Blog

March 23rd, 2012

“Cybercrime”, “malware”, “hackers”. Three common buzzwords that have caused businesses untold amounts of lost profits, breached data and so on. As much as we would like to say that cybercrime is being eradicated, we can’t. It isn’t going to go away, but if you are aware of the common cybercrime trends, you can take steps to protect your business.

A quick Google search for “cybercrime trends” yields over 78 million results, the majority of which are likely to affect large enterprises or governments. While it is beneficial for all businesses to be aware of the major trends, there are a number of threats that will affect small businesses more than others. Here are some current cybercrime trends that SMEs should be aware of.

Mobile Malware Smartphones are becoming ever more popular, and with this popularity has come an exploding number of apps. Malware developers have been picking up on this during the past few years and there have been an expanding number of apps dedicated to attacking your phone or mobile platform. The most common type of malware on mobile devices is spyware, followed by SMS Trojans. SMS Trojans run in the background of some applications, and make international calls or text messages from the developers’ services causing huge phone bills. The final form of malware targets online payment apps on the phone.

One of the main reasons this form of malware has become so popular is due to the openness of some markets, such as the Android Market. The owners of the app markets are working to track down and get rid of the guilty apps on their marketplaces, but you still need to remain vigilant. while installing apps. Look at the developer of the app - how many times has it been downloaded? Maybe double check the app’s integrity online before installing and double check the app on the internet.

Open-Source Malware Kits A common thing malware developers do is write code for malware and then sell it to interested buyers. But a rising trend is that developers are writing malware that is open-source—any person can download and change it. The worrying thing is, many developers of already powerful malware have been releasing open-source versions of their software. This means that there will be an increase in the number of malware attacks out there, as devious developers can easily come up with more elaborate hacks.

Banking Trojans Along with the open-source malware kits, there has been an increase in the number of banking trojans—aimed at stealing account information and passwords. While these trojans have been a threat ever since banks first started offering online banking, they have become popular again as people and businesses are starting to move their online banking onto mobile devices, and the trojan software is easily accessible. This makes mobile banking apps an easy target.

With cybercrime on the increase, now is a good time to review your security, ensure its up to date and remind employees of your mobile device policy. If you don’t have a policy in place, or feel that your security is inadequate, give us a call, we are happy to help you. Remember: with good security and knowledge, there is no reason you should fall victim to cyber theft.

Published with permission from TechAdvisory.org. Source.

Bookmark and Share
March 23rd, 2012

It is safe to say that every company uses some form of Web browser. One of the most popular amongst all users is Firefox. It is particularly popular with businesses because it is free, and offers a incredibly wide variety of useful features, including plugins and add-ons. With the large amount of add-ons available, it can be a chore to pick the most useful. That’s where we come in.

At first look, Firefox is a fairly simple browser. Where it really shines though, is in the wealth of add-ons available for all users. If you were to compare different users’ browsers, it is highly doubtful they would look the same. There are some useful add-ons for small business users that can help make your life easier. Here are our top five:

Make Add-ons Compatible With New Versions of Firefox Firefox is on an aggressive update schedule. It feels like only a few weeks pass in between each new rollout, and this can pose a problem if the developers of the add-ons don’t keep their add-ons up to date. To solve this, install the Add-On Compatibility Reporter. This useful add-on will disable version checking, allowing the add-ons to continue working. If you have an add-on that won’t work, you can send a report to the developer. It is recommended that this is one of the first add-ons you install.

Speed Dial Speed Dial is an add-on that allows you to quickly access your favorite, or most visited sites. You set your bookmarks up to show via Speed Dial, which will show current thumbnails of the website. From there you can click on the thumbnail to go to the website. This is particularly useful if you have pages you visit on a regular basis and wish to navigate to them quickly.

OutWit Docs This add-on is for those managers who have a ton of documents on their computer and want to quickly find one without closing or minimizing Firefox. Think of having a version of Google for your docs - you enter a query into the search bar, and up comes the results with thumbnails so you can easily pick and open the document you were looking for.

Google Global An interesting add-on that allows you to see where your website, or any website for that matter, will show up according to the local Google page rankings. This is great for quickly viewing your presence in other regions or countries. However, this add-on will only work when on a Google search results page.

Screengrab If you are preparing a presentation or need to take a screenshot it can be a bit of a chore, especially on a Mac. With Screengrab you can take a screenshot of just the visible part of the browser or the whole page. This will save time from having to take multiple screenshots and then stitching the images together to gain one image.

These five apps are just the tip of the iceberg, there are many more on the Firefox Add-ons page. If you would like to know more about Firefox or other Web browsers, please contact us.

Published with permission from TechAdvisory.org. Source.

Bookmark and Share
March 21st, 2012

Many businesses have come to rely on both internal and external technology networks for day-to-day operations. If there is a problem with a network, a small business can lose more than just profit—with a large enough outage the business could go under. 24/7 networking can help prevent this from happening.

How can 24/7 network monitoring help your business, you ask? Through preventative operations. The main idea of network monitoring is to act as an “Early Warning System” to let managers and owners know of potential problems before they strike.

What Does Network Monitoring Monitor? There are a number of things you can monitor with Network Monitoring. The most popular areas include application and system performance, bandwidth usage, and server status. You can also set up monitoring of additional areas, for instance: server load, ink levels in printers, time left on software license agreements, which devices are connected to the network, their data usage, and more. This is all done 24/7.

The one thing Network Monitoring does not normally monitor is unauthorized access to networks. It can be set up to look for unauthorized access, but this is normally taken care of by another system.  

How Does Network Monitoring Help Me? Network Monitoring is a preventative system, intended to warn you about potential network problems so you can proactively seek solutions before a vital network goes down. This makes it, in a round-about way, a justifiable addition to business value since, when implemented right, there will be less network crashes—which means less or no profit loss.

What Should I Monitor? In an ideal world, you would monitor each and every network. Over time, you can get there, but if you’re like most Small Business owners or managers, you have neither the time nor the budget to implement a full system. As with most projects, it’s suggested that you implement a system like this in stages. The most common areas to start with are:

  • Local Area Network (LAN) Data
  • Internet data usage
  • server status
  • alerts to existing networks
If you’re unsure of where to start, try contacting a local Network Monitoring service, or hire a consultant to establish a system. If you would like to know more about 24/7 Network Monitoring, or other ways to improve business value, please contact us.
Published with permission from TechAdvisory.org. Source.

Bookmark and Share
March 19th, 2012

In the past Business Intelligence (BI) software and practices were limited to MNCs and large enterprises. With the growing number of SMEs, BI software and system developers have been turning out many useful products for SMEs. Is your company planning on implementing BI practices?

If you are looking into integrating Business Intelligence at your company, no matter what system you choose or the size of the project, there are a number of things you need to be aware of in order to make the implementation successful.

4 Things to Know before You Start Before you start any BI project, there are 4 key BI implementation areas that you and your company will need to be clear on:

  1. Data or Information: In most SMEs there is a limited amount of data available, so you need to be sure where all the relevant data is located. This typically includes client and employee information kept on accounting systems, spreadsheets or contact manager databases, sales or business reports, industry and competitor information, and more.
  2. Technology: A large number of BI programs require technical systems that are stable and have minimal downtime. It’s a good idea to ensure that your systems meet the requirements and are stable. As with any software, be sure to do your homework and pick a system that is reliable and compatible with your business. Don’t just pick the cheapest system – pick the system that best meets your needs.
  3. Knowledge: Many SMEs have employees that wear more than one hat, and as such may not be experts in any one thing. It’s important that, when implementing BI, you have employees who understand it and the related systems. If you don’t, there are many qualified BI consultants out there you can turn to for help and training.
  4. Communication: It’s crucial that you have constant communication with the employees involved in the implementation, and that you explain what BI is, the analytics used, how to interpret what the results mean, and the actions to take.
Your Criteria To Success Once you have picked a good system, there are a number of criteria you should aim for to ensure successful implementation:
  • Align Business and Technical: It’s important that the business side of your company knows about the implementation and will actually use it. Both sides need to work together to ensure an aligned team.
  • Piece by Piece: It’s a good idea to not implement BI across your whole organization in one go because that involves far too much work and complication. Instead, look at the areas of your organization that could benefit the most from BI and start there. For the majority of organizations, Customer Service and Sales are a good choice.
  • Ease of Use: Chances are, your employees do different jobs and won’t concentrate solely on BI. Therefore, you might want to pick or develop a system that is easy to use. As a benchmark, pick a sales or business manager and, if possible, a business analyst, and see how long it takes them to learn the system. The bigger the gap between the learning time of these employees, the harder the system is to use.
  • Flexibility: It’s common knowledge that your business is always changing. Therefore, It’s a good idea to ensure that the BI system you choose is flexible and can be quickly and easily adapted to meet changing needs. If you have a rigid system, it will be successful in the short term, but a nightmare or even a failure in the future.
With planning and patience, BI will bring about an improved business and bottom line. If you would like to learn more about BI or would like help implementing it please contact us.
Published with permission from TechAdvisory.org. Source.

Bookmark and Share
March 14th, 2012

One of the enemies of the IT department is the hacker. Hackers have always been a problem and continue to keep IT staff on their feet, and now there is a new hack out there that goes after your business’s banking information. Be aware that this hack is one of the most ingenious hacks to date and could cause widespread problems for your business.

The hack, a variation of the Man-in-the-browser (MITB) hack, is a form of Trojan horse that mainly infects a Web browser and has the ability to change a Web page, insert orders or transactions covertly. The user will not notice any change to the website. This particular hack infects user’s computers with a Shylock malware program, a new form of malware that focuses on bank accounts and financial transactions.

The user goes to a banking website, attempts to log in and is given an error message stating that security checks are being undertaken. After a few minutes a window pops up telling the user that a representative from the bank will be contacting them to go over their account details. A chat window will open up and the “representative”, who is really the hacker, will ask the user for their account information. While the user and hacker are talking, the hacker will log into the account and proceed to go to town, so to speak.

At this time, it seems like the hack is not widespread, but it is spreading, and it is one of the more sophisticated programs out there. To learn more about this or any other security threat that may have you worried, please contact us.

Published with permission from TechAdvisory.org. Source.

Bookmark and Share
March 10th, 2012

In the past few years there have been a large number of natural disasters causing untold amounts of damage, setting many companies back years if not decades. There isn’t much we can do to avoid these disasters, but we can be prepared for them. Is your company prepared?

Most companies have at least basic protection from emergencies and disasters in place. The most common forms of protection are insurance, server and computer backup, and basic preparations as required by law. While these protective measures are considered adequate for most companies, there is still a chance a disaster will strike, leaving your company in the lurch.

In the recent months and years an increasing number of occurrences, such as the earthquake in Japan and flooding in Thailand, have caused widespread disruption to businesses. To counter this, two business initiatives have risen to the forefront: Disaster Recovery (DR) and Business Continuity Planning (BCP). In fact, these two terms have become common buzzwords, a quick internet search returns over 53 million hits on business continuity alone. The problem is that many professionals are unclear on what each really is. It’s important to be clear on each topic and the basic steps to take to be prepared for any disaster.

What is a Business Continuity Plan (BCP)? BCP, first seen during the Y2K scare of the late 90s, is a plan that covers the way an organization prepares for and maintains all critical business functions. BC planning is comprised of activities that ensure maintenance, stability, and recoverability of service before, during, and after a disaster. The plan is typically set up on a day-to-day basis, and covers the whole organization.

It’s important to have a BCP for your organization because if something happens and you can’t deliver to your customers, they will go to another company.

What is Disaster Recovery? Disaster Recovery is considered a part of the overall continuity plan that focuses on the technical side of the business, including components such as data backup and recovery. Think of BCP as an umbrella and DR is under the umbrella — if you don’t have a disaster recovery plan, the overall umbrella is more or less useless.

What Should be in Your DR and BCP Plans? These plans both share a number of similarities, generally following the same steps involving the same elements. Both plans should include:

  1. An operational plan for a number of disasters that could happen in your geographical area. The plans should cover occurrences as small as computer hardware errors and as large as massive natural disasters.
  2. A succession plan for you or your top management.
  3. Training for substitute employees on important tasks.
  4. Cross training of your employees on the basics of different roles so they will be able to take over if need be.
  5. A communication plan focused on different crises, including ways of communicating if networks are down.
  6. Off-site meeting places for staff and managers.
  7. A focus on safety. Foster partnerships and communication with local and emergency response services: Fire, Police, National Guard, Search and Rescue. Ideally, all employees should at least know basic first aid. If you have employees who are volunteer members of local Emergency Response Services, ask them to be responsible for teams.
  8. Daily plans to backup your Enterprise systems, along with training and testing of recovery of systems.
  9. Training and testing of all employees to practice recovery activities in situations as realistic as possible.
It’s important that you conduct regular tests of your systems and processes, and make changes as needed. Be aware that your business is always changing and so should your Business Continuity and Disaster Recover Plans.

With a carefully prepared and practiced plan, your business should be ready to face a variety of disasters with minimal downtime. If you would like to know more about Business Continuity and Disaster Recovery please contact us.

Published with permission from TechAdvisory.org. Source.

Bookmark and Share
March 10th, 2012

“Projects” is a buzzword known by nearly all people in your business. It does not matter if you are a small one-man operation or a larger company - all companies will have projects to be completed. If a company cannot follow through on projects, it will not be around for long. Many business owners and managers see themselves as expert project managers. But are you?

How many times have you started a project only to have it spiral out of control? Mistakes, delays, and other problems can be costly - both to you and your company. Here are some common reasons projects fail, and ideas to be aware of before you start your next big project.

No plan Possibly the biggest mistake any company can make is to not have a plan. A project without a plan is like a football team without a quarterback - it just won’t work. The most common plan used by businesses is a “project plan”: a plan that outlines your final goal, your plan to get there, and what resources are needed along the way. It is a good idea to involve all project team contributors in the planning phase. This will help encourage your team to stay on track.

Unrealistic budget An equally important mistake to avoid is having an unrealistic budget. All managers know they have to set and stick with a budget. However, few managers really know how to set a proper budget, and many projects end up being over budget. The easiest things you can do are:

  • Determine the knowable costs. These can include software, parts, wages, fixed costs, etc. Be sure to include costs like shipping and tools needed for the project.
  • Consider different parts of the project separately. Try to think which are more likely to have problems. Budget an extra percentage of the total costs based on how risky that aspect is.
  • Look at budgets from similar past projects. These will help you judge whether you are on the right track.
Poorly defined expectations Many projects suffer from members not really understanding the expected outcome of efforts made. This could cause a decrease in morale among your employees. It’s best to review and update goals regularly, and tweak the scope or timelines as progress is made. It’s also equally important to involve employees in this process.

Scope creep While some change in the focus of the project can be good, beware of scope creep - uncontrolled or big changes to the original plan of the project. This can happen when the extent of the project is not properly defined or controlled. It is important that you clearly define the scope of the project with both yourself and your employees, and try to make as few changes as possible.

Poor communication This cannot be stressed enough: communication is very important. Many projects fail due to lack of good communication and interaction between the parties involved. We recommend that you stay in constant contact with all parties to ensure understanding of the project. Encourage an open communication environment where any employee can talk about anything and suggest ideas.

With good communication, a clear focus on the project and a solid plan your next IT project is on its way to be a successful one. For more information on project planning, please contact us.

Published with permission from TechAdvisory.org. Source.

Bookmark and Share
March 10th, 2012

Many companies take security very seriously. The security of a company's technology has become major news in the past few years, with numerous companies having data exposed. Recently, the tides turned slightly — Google was caught bypassing the security settings of Safari, the default browser used by Apple’s products.

As many news sources are reporting, Google was discovered to have bypassed the security settings of Apple’s default browser, Safari. If you are to believe the many news articles, what Google has done is a big issue. But what did Google actually do, and how does this affect your business?

What Did Google Do? Google was caught using software to trick Safari’s security settings into allowing third-party cookies. The cookies placed by Google were used to track users’ internet behavior with the idea of providing personalized ads targeted to the users. Google stressed that no personal data was recorded.

Why would Google do this? Safari is set up to block all third-party cookies — cookies usually used by advertisers placed on a user’s hard drive that don’t have the same URL the user is looking at. Since the majority of Google’s ad services don’t operate under the Google URL, Google needs to use third-party cookies to track users. In other browsers, when a user signs into a Google Account, third-party cookies used by Google’s ad services are automatically placed. With Safari, the cookies are automatically blocked.

To get around the established security, Google took advantage of a known loophole found in 2010 by putting a form in some pages that tricked Safari into thinking the user had agreed to let Google’s Ad services track them.

What Does this Mean to Us? In all honesty, not very much. Google has said that they are removing the forms from the websites and cookies from the browsers. Apple has said they are working to stop all third party cookies, but no updates have been released as of March 1.

What Can We Do? To ensure that third party cookies are blocked in Safari, go to:

  1. Safari - Preferences, or hit "Command" + ","
  2. Select Privacy
  3. Select which level of cookies you would like to block
You can also set your browser to never allow cookies. The downside to this is you will find yourself having to log into a site each time you go to it in a new window. Another strategy is to clear your cookies regularly. In the same tab you set your cookie preferences, select: Remove All Website Data

If you would like to learn more about protecting your organization, or if you have questions, please contact us.

Published with permission from TechAdvisory.org. Source.

Bookmark and Share
February 29th, 2012

On February 29, 2012 Microsoft will launch a Customer Preview of its new Operating System, Windows 8. The Customer Preview, commonly called a Beta, is a pre-release product aimed to let Windows users test and learn the operating system before the release of the retail version, scheduled for late 2012. The OS has been driving lots of interest and businesses are eager to get their hands it. But the big question is, what features does it have that will help my business?

Windows To Go Windows To Go is a new feature aimed specifically at businesses. It will allow Windows 8 to be placed onto a USB drive and run from the USB on any computer with a USB port. This is great for Small Businesses as they will be able to save costs, and managers and employees will be able to use the OS anywhere.

No need to update your hardware It seems, to many businesses’ dismay, that whenever a new OS is released the hardware to run it needs to be upgraded. This can be costly, especially with the rate that new OSs are released. With Windows 8, users will not need to update their hardware if they have systems that can run Windows 7. This should bring about great cost savings to any business that wants to upgrade.

Cross Platform Integration with Mobile Phones and Tablets Windows 8 will run on tablets and phones, allowing for users to choose and use the system that works best for them. What this means is that Windows 8 on a tablet, phone, computer will look the same and be able to run or share the same programs, making cross platform integration easy.

Sync to the cloud Microsoft recently released their take on cloud integration, SkyDrive, which will work as a single drive for all Windows devices. Users will have all their files in one place and will be able to access them from any Windows device.

These features will be a great help for businesses, but businesses eager to join the Customer Preview should be aware that this Windows 8 will only be a beta and is not the finished product as such, there will be bugs and some software incompatibilities. If you would like to know upgrade, or know more about Windows 8 and other Microsoft programs please contact us.

Published with permission from TechAdvisory.org. Source.

Bookmark and Share
February 20th, 2012

Heard of BYOD, or "bring your own device", to work before? More and more companies are letting or even asking their employees to bring their phones or laptops to work. There are obvious benefits, but also dangers that may not be as obvious. Read on to find out what they are.

You may have noticed more and more of your employees or colleagues bringing their own computing devices to work—be it their mobile phone, tablet, or laptop. Or perhaps in your company or in other companies you may have seen, they have let people decide which device they prefer because they are used to it at home. You may not realize it, but this is all part of a large trend called the "consumerization" of IT, in which the influence of consumer technology is being increasingly felt in the workplace. With the wide availability of cheap but powerful mobile devices and online services, a growing number of people are being exposed to the latest technology at home first—adopting them at a rate faster than most businesses are able to manage. This flips on its head the old paradigm in which traditionally new technologies would be rolled out to businesses first, before they would find their way to consumers.

This trend, plus the increasing sophistication of young workers today and their frustration with the tools available to them at the office, is pushing some companies to adopt a "bring your own device" or BYOD policy at work. They are not alone. According to research by technology analyst group Gartner, end users, not the IT department, will soon be responsible for 50 percent of business IT procurement decisions—ultimately bringing and running their own systems on company networks. Meanwhile, according to management consultants Accenture, around one-third of today's younger generation of workers (a group called "millenials") not only wants to use the computer of their choice at work, but also wants control of the applications they use too.

The benefits companies cite to adopting a BYOD policy are many, among them:

  • Savings on capital expenses and training costs in using company equipment—compensating employees instead via other means such as flexible work hours, subsidized purchases, insurance, and other benefits.
  • Less management headache—effectively letting employees decide what to use releases the company from some overhead and management responsibilities.
  • Improved employee satisfaction—by giving employees the freedom to use devices and applications that they prefer.
However, before you consider letting employees bring their own personal technology to the work place, be aware that there are also disadvantages, and sometimes very real dangers in doing so. These include:
  • Non-standardization of hardware, operating systems, and applications. If your business operations require that some equipment is integrated with others, then BYOD can in the long run actually increase IT management costs and decrease efficiency.
  • Exposing your network to malware or security vulnerabilities and breaches. When your employees bring their own devices to work, you lose important control over their security. Consumer devices often don't employ comparable bullet-proof security technologies mandated by businesses.
  • Leakage of confidential or proprietary information. Employees will naturally do what they want with the data on their devices, even if it doesn't belong to them, or it's against company policies. Employees can also lose precious company data when they misplace or damage their personal devices.
  • Lower economies of scale in procurement. Essentially because everyone is buying devices on their own, you miss out on the chance to consolidate purchases and lower purchase costs for everybody.
Have you adopted a BYOD policy at work? Thinking about it? Worried about this trend? If you need to understand BYOD better so you can define a policy for your staff, contact us and see how we can help.
Published with permission from TechAdvisory.org. Source.

Bookmark and Share