Optimal Impact

Home

Optimal Impact

With Hacking on the Rise, Your Small Business is The Next Big Target

What prompted President Obama and U.S. intelligence leaders to announce in March that cyber-attacks and cyber espionage had supplanted terrorism as the top security threat facing the United States?

The sheer volume—and sophistication—of attacks. The 2012 Data Breach Investigation Report detailed 855 cyber security incidents in 2012 resulting in 174 million compromised records. The list of targets ranges from big names like Coke, Sony, and Samsung to smaller businesses across the country. According to the Federal Communications Commission, theft of digital information has become the most commonly reported fraud, surpassing physical theft.

If it can happen to the big corporations with hundreds of thousands of dollars delegated to security budgets, it can happen more easily (and be much more devastating) to the small- to mid-sized business (SMB). In fact, almost 2/3 of victimized SMBs are forced out of business within 6 months of being attacked.

What kinds of attacks are happening?

Attacks against corporations are executed by installing viruses, gaining unauthorized access to a system, breaching hardware and software securities, and accessing network infrastructures. Cyber criminals are targeting both large and small organizations to gain financial records, medical and health information, personal identification facts, business intelligence on competitors, and to steal corporate intellectual property.

Cyber-attacks can be initiated by someone external or, sadly, internal to your organization.

Why now?

There are four factors that have recently converged to create the perfect environment for the cybercriminal.

Multiple Points of Entry: The increased use of technologies such as mobile devices, social media, and cloud computing, combined with the corporate Bring Your Own Device (BYOD) trend, have created multiple points of entry for the cybercriminal. With more devices and accounts comes an increased opportunity for security breaches.
Ease of Breach: Although some of the increasing cyber-attack incidents are very sophisticated, a surprising number utilize “social engineering”—a hacking technique that uses the fallacies of the human condition, and people’s willingness to help, to find out sensitive data and, therefore, compromise security. For example, if someone called one of your employees and identified themselves as part of the organization’s IT team and asked for the employee’s password, how many do you think would willingly give it? Research shows 4 out of 5 times, the password is easily obtained. What’s more, according to the 2012 Data Breach Investigation Report, 96% of the 855 cyber security incidents in 2012 were categorized as “not highly difficult” and 97% of the breaches were determined to have been avoided through “simple or immediate controls.”
False Sense of Security: According to a study by the National Cyber Security Alliance, “77% of small businesses think that they are safe from cyber threats – even though 87% don’t have a policy in place to try to prevent such attacks.”
Lack of Defense: According to a 2012 nationwide study of small businesses by digital security firm Symantec and the National Cyber Security Alliance (NCSA), 83% of small businesses have no formal cyber security plan, while 69% lack even an informal one—all while 71% report being dependent on the Internet for daily operations.

Why does this matter to the SMB?

SMBs are not safe; in fact, they are often strategic targets. According to the 2012 Data Breach Investigation Report, 40% of all cyber-attacks target businesses with less than 500 employees. In addition, cybercriminals often target SMBs because they are less protected and act as a “digital bridge” to attack larger firms with which they have a relationship (Lockheed Martin’s security was breached by a cybercriminal who garnered access through one of their small vendors).

Plus, without the large disaster recovery budgets that large companies have, a cyber-attack can be deadly to the SMB.

Last word:

Cyber-attacks and the resulting security breaches are part of an expanding cyber threat that cost companies and taxpayers billions of dollars in lost data and remediation efforts. Since a security breach can destroy the viability of your business, you must think through your organization’s security in the context of your business: what does security mean for your company? What are you trying to protect and why? How vulnerable are you? How should you educate your employees about their role in mitigating cyber exposure? These conversations are not only technical, but also strategic and business-driven, and should involve both IT professionals and senior management. Next month we will explore how to assess your need for a security audit and the essential elements that should be included in the one you get.

Optimal Impact contains original content by Heinan Landa. Permission is granted to copy this article as long as the following information is included: Heinan Landa is CEO of Optimal Networks, an IT support, management, and consulting company that helps technology drive clients' busines goals. For more information, visit www.optimalnetworks.com or call 240-499-7900.

0 Comments

Top Seven Things to Consider Before Switching Your Organization to Windows 8

Windows 8—you’ve probably played around with it while browsing in the mall. If you haven’t had a chance to get your hands on it, Microsoft’s newest operating system takes the core of Windows 7 and reimagines it in an all-new touch interface. Although Windows 8 wasn't adopted by record-breaking numbers of Windows users when it was released, according to recent numbers published by analytics firm Net Applications, this is changing. Before you switch your organization, however, there are several things to be considered; below are the top seven.

Do you have enough cash to do it? Budgets are always a factor in any technology decision and this is no exception. Although Windows 8 has been touted by Microsoft as its least expensive upgrade, there are hidden costs to consider. The first is hardware. Windows 8 really requires a touch screen monitor and those are pricey. The second is training. Windows 8 has a very steep learning curve so you will need to factor the cost of training staff into the switch.

Which version do you need? While Windows 8 Pro was advertised as the professional version of the operating system, it is not right for all organizations. Many larger companies need Windows 8 Enterprise. Ask your trusted technology advisor about the differences between the two and from which one your organization could most benefit.

Which operating system are you running now—and is it working for your organization and your staff? If you are already running Windows 7 throughout your organization, there is no rush to upgrade. If your company is currently running Windows XP, it would be wise to start considering an upgrade to Windows 8.

How old are your computers? If your computers are more than four or five years old, there is a good chance that upgrading to Windows 8 will mean new computers as well. With older hardware, compatibility with newer operating systems is not guaranteed. Additionally, it is much easier to put a new operating system on a new machine than it is to retrofit your existing computers.

Are your applications compatible with Windows 8? What about your add-on devices like webcams, printers, and scanners? If the answer is most often no, you may have just eliminated Windows 8 from your list of operating systems to consider without a hefty capital investment.

Are you considering the cloud for your organization? If so, the question “Should I upgrade to Windows 8?” could potentially become obsolete. There are many cloud solutions out there that take your entire IT network and infrastructure and put it into the cloud, delivering you the best operating system and applications for your organization whenever and wherever you need it.

Do you buy into Microsoft’s vision? In other words, are you planning to purchase all Microsoft mobile products in the near future to establish this OS and viewing platform as a corporate, unified standard across all devices in your organization—phone, laptop, tablet, and PC. Microsoft believes that this is the future and, although it is a bit utopian, Windows 8 is the first operating system that has launched the laptop/tablet hybrid proliferation among manufacturers in hopes of creating a device with both productivity and consumption in mind.

Last Word

The fact that you are questioning the shift shows that you are being appropriately cautious about this new release. And you are not alone; there is a reason Windows 8 continues to have a slower-than-normal adoption rate among Windows users. Ask yourself the key questions in the context of your organization, your employees, and your current productivity to guide an informed decision. As is the case with many new releases, there is no harm in waiting. In fact, sticking with Windows 7 until the Windows 8 ecosystem matures may very well be the right move for your company.

Want to learn more? Click on the video below.

0 Comments

Will Windows 8 be the One OS that Unites Us All?

When I say “Metro Tile Interface” and “hot corners”, what comes to mind? If not already, soon, ubiquitously, it will be Windows 8—Microsoft’s newest operating system (OS) that takes the core of Windows 7 and re-imagines it in an all-new touch interface. The OS's home screen is filled with touchable panels with information rotating in each one. From there, you can tap and swipe your way to other touch-based applications. Underneath the touch layer, however, is Windows as we know it, with a start button, task bar, file manager, and app icons.

Several of our engineers have it (including me) and below are our initial thoughts:

Pros of Windows 8

Sexy: Created especially for the touch screen experience.
Reliable: It is based on Windows 7, which has proven reliability.
Fast: It boots up faster and seems to run faster than Windows 7.
Convenient: Legacy apps will work on Windows 8, making the transition relatively simple.

Cons of Windows 8

Hard to Navigate: Difficult to manipulate with a traditional desktop computer with a mouse; the new interface is really designed for touch screens.
Unproven: New technology is always unproven for the first 6 months or so.
Difficult to Change: Although the Metro tile interface can be disabled to make the user experience a more familiar one, it is difficult to do.
Requires Increased Training: Expect a longer learning curve because users have been using the classic start button design for almost two decades.

Are People Buying It?

Kind of. Sales in the first month of the Windows 8 release reached 40 million—a figure that sounds impressive, especially when you compare it to Windows 7 sales figures (60 million licenses in the first two months). However, Windows 7 kept selling at a rate of about 20 million licenses per month and experts are skeptical about whether or not Windows 8 can achieve those numbers. In fact, initial sales volume was forecasted to be much greater because it is the least expensive version of Windows that Microsoft has ever sold and it doesn't necessarily require a hardware upgrade. Historically, when Microsoft releases an OS upgrade, PC sales increase because the new OS requires leading-edge processing power or memory. With Windows 8, that is not the case; in fact, it appears to be less resource hungry than some of its predecessors. Combine convenience with cost-effectiveness and the sales of Windows 8 should be skyrocketing. Microsoft is blaming lackluster PC designs and availability for this initial slow start, and predicting that as more touch devices are released, Windows 8 sales will jump.

Should You Buy It for Your Organization?

Depends. If your organization needs an operating system upgrade, we recommend upgrading to Windows 8, but disabling the Metro interface unless you are upgrading to touch screens all across your company (which we would not advise). Not only are touch-screen monitors expensive, their effectiveness remains to be seen. Users still require a mouse to work within applications, even if they can touch their monitor to navigate to those applications. If you are already running Windows 7 throughout your organization, there is no rush to upgrade. If your company is currently running Windows XP, it would be wise to start planning an upgrade to Windows 8 soon.

Last Word

Microsoft’s vision with Windows 8 is, of course, to establish this OS and viewing platform as a corporate, unified standard across all devices—your phone, your laptop, your tablet, and your PC. Although it is a bit utopian, it is the first operating system that has launched the laptop/tablet hybrid proliferation among manufacturers (Lenovo Twist, Lenovo Yoga, and Asus Taichi, to name a few) in hopes of creating a device with both productivity and consumption in mind. Could it become the new corporate standard? Not yet. Will it help to both unify the market, while diversifying both products and capabilities? You bet. Keep watching; the ramifications of the Windows 8 release will be far-reaching and interesting.

Want to learn more? Click on the video below.

0 Comments

What Should an Effective BYOD Policy Contain?

BYOD or Bring Your Own Device is an IT strategy that encourages and supports employees bringing in their personal devices, and sets out policies and specifications regarding these devices. Having a myriad of devices creates a bit of chaos, which is especially concerning (and risky) when thinking about your company’s data. It also raises a multitude of questions that you must be prepared to answer—and provide a corporate policy to address. At the bare minimum, your corporate BYOD policy should contain the following:

Define and Specify: You must decide which devices you are going to support. All mobile devices? Just cell phones? Just tablets? Then, you must specify what versions and levels of devices your company will support. For example, all cell phones that run iOS 6.0 or greater or Android Ice Cream Sandwich operating systems or greater. Stay current; you don’t want to encourage employees to bring in old devices with outdated operating systems that can cause headaches (and security problems) for your IT team.

Password Rules: Your BYOD policy must outline password specifications for your users. Will the device rotate passwords after a certain period of time? What is the minimum number of characters required for the password and are you regulating a certain password construction? Will the device lock after a number of unauthorized attempts to access data?

Address the Apps: Clearly state which apps will be supported. Will you only be supporting email functionality? Or will you be supporting calendaring, Word, PDF readers and an entire office suite? Be specific.

Payment: This section needs to define who will be paying for the device, work apps, and ongoing usage charges. Employees need to understand for which charges they are responsible.

Data Protection/Security: Explicitly lay out the types of protection and security you will be requiring on these devices—this should include everything from anti-malware programs (on Windows and Android devices) to restrictions on downloading company documents. Will there be certain anti-virus, anti-spam, and anti-malware that your organization will provide and support? Will there be rules against downloading company documents? Will you be limiting network or application access to enhance security?

Employee Leaves or is Terminated: Your BYOD policy must address what happens when an employee leaves—or is terminated from—the company. It must also include actions that will be taken if a device is lost. It is imperative that corporations retain the right to remotely wipe all data from a device in any of these scenarios. In addition to leaving or being terminated, clearly state that the employee’s device will be remotely wiped if the employee loses the device, a data or policy breach has been detected, or if an incorrect password is typed in more than a certain number of consecutive times.

Access/Collaboration: This section should address how corporate information will be shared on these devices. Will you create access to a corporate DropBox account or will access be more sophisticated and extensive (e.g., allowing employees to access their desktop from these mobile devices)? If you leave this up to the individual, then you will find that everyone is accessing data differently, and you will have some data chaos on your hands—which is difficult to remedy.

Expectation of Privacy: It should be noted that your organization respects the privacy of its employees, but that a device used for work will need to be accessed by multiple stakeholders. The privacy policy should note that any and all communications passing through the device (even personal ones) could be accessed and referred to at any time.

Liability: Your organization’s BYOD policy must contain a section on liability that protects the company from the loss of any of the user’s data and from any service disruptions. In addition, note that you have the right to remove any supplied applications from the device as a result of a violation of the BYOD policy. In addition, your policy should include a statement about how users are expected to follow all safety laws, regulations, and common sense when using their smartphones (i.e., no texting while driving).

Last word

At the end of the day, BYOD is more than just a policy; it is a shift in corporate culture. If your organization is one that requires personal mobile access for maximum productivity, and you are willing to invest the IT support dollars that inevitably come with a strong BYOD policy, then go for it. If, on the other hand, you are leading a high-security organization or your company’s industry is highly-regulated and requires multiple levels of compliance, a BYOD environment might not right for you. In general, it is important to remember that the greater the variety of devices you allow onto your organization’s network, the higher your risk for data loss. BYOD policies must be thorough, comprehensive, and accompanied by multiple trainings to ensure that both employees and corporate executives understand the benefits and risks.

0 Comments

The Birth (and Death) of BYOD

BYOD, or Bring Your Own Device, is an IT strategy that encourages and supports employees bringing in their personal devices, and sets out policies and specifications regarding these devices—and it is in full swing in corporate America. In fact, according to Juniper Research, the number of employee-owned tablets and smartphones used in corporations will more than double by 2014. This means that in just one year, more than 350 million personal devices will be used in some sort of sanctioned way for work across the U.S. As clients and prospects approach Optimal asking for help in creating comprehensive and appropriate BYOD policies (stay tuned for tips on that next month), it has caused me to think about how this trend originated.

BYOD Grew From BlackBerry’s Decline

BlackBerry was the first device to captivate corporate America. It was the first line of devices designed for corporate—as opposed to personal—use. It dominated the market for a significant period of time because it was the only device that delivered email to your hip and allowed for it to be properly, centrally controlled. Business owners and IT teams were in love, and so were all the BlackBerry users who could be more productive. And then Apple revolutionized computing (once again) with the introduction of the iPhone and then the iPad. Several other manufacturers copied to gain market share and BlackBerry failed to innovate at the same pace. CEOs and business leaders were acquiring sophisticated smartphones and tablets—and they wanted them to integrate with their company’s network.

However, unlike with BlackBerry, there wasn’t one clear corporate device winner. Both the Apple and Android operating systems offered a collection of email, calendaring, and other applications, but no device stood out as more secure, easier to integrate, or a productivity enhancer. By default, and the decline of BlackBerry, BYOD is now the pervasive corporate mobile trend.

The Future of BYOD

BYOD will eventually run its course because, even if you have a strategic BYOD policy in place, data scatter across devices is still risky for corporations. Plus, to be able to actually accomplish work tasks at home and on the road, most employees need specific lines of business applications that currently run only on their office desktops. A tablet that can’t run these applications will never be as powerful in the long run as a mobile device that can (think “laptop”).

The Next Corporate Must-Have?

Which company will take BlackBerry’s former place as the preferred corporate device? Too soon to tell. Right now, there is no single device that has sufficiently enamored corporate America—but one will come. Businesses will only be flexible until there is a compelling reason to mandate a particular mobile technology. The Windows 8 Pro Surface tablet is coming to marketplace, and its draw is that it will be the first tablet to run mainstream corporate applications. Lenovo, along with many other tablet vendors, is also coming out with a tablet that will reportedly do the same things. Time will tell and, in the end, unlike with BYOD, the corporations—not the users—will decide. When the decision is made, there will once again be a clear corporate market share winner and BYOD policies will slowly decline.

Last Word

The origination of BYOD—and its pervasiveness in corporate America—has been a very interesting thing to witness. It has raised important questions regarding ownership, data security, and network integrity. It has forced IT teams across the country to analyze data and networks from a variety of perspectives in order to create comprehensive BYOD policies. But, unlike many of my colleagues, I don’t think it is here to stay. Ultimately, corporations are smart and will want to once again reign in the data scatter as soon as a clear corporate mobile device winner reveals itself in the marketplace. Stay tuned…the race to revolutionize the corporate mobile space like Blackberry did in the 1990s is on.

Confused? This e-mail address is being protected from spambots. You need JavaScript enabled to view it

Want more? This e-mail address is being protected from spambots. You need JavaScript enabled to view it

Want different? We’re game—and your topic might be covered in a future issue. This e-mail address is being protected from spambots. You need JavaScript enabled to view it .

If you want to receive an email every time there is a new Optimal Impact, click here.

0 Comments

More...

Page 1 of 8

Start
Prev
1
2
3
4
5
6
7
8
Next
End

Connect with Heinan Connect with David

What They Say

Optimal Impact

More...

Client Login