Posts

computers in backup

4 Simple Data Loss Prevention Tips

As a business professional, you need to protect your data. Your clients and employees depend on you to keep their sensitive information safe, so data loss prevention is a key element of customer confidence. Luckily, there are ways to be proactive in protecting all your company’s valuable data. Here are four of our favorites:

Archive Files

It feels good to empty your recycle bin. Getting rid of an unneeded document means you’ve checked another project off your list. However, once a file has been permanently deleted, it can be nearly impossible to recover.

Good news. There’s an easy way to avoid the horrible, sinking feeling of being unable to find an important file: archive your documents instead of deleting them. Simply create an archive file on your server and put documents you’d usually send to the recycle bin here. Then, if you find yourself needing that one report from six months ago, it’ll be available for reference or compliance checks or even an account question. Not lost in oblivion.

Back It Up

As wonderful as technology is, it does grow old. You can’t always foresee a hard drive or server dying. Even if you take better care of your hardware than you do of yourself, you can’t always prevent a server’s demise. It can and often will fail without any advance notice.

But you can prevent data loss when your hardware kicks the can. That’s why it’s imperative to keep your sensitive information backed up in multiple places. Following the 3-2-1 backup rule is a good place to start. Have three copies of your data located on two different kinds of storage solutions with one stored offsite. Performing this kind of backup every couple of weeks is a good habit to establish. It also doesn’t hurt to be proactive and replace or upgrade your hard drives every few years.

Secure Your Network

In a world where “50% of small SMBs reported suffering at least one cyber attack in the last year,” it’s essential to make network security a top priority. Ransomware, malware, viruses, trojan horses, and the like are all potential data loss disasters waiting to happen.

As the saying goes, the best defense is a good offense. Establishing a rock-solid security strategy is critical in protecting your data from outside intruders looking to steal it. Installing data loss prevention software, establishing user role and policy management, encrypting your data, frequently updating your passwords, and setting up a strong firewall will help prevent your data from being lost, stolen or compromised.

Educate your Employees

Accidents happen. That’s a fact of life. In a hectic and mobile business environment, it’s important to be aware of the risks, learn from other’s mishaps and work together to prevent them from becoming your own.

According to a survey done by Haystax,“74% of organizations feel vulnerable to insider threats,” while “60% of companies felt that a lack of employee training and expertise were obstacles in managing these kinds of threats.”

The solution is simple: adopt protocols proven to reduce insider data leaks and train employees how to correctly follow them. Revisit this training periodically as a refresher, when new threats arise or when procedures change.

Threats to your data come from outside and within. It’s not always possible to avoid them, but these four guidelines will help you become proactive in their prevention. To learn more about protecting your data, contact us. We’d love to show you more ways to safeguard your company’s sensitive information.

secure mobile data

4 simple ways to secure mobile data when you’re on the go

Over the years, working on the go has become the norm for business professionals everywhere. But at this point, it’s more than just the norm … it’s critical to success.

If your team isn’t mobile, then everything from productivity and employee morale to customer service and efficiency will suffer.

And ultimately, this suffering will only hurt your competitive edge and damage your company’s reputation.

This being said, mobility doesn’t come free of risk. In fact, the more mobile you are, the more at risk you are of data loss, security breaches, and cyber threats. Which means you have a major dilemma on your hands.

So naturally, the question becomes: How can you successfully secure mobile data when you’re on the move?  

Let’s break it down, shall we?

Lock thy device

First and foremost, lock your devices. And this doesn’t just mean your cell phone. This includes your tablet, laptop, and yes … even your home computer.

No device should ever be left wide-open, and no passerby should ever have the ability to open your device and immediately start snooping. You must make it as hard as possible for criminals to get into your devices — because remember: the easier it is to get into your devices, the easier it is for criminals to snatch your mobile data.

However, just because logging into your computer might feel significantly different than logging into your online banking account or email, this doesn’t mean you should drop traditional password-building strategies.

While your phone or tablet may have limitations, your computer and laptop usually don’t. Keep these passwords just as strong as any other password you would create.

Public vs. Private

Unfortunately for every coffee shop-loving person out there, public connections aren’t always the safest things on the Wi-Fi block. In fact, there is such a thing as a fake Wi-Fi hotspot. If you hop onto a connection like this, you might be infected with a nasty virus.

Or worse … a criminal may have the ability to track everything you type and everywhere you go. And if you’re worried about the security of your mobile data, then this is one thing you should probably avoid.

If connecting to public Wi-Fi can’t be avoided, just make sure you aren’t accessing anything sensitive. And keep in mind, this doesn’t just involve sensitive business data … this should also account for personal messages, banking information, and things of that nature.  

2FA is where it’s at

Wherever possible, consider using 2FA for your online accounts (otherwise known as two-factor authentication, two-step authentication, or multi-factor authentication). 2FA is especially critical for apps or sites that directly (or even indirectly) include banking, health, legal, or communication information.

2FA is typically very simple to implement, and the added security it provides makes the “second factor” worth it. This second step may include an email asking you to verify the login (which may only be sent to you if it’s an unrecognized browser) or it could be a password and a security question.

Usually, 2FA involves: something you know (like a password or question), something you have (like an email or text message), or something you are (like a fingerprint).

An expert knows best

That’s right. You can’t do everything alone — especially when it comes to business security.

These days, the majority of Managed Service Providers offer some form of on-the-go data protection. They can help you manage mobile devices or provide your company with a business-grade solution for file-sharing.  

Adding features like these to your traditional security solution can mean the difference between a completely secure business and one littered with vulnerabilities and holes.

These tips are only just the beginning. Securing your on-the-go data requires dedication and an ever-evolving security solution. If you’d like to learn more about securing your mobile data, then give us a call or send us a message today. We’d love to chat.

CompTIA Report on IT Security

Staying Ahead of Cyber Attacks

Technology is a giant juggernaut ameba growing and evolving at an exponential and unstoppable rate. Trying to keep up with just everyday tech can be overwhelming. What iPhone number are we on now? And what exactly is a ChromeBook, anyway? Keeping up with the Joneses is one thing; staying up to date with and ahead of cyber attacks is a monster all its own. It seems like every week another company makes national headlines for falling victim to a cyber attack. Yours doesn’t have to be one of them.

Stay Proactive

Cybercriminals are always learning, adapting, and evolving new ways of cracking cybersecurity. Staying proactive with your approach to cybersecurity is the first step towards getting ahead of potential cyber attacks. Fortunately, Cognoscape can help you take an active approach to security. We can help you create a Technology Roadmap to plan for the future and stay ahead of whatever those pesky hackers think of next. We can help train you and your employees on how you can strengthen your daily workflow and what precautions you can be taking with each email and keystroke.

Use the Buddy System

If the Joker stepped into your server room and started tinkering around, you wouldn’t go in there alone. You would light up the bat-signal to call Batman. Don’t face cyber attacks alone. Buddy up with a Cognoscape consultant. Our consultants have years of experience staying up to date and ahead of the technology driving cyber attacks. You will be able to focus on the core of your business, while we race ahead of the latest cybercriminal technology to protect your company’s most precious digital assets. Your consultant will be there by your side to help create a custom strategy on how to best fend off and recover from whatever comes your way.

Don’t risk your company’s future by tackling your network security alone. Contact us today to start putting together your Technology Roadmap.

 

 

Data Loss Can Cause You To Shut Down

52Small and medium sized businesses today are relying more than ever on IT systems to efficiently run their business, support customers and optimize productivity. These systems house sensitive digital data ranging from employee and customer information, to internal emails, documents and financial records, sales orders and transaction histories. This is in addition to applications and programs critical to daily business functions and customer service.

While corporate-level data losses and insider theft are well publicized, many smaller businesses have also become casualties of data loss and theft. Following a significant data loss, it is estimated that a small-to-medium sized business can lose up to 25% in daily revenue by the end of the first week. Projected lost daily revenue increases to 40% one month into a major data loss.

According to The National Archives & Records Administration in Washington, 93% of companies that have experienced data loss, coupled with prolonged downtime for ten or more days, have filed for bankruptcy within twelve months of the incident while 50% wasted no time and filed for bankruptcy immediately. Finally, 43% of companies with no data recovery and business continuity plan actually go out of business following a major data loss.

Still, a survey conducted by Symantec SMB revealed that fewer than half of SMBs surveyed backup their data each week. Only 23% of those surveyed said they backup data every day and have a business continuity plan in place.

Businesses play on a much bigger playing field than they did two decades ago. Any disruptive technological event – even the smallest of incidents – can have an amplified impact on day-to-day business and profitability. Being proactive with data recovery solutions, and having emergency response procedures in place prior to a disruption or data disaster, is the only way to minimize downtime and soften the impact of such events. CLICK HERE for a free network assessment.

Just Because You’re Not a Big Target, Doesn’t Mean You’re Safe

69Not too long ago, the New York Times’ website experienced a well-publicized attack, which raises the question – how can this happen to such a world-renowned corporation? If this can happen to the New York Times, what does this bode for the security of a small company’s website? What’s to stop someone from sending visitors of your site to an adult site or something equally offensive?

The short answer to that question is nothing. In the New York Times’ attack, the attackers changed the newspapers’ Domain Name System (DNS) records to send visitors to a Syrian website. The same type of thing can very well happen to your business website. For a clearer perspective, let’s get into the specifics of the attack and explain what DNS is.

The perpetrators of the New York Times’ attack targeted the site’s Internet DNS records. To better understand this, know that computers communicate in numbers, whereas we speak in letters. In order for us to have an easy-to-remember destination like nytimes.com, the IP address must be converted to that particular URL through DNS.

Therefore, no matter how big or small a company’s online presence is, every website is vulnerable to the same DNS hacking as the New York Times’ site. The good news is the websites of smaller companies or organizations fly under the radar and rarely targeted.  Larger targets like the New York Times, or LinkedIn, which was recently redirected to a domain sales page, are more likely targets.

For now… There is no reason to panic and prioritize securing DNS over other things right now. But there is a belief that DNS vulnerability will be something cybercriminals pick on more often down the road. Here are a few ways to stay safe:

Select a Registrar with a Solid Reputation for Security

Chances are, you purchased your domain name through a reputable registrar like GoDaddy, Bluehost, 1&1, or Dreamhost. Obviously, you need to create a strong password for when you log into the registrar to manage your site’s files. Nonetheless, recent DNS attacks are concerning because they’re far more than the average password hack.

It was actually the security of the registrars themselves that was compromised in recent attacks. The attackers were basically able to change any DNS record in that registrar’s directory. What’s particularly frightening is the registrars attacked had solid reputations. The New York Times, along with sites like Twitter and the Huffington Post, is registered with Melbourne IT. LinkedIn, Craigslist and US Airways are registered with Network Solutions. Both had been believed to be secure.

So what else can be done?

Set Up a Registry Lock & Inquire About Other Optional Security

A registry lock makes it difficult for anyone to make even the most mundane changes to your registrar account without manual intervention by a staff registrar. This likely comes at an additional cost and not every domain registrar has it available.

Ask your registrar about registry locking and other additional security measures like two factor authentication, which requires another verifying factor in addition to your login and password, or IP address dependent logins, which limits access to your account from anywhere outside of one particular IP address.

While adding any of these extra safeguards will limit your ability to make easy account change or access your files from remote locations, it may be a worthwhile price to pay.

CLICK HERE for a free network assessment and avoid cybercrime with Cognoscape.

2 Steps to Ensure Healthcare Data Availability in the Cloud

66In 2013, major companies like Google, Amazon, and Microsoft experienced outages. Not only were these big name outages disruptive to users, but they also made headlines and proved to be costly to each brand. Google’s hiccup footed an estimated bill of $500,000 while Amazon’s 30-40 minute blackout contributed to roughly $3 million in losses.

2013 was also the year the healthcare industry embraced cloud computing thanks to modifications to the HIPAA Privacy, Security, Enforcement and Breach Rules. With these modifications extending the definition of a Business Associated (BA) to cloud service providers, many of the data breach concerns that had previously kept the healthcare sector from taking to the cloud have been quieted.

But as more patient health data is electronic and residing in a virtual environment, the availability of this data is just as important, if not more important, than securing it. Unlike Google, Amazon, and Microsoft, the disastrous effects of data outages in the healthcare sector can have potentially deadly consequences.

Not only is high uptime mandatory in a healthcare cloud, business continuity and disaster recovery (BCDR) plans are also crucial. The good news is the cloud’s virtualized infrastructure, coupled with the expertise and cloud monitoring of a trusted Managed Service Provider (MSP) can help healthcare organizations maintain uptime and reliability. Here are two helpful steps:

  1. Risk Assessments Are Absolutely Necessary

While risk assessments are critical to protecting patient health information, a 2012 audit conducted by the Office of Civil Rights revealed that many healthcare entities and contracted service providers fail to perform them. These evaluations must be conducted regularly and require an honest assessment of probable risks ranging from malicious cybercrime attacks to acts of nature such as natural disasters, flood, earthquakes and power outages. Analyze both the architectural vulnerabilities relative to data availability and security as well as the effectiveness of the counteractive measures in place. The goal is to minimize the plausible impact of such an event and prevent service disruption.

 

  1. Proactively Monitor for Cybercrime

It is often months before a security breach is detected. By this time, hackers have had ample time to infiltrate your system and feast on its data. Since cybercriminals use an unpredictable array of methods to strike, such as viruses, malware and phishing schemes to steal credentials, the strength of your detection system is key. Alerts should be set up to identify anomalies such as unusual application requests, forced entry attempts, suspicious spikes in traffic, and abnormal data patterns that suggest a breach. The proactive monitoring tools available through a MSP can help scan, pinpoint, and remediate such attacks.

Any BCDR plan must be built upon your organization’s recovery time objective (RTO) and recovery point objective (RPO). Your RTO is the duration of time in which your service level must be restored to avoid dire consequences. Your RPO is the maximum age of the recoverable files in storage to resume normal operations. A MSP can help determine the optimal scenario for your healthcare organization and prioritize the most critical health care information with near real-time replication.

Through this preparation and foresight, your organization can lay the groundwork to not only protect healthcare information in the cloud but potentially save patients’ lives in the event of an unforeseen outage.

CLICK HERE for a  free network assessment.

What’s the Difference Between a Help Desk and NOC?

Inquiring SMBs Want to Know… What’s the Difference Between a Help Desk and NOC?

It’s no secret that any growing small-to-medium sized business must monitor and manage its business technology in the most 63cost-efficient way. The tricky part is figuring out how to do this without sacrificing the overall experience of the end- user. End-users can be clients and customers or employees. Both rely on the efficiency of a firm’s network, servers, and applications, and the availability of the company’s data center. Thanks to the evolution of managed services, it’s actually possible these days to reduce costs, which strengthens IT support and infrastructure. It’s just a matter optimally integrating all available resources.

 

IT’S A STAFFING CONUNDRUM FOR MOST SMBs

Most SMBs tend to be short staffed. This isn’t just another reference to the many SMBs with little to no onsite tech support. While that’s true, and problematic, it’s actually all operations that tend to be short staffed.

Small yet growing companies and organizations aren’t just short on tech support; it seems like even their administrative assistant needs an assistant to keep up. Customer support and sales teams are also overworked, and often hindered by having to understand and troubleshoot tech problems when they have no tech expertise whatsoever.

There is no, “Hold for a moment, Sir. I’m about to transfer you to our tech support team.” There is no tech support team.

This is where managed service providers (MSPs) step in to save the day. MSPs help SMBs better manage their technology to achieve greater ROI (Return-on-Investment). One way they do this is by augmenting a SMBs existing on-site staff with the remote support of a 24/7 Network Operations Center (NOC) and Help Desk.

WHAT’S THE DIFFERENCE BETWEEN A NOC AND A HELP DESK?

This question is asked a lot because it’s really not uncommon to see both referenced interchangeably, which leaves many to assume they are one in the same. They are not. Here is the easiest way to distinguish between the two.

NOC: Most of the work performed by a NOC focuses on the network and systems. The NOC can almost be viewed as a mission control center. They monitor and manage an IT network. A 24/7 NOC typically monitors the network and system security, performance, and backup processes.

Help Desk: The Help Desk is more customer-oriented. The Help Desk has interaction with the end-user, or someone representing the end-user, to directly respond and resolve technical problems as they arise. Customers or employees can typically reach the Help Desk by clicking a support icon, emailing them, or dialing a toll-free number.

DO THE HELP DESK AND NOC INTERACT? Although the NOC and Help Desk are different, they do work together, along with any in-house tech support, to provide cohesive tech solutions to end-users. The Help Desk typically has three tiers of support and may sometimes have to escalate tickets to the NOC for resolution. This open communication, and ease of escalation, improves the end-user experience and serves as a proactive cost-efficient approach to managing SMB technology.

CLICK HERE for a free network assessment.

Cognoscape at CompTIA Great Security Debate - is antivirus dead?

Is Antivirus Dead? Cognoscape at CompTIA’s Great Security Debate

Charles Tholen, Brian Dye, Chris Johnson, Dan Liutikas

Charles Tholen joins a panel of IT security experts to discuss antivirus software, bring-your-own-device (BYOD) and much more at CompTIA’s ChannelCon 2014 in Phoenix.

By Dan Kobialka | Talkin’ Cloud

Several IT security experts discussed antivirus software, bring-your-own-device (BYOD) and numerous solution provider concerns during “The Great Security Debate” at CompTIA‘s ChannelCon 2014 in Phoenix.

Panel members discussed a variety of IT security topics, including whether “antivirus is dead.”

Brian Dye, Symantec‘s (SYMC’s) senior vice president for information security, told The Wall Street Journal in May he believed “antivirus is dead” because it is no longer “a moneymaker in any way.”

Cognoscape CEO Charles Tholen compared antivirus solutions to “locks” because both provide security, but there are still questions about whether antivirus solutions and locks deliver sufficient protection.

“Antivirus solutions are still more like the locks on our house, but are the locks on this business really good enough?” Tholen asked attendees.

Tholen noted a risk mitigation strategy is important for businesses, yet this plan should only be one component of their overall IT strategy.

“A risk mitigation strategy around the risks of end users is not a real strategy; you have to look beyond the end users,” he said.

Bring-your-own-device (BYOD) also creates challenges for solution providers, especially since more employers are searching for ways to leverage cloud and mobile solutions.

Chris Johnson, CEO of healthcare IT provider Untangled Solutions, said mobile devices are like “panes of glass,” and businesses need to implement strategies to manage these devices.

“I look at devices like panes of glass … we just assume they will work without human interaction,” Johnson said. “For the most part, a mobile device involves turning it on and it works. That’s where the challenge is for businesses.”

BYOD may create new challenges for both solution providers and end users as well.

“There’s no question that end users have a lot of issues to deal with, [and] the question becomes what role the IT solution provider will play,” CompTIA Chief Legal Officer Dan Liutikas added.

Johnson said antivirus solutions and BYOD, however, can create opportunities, and he pointed out education is key for solution providers and end users to avoid security and compliance issues.

“Security and compliance is not a product; it’s a mix of products and services, it’s a moving target. That education point is so important,” Johnson said.

Is your Antivirus an appropriate “lock” for your business, or is it “Dead”? Click Here to request a security check by Cognoscape.

Keep Your IT Guy and Outsource IT Services Too

59Everyone in the office loves Eric. Sporting a different ironic t-shirt everyday, Eric is the one we call when technology spits in our face. Whether it’s a slow system, a bug that needs to be squashed, a website issue, or a crash that results in unexpected downtime and data loss, Eric is right there. Not only does he get to the bottom of any issue but he also rights the ship like he’s some sort of miracle-working captain who just happens to have a pretty wickedly funny Peter Griffin from Family Guy impersonation.

But business is growing and Eric is overworked. Eric has certain skills that you’d love to use to develop innovative applications and revenue-generating projects– but he’s too busy running around fixing things that break. Or he’s performing the most mundane and routine tasks day-in-and-day-out just to keep things secure and running smoothly.

You get a sense that Eric’s overburdened and he’s saddled with too many responsibilities. His demeanor has changed from pleasant to moody. He’s listening to angrier metal and punk music and you’re noticing cracks in his work. You fear Eric is being pulled in too many directions and the reliability of your server, network, and applications, as well as the integrity of your data, are all at risk.

Someone who has watched a bit too much of Donald Trump on The Apprentice might think Eric should be fired. We’re not going to fire Eric. But we’re also not going to hire a full-time salaried Robin to his Batman or Cheech to his Chong. We’re going to help Eric by exploiting IT automation and managed services to handle many of the monotonous tasks making Eric hate his job right now.

Let’s help Eric…..

  • Focus Primarily on Cost-Cutting and Revenue Increasing Projects: First things first, Eric has to realize that he can’t do everything himself. Where are his skills best used? Whether it’s processes that help drive down costs or ones with the potential to raise revenue, evaluate the projects in the queue and rank them by what impacts the bottom line the most. Once that’s done, look at the day-to-day processes designed to keep things running securely and efficiently. What can be off-loaded from Eric? Determine which of those tasks can be automated either through the cloud or managed services.
  • Take to the Cloud: Some IT people fear the cloud spells the end to their job security. Meanwhile, the cloud can actually help them take on a more prominent contributing role in the company’s success. The cloud should be seen as another tool that further eliminates the mundane yet necessary daily drudgery from their workday. Those who work WITH the cloud will find that they have more available time to take on more meaningful cost cutting or revenue generating projects.

Use a Managed Service Provider: Using outsourced managed services not only alleviates much of Eric’s pressure and stress, but also boosts productivity and gives the company a much improved ROI (Return-on-Investment) on their technology investment. While technology has gotten easier for the end user, it has become more complex on the backend with the advent of virtualization, cloud computing, and advanced infrastructure. Using an MSP gives Eric access to a trusted advisor, a 24/7 help desk, remote monitoring and management tools, mobile device management tools, and much better disaster recovery and business continuity solutions. All without the overhead that comes with hiring more help for Eric. MSPs offer a consistency to not just your end-user but also your main IT guy who will certainly appreciate the help.

CLICK HERE for a network assessment.

4 Steps To Improve SMB Data And Network Security

 TO STAY SECURE – A GOOD DEFENSE IS THE BEST OFFENSE

SMBs must understand that the time has come to get serious with their security. Sadly, many small businesses have a false sense of security. In the McAfee/ Office Depot joint survey of 1000 SMBs, over 66% were confident in the security of their data and devices despite admitting to obvious flaws.

Cybercrime is only one cause of compromised data. There are 3 primary causes of breached security at businesses according to the June 2013 Symantec Global Cost of a Data Breach study. Only 37% are attributed to malicious attacks. The remaining 64% are human error and technology errors.56

Data breaches aren’t always about bad people doing bad things. Many are the result of good employees making mistakes or of technology failure. SMBs don’t necessarily need a large budget or dozens of employees to adequately protect sensitive data. A secure environment is possible even on a SMBs budget. Here are a few steps to improving data and network security.

STEP 1

KNOW ALL DEVICES CONNECTING TO YOUR NETWORK

Keep a frequently updated list of every device that connects to your network. This inventory is especially important given today’s BYOD (Bring-Your-Own-Device) workplace where employees can access your network through several different devices. Knowing what these devices are and ensuring they’re all configured properly will optimize network security.

All it takes is a regularly scheduled review to add or remove any devices and affirm that every endpoint is secure. Much of thisprocess can be inexpensively automated through a Mobile Device Monitoring (MDM) tool. A MDM tool will approve or quarantine any new device accessing the network, enforce encryption settings if sensitive information is stored on such a device, and remotely locate, lock, and wipe company data from lost or stolen devices.

STEP 2

EDUCATE & TRAIN EMPLOYEES

57Every employee should participate in regular general awareness security training. This will not only reduce security breaches directly tied to employee error or negligence but also train employees to be on the defense against cybercrime. Employees are critical to your security success and the prevention of data breaches. Hackers commonly break into networks by taking advantage of unknowing employees. Phishing attacks – legitimate looking emails specifically crafted to mislead recipients into clicking a malicious link where they’re asked to provide their username and password – are still successfully used by hackers to capture login credentials.

If a large company makes the news for a data breach tied to an infected email, be sure to share that news with employees with a warning. Come up with fun ways to teach employees how to identify spear-phishing email attempts and better secure their systems and devices.

It is also important to have a security policy written for employees that clearly identifies the best practices for internal and remote workers. For example, password security is critical and passwords should be frequently updated to a combination of numbers, lower case letters and special characters that cannot be easily guessed. Security policy training should be integrated into any new employee orientation. This policy should be updated periodically. More important than anything, this security policy must be enforced to be effective.

STEP 3

PERFORM AN AUDIT OF SENSITIVE BUSINESS INFORMATION

If you want to keep your most sensitive business information secure, it’s important to know exactly where it’s stored. A detailed quarterly audit is recommended.

STEP 4

USE CLOUD AND MANAGED SERVICE PROVIDERS

Overall, the cloud is likely a more secure data solution for small business. Any conception that the cloud isn’t safe is outdated. Most of 2013’s security breaches were the result of lost or stolen devices, printed documents falling into the wrong hands, and employee errors leading to unintended disclosures. It’s fair to speculate that many of these breaches wouldn’t have occurred had this information been stored in the cloud rather than computers, laptops, and vulnerable servers.

SMBs with limited budgets are actually enhancing their security by moving to the cloud. Since there is no way a SMB can match a large enterprise’s internal services, moving services like emails, backups, and collaborative file sharing to the cloud not only reduces total-cost-of-ownership, but gives access to top-level security to better defend against internal and external threats.

Meanwhile, a Managed Service Provider (MSP) can assume responsibility for security measures like the administering of complex security devices, technical controls like firewalls, patching, antivirus software updates, intrusion-detection and log analysis systems.

MSPs are also capable of generating a branded risk report for any potential client or business partner reviewing your security measures. This third party manual assessment of your network security can instill confidence in prospective business partners by proving to them that any possible security risks or vulnerabilities will be properly managed and addressed.

CLICK HERE for a free network assessment.