Blog

5 Eye-Opening Data Breach Statistics

September 14, 2016 by admin

Security executives know cyber attacks can happen anywhere and at any time, threatening their companies’ data and putting customer and corporate information at risk for exposure. With the high risk of data breaches, security heads should know where their greatest vulnerabilities lie — whether through outside hackers or malicious insiders — and protect their data accordingly.

Here are five data breach statistics that might scare security heads into action:

Stat No. One: 91% of Businesses Are at Risk for Data Threats

Security professionals may be concerned about the results of a recent study. According to the 2016 Data Threat Report conducted by Vormetric that surveyed more than 1,100 global senior security executives, 91% of businesses are at risk for cyber-related threats. The report also revealed that 30% of companies are very or extremely vulnerable to data threats. A lack of preparedness combined with the growing number of cyber attacks can compound this problem.

Stat No. Two: 20 Million Records Exposed

One of the reasons a large portion of international businesses feel the pressure to improve their security is the rise of cyber attacks. In its latest study, the Identity Theft Resource Center recorded 584 breaches in which 20.5 million records were exposed. The majority of these records came from the healthcare field. The next most vulnerable category was the government/military sector, with 27.5% of records breached.

Stat No. Three: Majority of Companies Store Sensitive Data in the Cloud

With the increase in cyber attacks around the world, it is no wonder that confidential information is even more at risk for data breaches. The Vormetric report showed 85% of surveyed companies use sensitive data in cloud environments, with 53% also utilizing sensitive data in Software as a Service (SaaS) environments.

While investing in SaaS is a big part of many companies’ cost-saving strategies, storing valuable information in the cloud or on third-party servers could expose it to unknown cyber threats.

Stat No. Four: 93% of Data Breaches Only Take Minutes to Happen

The 2016 Data Breach Investigations Report by Verizon highlighted a major issue with data breaches: They can be quick yet devastating, especially if security professionals are unaware the attack happened. The Verizon report noted that while 93% of data breaches only took minutes to occur, four in five victims did not know their systems were compromised for weeks or even longer.

Stat. No. Five: The Average Cost of Data a Breach Is $4 Million

According to the IBM Security and Ponemon Institute 2016 Cost of Data Breach Study, the average cost of an incident rose 29% in three years. The total cost is now $4 million per breach with the average cost per record exposed reaching $158.

The concern surrounding cyber threats should motivate company leaders to invest in the tools and resources necessary to effectively protect their most sensitive data.

Site-to-Site VPN or Remote Access VPN: What’s Better for VoIP?

August 24, 2016 by admin

While Voice over Internet Protocol (VoIP) has exploded in popularity over the years for its low-cost communications and ease of use, VoIP users still have many challenges ahead. These include guarding against security risks and optimizing their connection speeds to get the best call quality possible, which is why many users are turning to virtual private networks (VPNs).

Why use VPNs for VoIP?

To go on the Internet and connect to customers and other partners, VoIP users often choose the popular option of a VPN to protect their privacy. Not only do VPNs offer a reliable online connection, but they also bolster security for calls that are at risk for breaches that could put customer or corporate information in danger.

In 2015, IT news site CRN reported a data breach at a major tech firm that exposed 70 million records ranging from December 2011 to spring 2014. The breach could have compromised 14,000 phone records. This wide-reaching data breach is evidence of the risk that unencrypted calls have for VoIP users.

VPNs give companies the added assurance that their voice or video calls will be encrypted and safe from outsiders trying to listen in. Knowing the advantages of VPN to facilitate VoIP communications, IT managers face the difficult choice between remote access VPN or site-to-site VPN for their business operations.

Site-to-site VPN or remote access VPN: What’s better for VoIP?

Site-to-site VPN

Site-to-site VPN is defined as connecting networks from one office location to networks at another location. This is a great solution to secure information for companies with separate branches or locations spread throughout a region, as it still behaves as a private connection. Employees can easily share their tech sources with another, making use of a company’s assets in a more productive way.

Remote Access VPN

Remote access VPN allows individuals employed by the company to connect to the firm’s private networks through a laptop or desktop device. Remote access VPNs are a good match for companies that have employees working from home or traveling for work and require access to the company’s network or servers in order to make calls or perform video chats. IT managers should ensure that these remote employees have the client software necessary to connect to private business networks.

Security

Both site-to-site VPN and remote access VPN use encryption to protect information. The difference between the two is that remote access VPN involves the VPN gateway decrypting data as it communicates information to the host inside a company’s private network.

Equipment

Although remote access VPN and site-to-site VPN have differences, IT managers can still set up much of the same equipment and software to operate either option. However, site-to-site VPN does not require installing client software, unlike remote access VPN.

Whether IT managers choose remote access VPN or site-to-site VPN for their business, they should look at what their organization and employees need for better security.24

5 Major Considerations for a Disaster Recovery Plan

August 17, 2016 by admin

Imagine a powerful storm results in power outages and damages to a particular region. With businesses at risk for downtime that could cost them in productivity and revenue, IT managers must develop a disaster recovery plan that minimizes risk of data and profit losses.

Disasters can happen at any time, with each hour of downtime potentially costing thousands. According to cloud software firm Infrascale, small companies may lose $8,000 per hour of downtime, mid-size companies could lose $74,000 per hour, and large enterprises can see profits drop as much as $700,000.

To prevent devastating business losses, here are five considerations for creating a solid disaster recovery plan:

1. What staff or resources are needed to keep operations running after a disaster?

In the event of an emergency, IT managers should have a list of staff tasked with data recovery and other similar duties to get systems back up and running. Not only do managers need to know the number of users to support throughout the recovery process, but they should also be aware of the resources or devices required to keep the company operational. These include storage, desktops, and other solutions.

2. Are there backups in place in case power or other connections go down?

To prepare for a power outage or other disaster, IT managers should focus on redundancy, such as having Ethernet connections available in case wireless services go down. The negative impact of a disaster can be exacerbated by low connection speeds, so plan accordingly.

3. How will the data center handle disaster?

In addition to making sure in-house devices and systems are ready for disasters, IT managers must have oversight over their data centers. Whether data centers are owned by companies themselves or operated through a third party, managers must communicate with these centers so they are prepared using their own available resources and staff.

4. Is the plan tested and maintained?

Having an emergency strategy in place is a good first step, but it should be tested among systems and personnel to make sure things go according to plan when disaster strikes. Consider virtual testing of the plan or developing shadow users to see how prepared the business is for emergencies. Furthermore, focus on maintaining the plan by having the right resources and staff at the ready at all times.

5. Is the plan documented in detail?

A plan is of little use if it’s not written down and distributed among all necessary staff and executives. Think of it like a trouble shooting guide with various scenarios spelled out depending on the department. Write down the steps toward disaster recovery and ensure personnel know their roles in in the event of incidents described in the plan.

It is critical for IT managers to prepare for a disaster based on resource requirements, organization size, and other specifications.

5 Events That Could Disrupt Business Continuity

August 10, 2016 by admin

Business owners and managers know that it only takes one emergency to cause havoc in their day-to-day operations. But what if these changes last for days or even months, and cause the organization to come to a halt? With these risks in mind, managers must be prepared for disruptions that will affect business functions, such as security breaches and infrastructure updates.

To prevent interruptions that could jeopardize operations and revenue, companies should focus on business continuity planning — a crucial step to avoid downtime. Following are five changes and events that could impede business continuity, and how to prepare for them.

1. Infrastructure, System, or Device Updates

Whenever there is a new update, whether it affects the company’s infrastructure or just select devices, downtime is likely to happen. As part of a business continuity plan, organizations should ensure that updates are properly installed or integrated within existing systems and devices. In addition, managers should inform employees of these updates or even train them ahead of time. If not, upgrades could lead to more downtime than necessary.

2. Compliance and Regulation Changes

Due to shifting industry regulations, companies may experience downtime as they update their systems as mentioned above. Be aware of regulations regarding management or protection of corporate or customer data when using cloud-based applications or services. Managers should understand how any regulatory changes could affect their current continuity plan.

3. Data Breaches and Security Risks

One of the most devastating kinds of business disruptions is the dreaded data breach. Security breaches of personal, financial, or other types of data can ruin a company’s reputation, rack up data breach investigation and remediation costs, and compromise critical business systems. According to the 2016 Cost of Data Breach Study by Ponemon Institute and IBM, the total cost of a data breach can reach $4 million. Managers should include comprehensive procedures in business continuity plans that list the resources and personnel involved and what to do in the event of a data breach or cyberattack.

4. Company Tech Policy Adjustments

Technology constantly changes the way companies oversee business operations. Organizations should set firm guidelines on how employees deal with social media, as well as with regard to whether they can use their personal devices for business. Keep in mind that there may be extra training involved in any policy modifications.

5. Unexpected Disasters

A wide-reaching disaster can affect a company for a short period of time, but has the potential to lead to complete shutdown if a business is unprepared. Companies should have steps in place to handle unexpected disasters such as power outages, weather-related emergencies, and other causes of downtime.

The Biggest Threats to Private WAN

August 3, 2016 by admin

Not too long ago, private wide area networks (WANs) were considered revolutionary technology that changed the way organizations communicated. But just as the technology displaced its predecessors, private WANs now face being overtaken by newer technologies, including mobility and the cloud.

It’s difficult to say what the future of private WAN is — or if it even has a future. To make any predictions, it is important to first understand the threats private WANs face from competing technologies.

Threats

Smartphones represent one of the biggest challenges for private WANs in today’s environment. Worldwide, nearly 350 million smartphones were sold in the first quarter of 2016, according to research by Gartner. That figure eclipses PC sales for the entire 2015 year, which Gartner said totaled just 289 million.

It seems that smartphones will dominate the future of networking, and service providers will focus their network designs primarily on smartphones rather than PCs.

In addition to changing the networking landscape, smartphones have dramatically accelerated the pace of technology and equipment upgrades. Devices turn over in a matter of a couple of years, whereas it sometimes takes decades to adopt new technologies in the enterprise IT space.

Another significant challenge to the private WAN is the cloud. Applications previously housed on corporate networks are increasingly being shifted to cloud services, and new cloud applications are emerging constantly. This is eating into the domain previously dominated by WANs.

Challenges

Private WANs should deliver four fundamental functions, but are falling short in some cases.

Superior reliability. Networks need to be reliable to be valuable. In reality, private WANs are often unreliable because of lags in repair times and ineffective support.
Predictability. Private WAN users should know what they are getting when they use the network. But often private WANs employ shared backbones that can result in unpredictable performance.
Simplicity. Private WANs should be simple in terms of predictability of response time and bandwidth. However, users often have little choice in managing the complexity of the network.
Good security. Because private WANs are not shared or public, users expect a high degree of security. But a lack of guarantees, audits, and certifications has led to a breakdown in security or the perception of security.

The Cost Factor

As in many cases where a user must weigh the pros and cons of one technology over another, cost is a major factor. Currently, private networks are much more expensive than shared options — as much as 10 times more expensive by some estimates. Unless this price disparity changes, corporate networks are wise to consider the Internet as a viable option to replace private WANs.

What’s Next?

A large part of the reason private WANs face an uphill battle is that they no longer effectively serve users where they are. The increase in mobile usage as well as the cloud has turned static, physical work spaces into relics in many cases. People need access to their network wherever they are, not just while they are sitting behind a desk working on a PC.

Companies that are thinking about whether the Internet makes sense for their networking needs should begin taking steps now to prepare for that transition.

Choosing an Internet Connection: Copper, Fiber, or Wireless

July 27, 2016 by admin

Technology continues to improve and expand with incredible speed, and the Internet is a big part of that. Many businesses have come to rely on being online and able to do things like stream HD videos and video conference with teammates and clients. However, these common business needs all consume bandwidth, and slow speeds can impact sales, efficiency, and productivity. Following are three ways to connect to the Internet, each with their own pros and cons.

Copper

Copper is the original way to wire, dating back before the Internet to the telephone. Intended for the transmission of voice, it doesn’t have much bandwidth, but it is more cost efficient for rural businesses. Because most buildings are already wired for the telephone, smaller businesses don’t need to buy new cabling.

Fiber Optics

Fiber optics was introduced in the 1970s, became more popular by the mid-80s, and came to prominence through the 90s. It offers a number of advantages over copper cabling, including:

Faster transmission
Less signal loss without the use of repeaters or boosters
No electromagnetic interference
Sturdier than copper

Wireless

There is a newer option that’s gaining prominence in the business world: a wireless Internet connection. Although networks are still being built to bring wireless to rural areas, it’s becoming more widespread than ever. The main problem with wireless is that the signal decreases the further away from the source a device gets, but for businesses in the right areas, it can be much more cost efficient than copper or fiber.

Choosing Between Connections

Choosing the right Internet connection is a matter of knowing what the business needs, and what offers the best bandwidth while still being cost efficient. Rural businesses may need to use copper — at least until fiber or wireless come to their areas — but businesses that are more urban can take advantage of the current networks to improve their speed and signal.

There’s also the option of combining different connections — such as fiber and wireless — or even outsourcing the IT network completely. The first option ensures reliability, whereas the second takes some of the pressure off, allowing employees and owners to concentrate on running the business itself.

Whatever method a business chooses to connect to the Internet, research is key to making the right choice. All three options have their pros and cons, but businesses need to take into consideration their location (rural or urban), as well as the costs involved and exactly how much bandwidth is needed in order to remain reliable and consistent for clients.

Cloud-Based Solutions: 5 Myths Debunked

July 20, 2016 by admin

Deciding to move to a cloud-based solution takes research, and that includes dispelling a few common myths. Businesses should be well-prepared before adopting a cloud solution. Following are five common cloud myths, debunked.

Control Planes Can Be Added Later

Employees need correct tags in order properly allocate data and cost and to report any issues. Adding control planes after the cloud has already been deployed simply doesn’t work. Instead, businesses should already be thinking about their control planes when conducting preliminary research, and provide reports to relevant users in order to get feedback that can fix problems before they arise.

IT Finance Should Control Cost and Usage Optimization

In traditional IT, the IT finance department controls most of the cost management. In a cloud environment, the same data (usage and cost) is used in different ways by IT finance and IT operations. Businesses can no longer rely on having IT finance as the only department in control of cost and usage optimization; instead, both departments need to work together to ensure efficient management.

Multi-Cloud Environments Can All Be Managed by the Same Tool

Businesses looking to use multi-cloud environments should ensure that the vendor they select is capable of handling the management of each one. Because the data from each provider is measured differently, even businesses that are starting out in a single-cloud environment should take the time to run a multi-cloud trial or proof of concept with their potential vendors.

Retrofitting the ITFM Is Easy

Traditional IT Finance Management (ITFM) solutions cannot simply be ported over to the new environment and expected to work as they always have. The biggest reason for this is that the cloud is focused on real-time updates and information. With real-time data, businesses are able to adjust and optimize costs and usage almost immediately, instead of waiting until the next accounting exercise as in traditional ITFM. Furthermore, ITFM tools are usually highly specialized, but the cloud requires a more approachable tool set that even regular users can navigate.

Users and Costs Will Self-Regulate

Cloud services are usually metered, allowing costs to be allocated more easily, but that doesn’t mean that users will self-regulate. Instead, they’re more likely to overrun costs because the environment is now decentralized. In order to maintain cost efficiency, businesses must use control planes that allow for both flexibility and appropriate restrictions.

Being aware of potential issues is the first step to reducing or removing them before they begin to affect the bottom line. By doing their research, applying control planes as soon as possible, and encouraging a closer partnership between IT finance and IT operations, businesses will have a smooth, efficient transition and deployment.

Successfully Navigate These 5 Roadblocks to VoIP Implementation

July 13, 2016 by admin

While the popularity of Voice over IP (VoIP) has exploded since the advent of the Internet, the technology does not come without its challenges. Implementing VoIP or upgrading current voice and data communications systems does not have to be a hassle if potential roadblocks are recognized before they escalate.

Market research firm Technavio forecasts that the market for global mobile VoIP will have a compound annual growth rate of 28% between 2016 and 2020. The rise of the mobile VoIP market will increase the need for voice calls as well as video, making VoIP technology that combines voice, data, and video on one platform necessary for companies to do business.

Following are roadbloacks to successful VoIP implementation, and tips on how to avoid them:

1. Old Infrastructure

Implementing VoIP often requires replacing old infrastructure and equipment in order to make technology compatible with these new systems. Even if IT managers are tempted to keep their current network connections as they are, they will likely have to upgrade to get the voice call quality they desire.

2. Integrating New Technology with Old

It is difficult for certain tech changes to happen right away due to budgetary, training, or other issues. IT managers may have to integrate new technology with old networks or equipment. Whether or not they are dealing with old technology, managers need to ensure their VoIP and telecommunications systems are compatible with existing equipment.

3. Network and Data Security Effectiveness

Since VoIP involves Internet and data connections, there are security risks involved that could endanger networks, individual devices, and more. IT managers should perform a security audit and patch up any software or loopholes that could result in data breaches, cyberattacks, or other incidents. They should also install software or implement cybersecurity procedures to further protect their telecommunications systems, including establishing firewalls, strengthening passwords, and restricting access only to essential personnel.

4. Connection Speed Optimization

With the move to voice/data calls, IT managers will have to be ready with more bandwidth. Connection speeds that are not optimized for VoIP will likely lead to dropped calls, issues logging onto the Internet, and other problems that could affect worker productivity or even corporate reputation. Test speeds with new telecommunications technology and use connection configurations according to manufacturer or service recommendations.

5. Call Quality and Lost Calls

When call quality is affected by connection speeds or other tech issues, it could lead to echoes in calls and muffled sound that can be frustrating to overcome. Make sure employees are not losing calls when implementing new call technology. It could be beneficial to check provider reviews or testimonials before signing a contract.

Recognize and overcome these five roadblocks to get your business on the path to successful VoIP implementation.

Making a BYOD Policy Work

July 6, 2016 by admin

Many companies agree in principle with the idea of a bring your own device (BYOD) policy, where employees utilize the same device for both business and personal use. There is much to like about the idea; if employees are using their own devices it saves the company from having to invest in costly hardware, and BYOD is more likely to result in employees knowing how to use their devices effectively, which can boost productivity and workplace efficiency.

There are also some concerns with BYOD, however, particularly in terms of security. The advantages of a mobile, always-on always-connected workforce are hard to overstate, but they are oftentimes overshadowed by the risks inherent in allowing personal devices to access corporate data.

By keeping a few key concepts in mind when implementing a BYOD policy, it is possible to reap the rewards of a BYOD workforce while minimizing the risks to important and sensitive data.

MDM Software

Make sure to have a solid mobile device management (MDM) software solution in place before implementing a BYOD program. MDM software helps manage all of the different devices that are allowed to connect to the network, including verifying the device as well as providing monitoring and access control functionality.

A Clear Policy

It is vital to the success of any BYOD program that the program policies be laid out explicitly and clearly. The policy should include acceptable use guidelines, as well as expectations regarding password security, application ownership and use, and liability. Policy documents should be reviewed and updated regularly and training offered to ensure comprehension and compliance.

Another important aspect of a good BYOD policy is enforcement. Compliance with the policy should be monitored, and consequences of non-compliance need to be clearly defined in advance, communicated to all, and, most importantly, enforced.

Updates and Passwords

One of the most difficult aspects of maintaining hardware in a BYOD environment is keeping devices updated and ensuring that secure passwords are being used. Incentives can be offered for maintaining updated device firmware, or MDM software can be used to force updates to the most recent firmware. Regular mandatory password changes can help keep passwords secure, and two-factor authentication ensures that the user and the device are verified.

How and When to Wipe

A system needs to be in place to wipe lost devices of sensitive data. Tools exist to do this, but it is important to have some sort of employee consent on record to cover the loss of personal data should such a situation arise.

By following the guidelines above, it is possible to get the best of both worlds when it comes to BYOD in the workplace. Secure, mobile access to work data on modern devices provided by and familiar to employees can be a source of strength and competitive advantage for businesses.

5 Big Ways VoIP Improves Job Efficiency

June 27, 2016 by admin

While employers may spend a fortune to retain the best employees, they won’t be able to keep a pool of talented workers with outdated technology. Companies with aging devices and infrastructure may face worker complaints about the tools of the trade not functioning properly or impeding on their productivity — one of the reasons why many employers are upgrading to Voice over IP (VoIP). This technology not only cuts telecommunications costs, but also increases employee productivity.

Here are five big ways VoIP improves job efficiency:

1. Allow Employees to Work from Home

VoIP is a critical tool that gives workers the ability to work wherever they feel most comfortable. Giving workers the technology they need to telecommute or work during flexible hours could even increase job satisfaction.

Global Workplace Analytics revealed that 80% to 90% of employees in the U.S. prefer to work from home either part- or full-time, and about half of U.S. workers telecommute for their jobs for at least some of their work. With the telecommuting workforce likely to grow, companies should prepare to have voice and data enabled call software and equipment set up for them.

2. Reduce Resources Spent on Telecommunications

Although this benefit may not impact workers directly at first, spending less money on telecommunications could have an organization-wide effect that could in turn lift employee productivity. VoIP lowers infrastructure expenses and monthly bills, allowing funds to be put toward talent retention, upgrading technology, and more. By having more resources available for essential business processes and employee functions, workers are more likely to be satisfied with their jobs and generate higher output.

3. Enhance Client Communication

Voice calls cutting in and out because of old equipment and technology during meetings could ruin a company’s reputation and client relationships. Additionally, employees may have to spend time apologizing and rescheduling calls to make up for those that dropped. Overhauling telecommunication systems to handle calls could make communicating with clients a more streamlined process, leading to clearer voice calls and fewer instances of technical difficulties.

4. Less Time Spent on Voicemail

Checking voicemail has become a pain point for workers as they have to spend time dialing in or checking multiple voicemail boxes. VoIP makes it easy to monitor voicemail messages by unifying several voicemail boxes into one. This saves time for employees when reviewing important messages and lowers the frustration they feel, leaving more of their day for pressing projects or tasks.

5. Keep up with Mobile Workers

Since the advent of mobile devices, more workplaces are on the go. Whether employees are in the office, traveling, or at home, Internet and data calls are crucial to keep up with workers where they are and on whatever device they are using.

The number of mobile workers in the U.S. is projected to rise to 105.4 million in 2020, up from 96.2 million in 2015, according to the International Data Corporation. With more workers using mobile devices like smartphones and tablets, employers need to be prepared to support this technology so that employees can remain productive even on the go.

Whether IT managers upgrade to VoIP technology primarily to cut costs or replace outdated infrastructure, doing so is the next step toward increasing worker productivity and business efficiency for the long term.