems. If the estimate is accurate, it will indicate and increase in spending of 30 percent over the next three years. Businesses are taking the problem seriously, as are security technology companies. Multiple approaches are necessary to keep up with the ever-changing strategies of fraudsters, including improved authentication processes, better detection methods, temporary number replacements for credit cards, and even AI and machine learning to identify potential fraud. Successfully combating fraud requires combining the latest security technologies with good old fashioned human interaction. While security companies and businesses are leveraging a variety of technology tools to detect and deter fraud, they are also incorporating human analysts to look for potential fraud and to contact card owners to verify purchases and identities. Keeping Up With The Criminals Is An Ongoing Process We appreciate how concerned our clients are with their security. It only makes sense to be diligent when you and your clients are at risk. But we also like to stress that fraud – while a serious problem that needs to be addressed is a problem that will never be fully eliminated. With or without technology, there will always be criminals attempting to take advantage of businesses and their customers. As your {city} IT company, we are focused on your security. We keep up to date on the latest threats and security solutions, and you can depend on us to do what is necessary to minimize your risk. If you have questions or concerns about your business or your customers, please contact our team at {company} today at {phone} or {email}. We are your resource for IT security in the {city} area.

Prevent access or use of business computers by unauthorized individuals. Laptops can be particularly easy targets for theft or can be lost, so lock them up when unattended. Make sure a separate user account is created for each employee and require strong passwords. Administrative privileges should only be given to trusted IT staff and key personnel.

There are a number of questions that colocation service providers must answer before your business signs up for their colo services. Colocation (colo) is a term used to describe a data center facility that lets a business rent space for servers and other computer system hardware. The data center provides colo partners with power, HVAC, bandwidth, and appropriate physical security. Colo customers provide their own servers and storage. It is not unusual for colo providers to offer managed services that back their clients IT data center colocation needs, nor is it unusual for an MSP to offer colocation services. How Does My Business Choose a Colocation Provider? Many colocation customers view the three most important factors when selecting a colocation partner as power, HVAC, and bandwidth. Let’s look at each of these top three considerations. Power To most potential clients, power is the number one concern. Without power, there is no colocation provider. When considering a company for colocation services, be sure to find out: Who is their utility company and is it equipped to meet rising demand? Is the colocation fitted out with generators in the event of a power failure? Between emergency generators and the supply from the local utility is the power supply uninterruptible? Does the provider have the ability for distribution of power at the circuit level to your equipment? HVAC Insufficient cooling and dehumidifying can cause your equipment to fail. Poor cooling drives inefficiencies that you will see in your power bills from the utility company. Proper cooling helps keep your space and servers healthy and therefore your data stays protected. Space Colo customers lease space by the: Rack Cage Cabinet Room If your potential colo provider offers you space that is crowded, find another. Asking you to lease less space is an indication that profits come before client needs and are a warning that customer service may be lacking. It is important to look to the future so find out if the provider can deal with your business’ growth and changing needs for colo services. Other Questions for Your Potential Colocation Provider While the above three issues are important, other issues to address in your search for a colocation provider should include asking the following: What is the financial status of the colocation provider as to reliability and financial security? IT security and by extension, colo providers, are bound by several regulatory bodies and legislative actions. Does the colo you’re considering conduct annual compliance surveys to make sure that your IT functions stay compliant? Is your potential colo provider using the latest most advanced technologies available? What are the physical and hardware security measures in place for the data center? You need access to certain connectivity providers, does colo provider offer the networks you need? Is customer service and or technical support available 24/7? {company} is the trusted choice when it comes to staying ahead of the latest information technology tips, tricks, and news. Contact us at {phone} or send us an email at {email} for more details. Used by permission

While increases in security and productivity are beneficial, using the IoT also provides for added risks from hackers prowling the internet. The Internet of Things (IoT) is the term used by those in the IT industry as a shorthand description for the ever-expanding network of gadgets, appliances, office equipment and more that have their own IP address that allows for connecting to the internet. It also is used as a description for communication that takes place between an IoT device and other internet-capable hardware. IoT is causing rapid changes in the ways business’ use these tools to improve office security and productivity. However, while increases in security and productivity are beneficial, using the IoT also provides for added risks from hackers prowling the internet. Let’s explore both sides of the coin. On the Positive Side of IoT There are three areas related to security in the office that the Internet of Things excels in. They are: Lower cost of security equipment Better connected systems Availability of remote control and automation The cost of manufacturing and purchasing security hardware has quickly fallen. This means that a small or medium-sized business can begin building a security system that can be monitored by a smartphone, tablet, laptop, or a desktop computer. That company can start with security cameras and add more cameras, window and door alarms, and motion detectors. If purchased separately, costs are low enough that the cost can be expensed rather than amortized. This is an added benefit of IoT-enabled security. For added protection, companies are available that monitor business premises that are filled with IoT security devices. Better connectivity Only a few short years ago, digital security systems were limited to only being a “primary detection system and onsite alarm, with at most a link to a central response center using a telephone line for communications.” Today, security devices easily connect to the internet and can be monitored by a smartphone or a central security response center. Alarms are sent wirelessly and offer more protection than a cut phone line does. For improved office security, IoT provides communication by mobile technology and WiFi. Availability of remote control and automation is a key driver of the IoT in an office environment. Already, agencies are using smart locks that require a biometric such as a retina scan or a fingerprint to unlock doors. Also, firms are finding that office automation, using IoT, answers phones when no one is on duty, sends emails at a prescribed time, lowers the room temperature via a smart thermostat and scores of additional devices that do more than humans ever thought computers could do. How Can the IoT Lead to Compromised Security Systems and Other Risks? In the fall of 2016, there were many companies in the United States and abroad victimized by a Denial of Service Attack This attack flood a website with so many connectivity requests that ultimately the site goes dark. Companies affected by the attack included major technology companies such as Netflix, Spotify, and Verizon. It is believed by IT experts that the attackers hacked into thousands of connected devices including: Security cameras Printers Wireless speakers Other connected devices These smart devices are easily hacked and when a vulnerability is uncovered, manufacturers are slow to correct the problem or offer a patch. Lorie Wigle, general manager of IoT security solutions, Intel Security said: “Everything from printers, cell phones, tablets, USB drives and wearable fitness devices, to industrial controls, smart building technology and the multitude of other internet-enabled devices connecting to a company’s network can be a threat if the proper precautions are not in place. Securing the IoT is a complex topic, especially so for business. . .” To keep your business safe, consider the services of a managed service provider to handle your security issues. {company} is the trusted choice when it comes to staying ahead of the latest information such as technology tips, tricks, and news. Contact us at {phone} or send us an email at {email} for more information on IoT.

An ounce of prevention may be worth a pound of cure, but no cyber security prevention strategy is foolproof. Small businesses must have plans for how to deal with successful attacks. To help entrepreneurs develop such plans, the National Institute of Standards and Technology recently consolidated its emergency response tips into a single document, the Guide for Cybersecurity Event Recovery. According to this handbook, small businesses must have: Contingency Considerations The key to responding quickly to a cyber attack is to anticipate how such an attack is likely to progress. To do this, you must first study your firm’s IT systems and identify sources of vulnerability; you can then predict how a hacker or malicious program would attack you. Consider every possible form of attack, its likelihood of succeeding, and the nature and impact of the damage it would cause. You can then identify the resources and steps for a successful recovery. Bolstering With Backups Cyber attacks often involve encrypting important information or locking you out of your devices. Redundant systems and storage are thus essential for a successful recovery. Begin by identifying all systems and types of information your organization needs to operate, ranking them in order of importance. Then obtain equipment that can perform the same functions and back up necessary data. Make sure not to network that computer with your primary systems, as that will expose them to the same risks. You should also keep redundant equipment physically separate and protect it with complex passwords and advanced anti-malware programs. Staging Systems In addition to helping you obtain unnecessary equipment, ranking your IT systems by an order of importance also makes it easier to plan recovery steps. After an attack, you will need to bring critical systems back online to continue operating. At the same time, you don’t want to reactivate all systems at once before you have thoroughly analyzed the attack, as some may still be vulnerable. Ranking allows you to restart operations in stages, bringing indispensable ones online as soon as possible while leaving less crucial things offline until you are sure they are safe. Communications Concerns After an attack, you will need to be able to communicate with service providers, vendors, and your company’s other departments. Not only can these other parties help you recover, but their systems may be at risk through association with yours. You should thus have a clear sense of whom you need to contact immediately, as well as how to get in touch with them if the attack compromises your ordinary communication equipment. Public Presentation Besides compromising your systems, a cyber attack can harm your brand image, making you look unsafe and irresponsible to customers. You thus need a plan for how to inform consumers about the attack, presenting the information in a way that does minimal damage to your reputation. {company} helps {city} businesses protect themselves against cyber attacks and develop realistic response plans for attacks that do happen. Call {phone} or email us at {email} for more information. Used by permission

Through the NIST’s updated cybersecurity guide, small businesses can develop the metrics, terms, supply chains, and purchases necessary to stay safe New developments in cybersecurity present both opportunities and challenges for small businesses. They allow your firm to improve security and lower the risk of attack, but they also provide hackers with new information to optimize their attacks. It is thus essential that your organization responds promptly to these developments, taking advantage of new strategies and technology before attackers have a chance to get around them. The National Institute of Standards and Technology’s recent cybersecurity update provides a unique opportunity for small businesses to protect themselves, emphasizing the importance of: Savvy Standardization The update provides standardized definitions for some key cybersecurity terms, including “identity proofing,” “authorization,” and “authentication.” This goal is to improve firms’ ability to communicate on IT topics and coordinate security efforts. If all of your employees agree on the meaning of the major security terms, your company can respond more swiftly and efficiently to new initiatives that protect their systems. Standardized definitions also make it easier for your business to verify that employees are taking the necessary security steps, as well as to reward safe employees and censure irresponsible ones. Measurement Metrics In addition to agreed-upon security terms, the updated guide also emphasizes the need for security metrics. Quality metrics allow your organization to measure your past accomplishments and develop clear goals to continue improving security. You also need metrics to provide security information to your suppliers and customers, both to keep them safe and to give yourself a reputation for responsible IT use. Supply Chain Considerations The updated security guide places added emphasis on the importance of risk management throughout your supply chain. Malware may enter your company, and sensitive information may leave, through your suppliers, customers, and carriers. It is thus crucial not only to shore up security in your firm’s internal systems but also to make sure that the organizations you partner with take similar steps. Try to learn as much as you can about how your partners protect themselves, identifying gaps in their security that leave both of your organizations exposed. Then optimize your systems to fill in those gaps, and inform your partner about the risks of their current practices. Premium Purchases Although no organization’s security is perfect, some firms do not even try to stay safe. The updated guide thus highlights the importance of taking cyber security into account when making purchases for your company. Before buying a new product or service, develop a list of security objectives. Then consider how many of them each prospective provider meets. If you cannot find a firm that meets all objectives, choose the one that meets the most, and adjust your internal strategy to compensate for the targets they did not satisfy. You should also continuously reassess suppliers, abandoning those who do not update their security procedures regularly. {company} strives to translate new cybersecurity trends into actionable steps that companies throughout {city} can implement. For advice and support on keeping your firm safe, contact {email} or {phone} today. Used with permission

W2 scams evolving and result in bigger payoffs for criminals. The IRS renews warning to businesses about the scams. When taxes come due, cyber criminals are in full bloom, scamming businesses out of their W2 employee information. Starting in 2016, the scams became bolder and gullible companies sent thousands of dollars to criminals to pay for W2 withholding shortages. W2 Scams are Not New The original phishing scams were designed to have companies release W2 information on employees to those operating the phishing scheme. Unwitting participants respond to a spoofed email from a high executive to the Human Resources Department or the Payroll Department. The bogus email looks and sounds real with and the fake official sending a message along the following lines: “Kindly send me the individual 2016 W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review. Can you send me the updated list of employees with full details (Name, Social Security Number, Date of Birth, Home Address, Salary)? I want you to send me the list of W-2 copy of employee’s wage and tax statement for 2016, I need them in PDF file type, you can send it as an attachment. Kindly prepare the lists and email them to me asap.” Once the cyber-criminal has the information, he or she can use the information to file a phony tax return and get a tax refund mailed to them. Also, the information is detailed and often includes the employee’s Name Address Social Security Number Salary Marital status Number of dependents This information makes stealing an employee’s identity a simple task. While this has been a profitable operation for cyber-criminals, in 2016 and early 2017, a new wrinkle developed. What Else Could a Cyber-Criminal Want? So, stealing a false tax refund and stealing an employee’s identity was not as profitable as some cyber-criminals believed it could be. The new wrinkle was to direct an executive from the company who first provided the thief with W2 information, a request from the same fake official (using a legitimate name and apparently legit business email address) a directive to a colleague with bank account access to wire company funds to a numbered account so that the funds can be used to correct “withholding mistakes.” It seems that the criminals ask for an amount of money that doesn’t raise eyebrows. For small companies, it may be a few hundred dollars and for larger companies many thousands of dollars. All in all, this W2 scam if very profitable. As with all things that are profitable, more people want to get some of the action. IRS Commissioner John Koskinen said: “This is one of the most dangerous email phishing scams we’ve seen in a long time. It can result in the large-scale theft of sensitive data that criminals can use to commit various crimes, including filing fraudulent tax returns. We need everyone’s help to turn the tide against this scheme.’’ In fact, for the first month of 2017, 29,000 taxpayers reported being victims of this scheme. As a result, the IRS renewed its frequent warnings about the W2 scam. The IRS suggests that companies be on the lookout for any unusual requests for W2 Employee information and confirm by phone that the alleged executive actually requested the information. For more information on how to avoid these scams contact [company] today. {company} is an experienced provider of IT security and other IT managed services. We are in {city} and can be reached at {phone} or {email}.