Facebook-f Twitter Linkedin-in

modern office

The Modern Office and Connectivity: Why Access to IT Drives Today’s Businesses

by

As we discuss what makes the modern office function fluidly, we cannot overlook the importance of connectivity. While the end user sees only a portion of internet technology (IT) that actually exists, the fact of the matter is that IT is the driving force behind today’s modern business. Not only does connectivity allow employees the access they need for top productivity, but it provides clients, customers, and business partners the doorway to the information they require as well.

Connectivity is all about how every one of us gets the information we need every day from email to secure remote access. When it comes to getting your end users access to corporate information securely and consistently, connectivity is key. It is connectivity that allows us to perform the normal, day-to-day operations of our business effectively and efficiently.

Email Access & Connectivity

Email access is a necessity in the modern business world whether you are working on your desktop at the office, your iPad on the subway, or your laptop at home. Connectivity allows businesses to provide every employee unified email access. With the latest IT, your business can provide fully synchronized connectivity across all devices at all times with all employee contacts, calendars, and email.

In today’s modern office, your workforce can access email from their smartphones, smart watches, tablets, laptops, and desktops with certainty. This means higher levels of productivity, ease of use for the end user (i.e. every employee), and flexibility, all protected with the level of security your business requires.

Not only is email access important for your employees but consider your business partners, subcontractors, and consumers. There are many people clamoring to communicate with your business on a daily basis and email is the lifeline of much of that communication. Without the right connectivity, your business partners may not be able to close the deal without immediate access to all team players; service providers won’t be able to access what they need to get your job done; and consumers may become so frustrated that they seek out other businesses that are connected to fulfill their needs.

File Access

Connectivity allows the modern office to have secure access to a variety of systems. For example, you can provide your employees with secure access through a virtual private network (VPN). Connectivity also gives them access to files through cloud-based systems such as OneDrive, SharePoint, Box.com, or Dropbox to name a few.

In many industries, businesses also require the ability to share access to information with organizational partners. When you need to share proprietary information securely with subcontractors and other business partners, which is the case in many industries, connectivity is there to achieve your goal. The right connectivity also allows this to be done so securely.

Meeting Customer Expectations

The modern consumer is incredibly tech savvy and they expect businesses to be the same. This means every business from the small mom and pop to the multinational corporation are expected to provide the same level of connectivity. No longer does the work day run 9 to 5. Customers want access to businesses around the clock and they have the voice to demand it.

The 2018 Deloitte GLOBAL Human Capital Trends report shows important changes facing business leaders worldwide. One of those is in the strength consumers now have, making business connectivity more important than ever. Deloitte’s global survey of more than 11,000 business and human resource leaders shows the “shift in power to the individual is being propelled by today’s hyper-connected world, which enables people to track information about companies and their products, express their opinions to a wide audience, and sign onto social movements, globally and in real time.”

Today’s consumers want to be able to connect with businesses instantly, get answers quickly, shop, and more, both day and night. Customers want to connect with your business on all levels. What’s more, they expect your business to provide that connectivity for them on any device they choose to use.

In order to retain clients and customers, connectivity is an absolute necessity, especially in industries such as retail, education, and finance. Not only will you need the right hardware and software to meet customer demands, you’ll also need business processes and the network infrastructure in place to implement connectivity.  Connectivity can be achieved affordably allowing every business to draw in new customers, meet their expectations, and retain them.

The Future is Now

There was a time when businesses simply needed a website, telephone number, and/or email address for people to reach out to them. That is no longer the case. Mobile technology has exploded which has led to the need for businesses to be available 24 hours a day. With the “always on” mentality of the modern business world and the drive to meet customer expectations, connectivity has become the right hand of business. Now is the time to ensure your connectivity is up to par as the future has arrived.

What You’ll Need

In order to meet the connectivity expectations of employees, business partners, and consumers, you will need to implement several elements of connectivity. Begin by looking at your hardware. Are your computers, servers, modems, printers and other hardware up to date? If not, or if they are nearing their end of life, don’t wait to upgrade otherwise you may find your business falling behind the times and that can lead to a loss of customers and revenue.

You’ll also need to look at your software. This is a banner year for software changes. Several companies such as Microsoft will be allowing software programs to pass into their end of life cycle over the next few months. This means companies will be issuing new software programs to replace the old. Be ready in advance for changes because if not, your business could be at risk for breaches since updates to old software will stop being issued. Up-to-date software is a prime element of strong connectivity.

Cloud applications are also imperative for effective connectivity. A cloud application is a type of software program where local components such as your existing hardware and software function cohesively with cloud-based programs. This means your business will have to rely, at least to some extent, on remote servers and the internet. This piece of connectivity can make file sharing like that mentioned above simple.

Mobile apps are also becoming mainstream for modern businesses as well. Whether you are a retailer hoping to capture consumers online and allow them to shop anytime or you are a financial institution that wants to promote e-trading directly through your clients’ mobile devices, you can have an app constructed for your business. Whatever your need is to reach your target customer and keep them engaged, there’s an app for that. Many third-party service providers such as ORAM offer mobile app development for businesses at surprisingly affordable rates.

Social media is another piece of the connectivity puzzle that many businesses fail to recognize or utilize to its full potential. Modern businesses introduce their brand, express their values, and cultivate higher sales through the use of social media from Facebook to Twitter and LinkedIn to YouTube. Such social media platforms offer businesses the opportunity to connect with consumers, praise hard-working employees, tout their products and services, boost their brand recognition, and so much more.

Changing Connectivity

Just as your business plan is a living document, your connectivity will need to grow and adapt to the demands of your business and the outside world. Connectivity is never static and your business will have to be ready to change with the times. For example, even small businesses are realizing that they have substantial bandwidth requirements to meet their connectivity needs. Standard broadband is becoming a limitation with today’s high-speed world.

You may also find that you need to revisit your software licensing or usable hardware to facilitate the growth and speed your business requires. After all, the plan is to grow your business which means more hardware, software, and connectivity. The expectation is that the demands of connectivity will only continue to grow and morph as technology changes and continues to expand.

Competing in a Competitive Marketplace

When it comes to business, competition can be fierce whether you are aiming to garner more clients, increase sales, or hire an effective workforce. You need to ensure your connectivity is in top condition to achieve your business goals regardless of what they may be. The truth is that all businesses require connectivity to gain and maintain a competitive advantage in today’s marketplace. Furthermore, it will allow you to raise awareness of your brand, provide you further reach, and allow your employees to achieve more.

If you want to learn more about how to improve your business connectivity, modernize your office, or talk about your business IT needs, contact ORAM at (617) 933-5060. You can also connect with us online.

The Modern Office and Security: What you need to know about protecting your business and its data

by

One of the most critical components of the modern office environment for a healthy, scalable business infrastructure is security. It is the cornerstone of your IT for it protects the other components that your company needs to keep thriving and surviving in the modern marketplace. Today’s business security entails much more than just an anti-virus program and requires some pre-planning as well as a regular investment of time.

This blog covers the most important things every business should know about security. Additionally, it includes what business leaders should consider to best protect their organization, data, and clientele. As you will see, having the right security in place can make the difference between growing your business and shutting its doors permanently.

Secured Access

Every business should have secured access in place for both internal and external users on its network. As a modern company, both internal and external users will be accessing your data whether its email or highly-sensitive information not meant for prying eyes. This is important because data falling into the wrong hands can cost your business its reputation, revenue, and even its livelihood.

According to the 2018 Data Breach Investigations Report by Verizon, 73 percent of breaches were perpetrated by outsiders. This means your business data needs to be protected as much as possible and that external access to your network should be limited and monitored at all times. Hackers are always looking for a way to infiltrate networks. Phishing, ransomware, and malware were among the top means used by nefarious outsiders to access business networks in 2018. Of those breaches studied, 90 percent were motivated by monetary gain or strategic advantage (i.e. business espionage).

While you may believe that your business is too small for anyone to care about hacking its data, think again. A report by USA Today shows 61 percent of cyberattacks are aimed at small and medium-sized businesses. The same piece reported that a whopping 60 percent of small businesses close their doors for good within six months of an attack so it’s clear why security is so imperative to business survival in our modern society.

Though most breaches occur due to external sources, insiders can be just as dangerous to your business. Whether due to simple user error or something more insidious such as a disgruntled employee or cyber espionage, the aforementioned Verizon report concluded that 28 percent of breaches involved internal actors. Of those breaches, 12 percent involved privilege misuse. That’s why we always recommend implementing the practice of least privilege. This means allowing access to data only to those who require it to fulfil their job duties.

Email Security

Email is the bread and butter of communication for most modern offices. The use of email for both internal and external communications is a necessity for today’s businesses so securing it effectively is imperative. The issue is that it is also a major point of entry for many attacks.

A blog by CSO from IDG shows that 92 percent of malware is delivered by email. In addition, the blog stated that the average ransomware attack (which often occurs via email) costs a company $5 million. The same blog also stated that phishing attacks is one of the most common methods of email malware infection.

There is email and network scanning software available to help protect your business. At ORAM Corporate Advisors, we recommend Mimecast for email protection. It is a terrific solution to help organizations prevent email-borne ransomware as well as protect against the associated downtime and data loss such attacks can cause. ORAM recommends Mimecast because it “safeguards employee communication and reduces risk with targeted protection, data leak prevention, and enforced security controls.”

Mimecast, which I mentioned above for email and network scanning, is also an excellent solution for data loss prevention. Its data loss prevention solution scans all emails and file attachments and identifies potential leaks using flexible polices based on keywords, file hashes, pattern matching, and dictionaries.

Another piece of modern technology you’ll want to have in place is multi-factor authentication. Multi-factor authentication is a security system that requires more than one method of authentication to verify a user’s identity. This can range from requiring passwords that must periodically be changed by legitimate users to requiring a one-time PIN provided via smartphone for access. It adds an extra step for employees to access your network but it will help ensure your business’ data security.

In addition to software, we also recommend that employee training become a regular event. Every business should offer employee training during the onboarding process and at regular intervals throughout the year (every six months) to every employee. They should be trained not to click on email attachments or to follow links in emails from unknown or untrusted sources. Employees should also be taught to verify emails with links and attachments with a trusted source before opening them if something comes into their email that they weren’t expecting. While this training can take some time, it can prevent a costly breach later on.

Manage Your Network

While securing access to your network is important, managing your network is even more imperative to keep business operations running smoothly. Your network houses your most critical data while supporting the daily workflow and processes of your business. That means maximizing uptime, optimizing network capacity and utilization, and ensuring its protection.

There are a great deal of pieces that comprise your network and all of them need to be addressed on an ongoing, regular basis. Start with a network technology assessment and auditing. This will tell you where your network is in terms of optimization and data security. By assessing where your network is now and taking a full audit, you will be able to tell where your strengths and weaknesses are to tweak it to work at full capacity for your business needs.

In addition to regular assessments and audits of your network, you will need to plan ahead for storage, disaster recovery, business continuity, and more. Here are some of the things that go into managing a business network:

  • Email Continuity
  • IT Asset Tracking and Reporting
  • High Availability Services
  • Cloud Solutions
  • Network Design, Implementation, and Support
  • Data Assessment, Analysis and Recovery
  • Security and Monitoring Services
  • Workflow Assessment and Optimization

Up-To-Date Security

Your business should also have up-to-date technology security in place. You will want to ensure that your company has installed intrusion prevention software on all of its data networks to keep hackers from getting their hands on your information. You can check to ensure you have such software in place during the audit process.

The intrusion prevention system we use at ORAM is Cisco hardware that scans on a network level. It scans everything going into and out of your network to ensure that your network traffic is safe. This could catch someone maliciously trying to access your internal network, bad email attachments, and other threats.

In addition, you will want to put together policies for your employees that protect your business. Ensure you have a solid computer use and data loss prevention policy in place so employees know exactly when and for what purposes they can use their company devices. Make it clear what sites they should not visit and what the repercussions are for visiting non-work related sites on business devices.

You’ll also want to have a password policy in place so employees are not using the same passwords for multiple accounts or old passwords that could leave them at risk of being hacked. Passwords also need to be strong so encourage your employees to develop passwords that use letters (both lowercase and capital), numerals, and special characters. There is even software available to prompt your employees to change or update their passwords over time. You may even offer your employees a password manager so they can easily recall their passwords.

Many enterprise businesses are also moving to the cloud. Not only does this allow for greater flexibility for your employees, but it can offer greater data security. When you save both to your local network and the cloud, you have your data backed up. This is ideal in the event of a disaster and will get your business up and running again with less downtime or the worry that valuable information can’t be recovered.

Don’t Forget Your Physical Security

Remember that all data is not digital. Whether you have data files stored in locked filing cabinets or your HR employees are printing personally identifiable information (PII) during tax season, the physical security of your business is just as important as its digital security. You don’t want someone walking out with printed files or sifting through your garbage to steal information.

ORAM recommends that all businesses have a clean desk policy. This means requiring that all employees keep their desk clear of papers, notes, and other information that could lead to a breach or loss of information if it were to fall into the wrong hands. When they are not as their desk, employees should have a clean desk since everything should be put away, hopefully under lock and key.

Businesses should also limit physical access to certain areas such as file storage areas, server rooms, and other places where information is stored. If an employee doesn’t require that access to do their job on a regular basis, they shouldn’t have access. Such areas should be locked with limited persons possessing keys for access. We also recommend adding video cameras at data rich entry points to protect against a physical breach. This small addition will let administrators know who accessed the area(s) and when they did so which will help in an investigation.

Finally, you’ll want to ensure that all data is properly disposed of. Shred all hard copies before tossing paper information and consider hiring a disposal company that handles this type of waste. Don’t leave such waste out on the curb for anyone to take. Ensure the company will come in to gather paper for disposal. In addition, make sure that valuable paper data isn’t thrown into the recycle bin but is shredded before being thrown out. When it comes to cyber espionage, dumpster diving isn’t unheard of.

Have a Plan

Every business should also have a written information security plan (WISP) in place. It should include everything from regular IT audits to employee training. There are many mistakes that businesses make when it comes to backup that are completely preventable. Your WISP will outline effective administrative, technical, and physical safeguards specific to your organization to help prevent such mistakes. It will also define security measures for your business, protect against anticipated security threats, and unauthorized access. The WISP for your business will put safeguards into place to protect your data. It will also help you and your employees know exactly what to do and who to contact if disaster strikes.

If you need help with securing your modern office or want more information about building stronger security for your business, contact ORAM today at (617) 933-5060. Our experts are always here to assist you in bettering your business and data security.

The Modern Office and Business Continuity

by

What you need to know to protect your company

The modern office requires that all components of your business environment work together harmoniously to ensure the best use of your IT infrastructure and seamless scalability as your business grows. One of the major components of the modern office is business continuity. This is an imperative piece of a solid IT plan for every company regardless of size or industry.

Business Continuity                 

When IT professionals discuss business continuity, they are generally referring to a proactive approach of having the right processes and procedures in place to ensure mission-critical functions continue to work properly in the face of a disaster or while a business is recovering from one. When it comes to business, there are many moving parts that still need to continue operating smoothly whether your company experiences a devastating fire or a nasty data breach.

The IT and business statistics are shocking. In the last five years, one in three organizations were hit by a virus or malware attack, according to DataCore, and more than half of companies (54%) experienced downtime that lasted more than eight hours. That’s a full day of work lost! While DataCore shows only 35 percent of outages are caused by natural disasters, 45 percent of outages are operational and another 19 percent are due to human error. These site outages can cost businesses thousands of dollars in lost revenue and restoration costs for every incident. Gartner, Inc., a global research and advisory firm, estimates that only 35 percent of small and medium businesses (SMBs) have a comprehensive business continuity plan and the financial loss for every hour of downtime can reach into the thousands even for SMBs.

Business continuity requires comprehensive planning before tragedy strikes an organization to allow them to overcome long-term challenges that would otherwise stop them in their tracks. With prior planning, business continuity ensures your entire business returns to full functionality as fast as possible following a crisis. That means everything from vital employee records and payroll to stored data access and email.

Think Cybersecurity

One of the first steps in a complete cybersecurity plan is business continuity. To start, you’ll want to ensure your business employs the best technology to combat the latest threats from ransomware and malware to other types of breaches. This means updating protections such as antivirus and firewalls, using multifactor authentication, and engaging your employees in ongoing, meaningful cybersecurity training.

Cybersecurity plans, which are typically handled internally by the chief information security officer (CISO) in larger businesses, should be designed as a living document that can expand and adjust when necessary to meet the changing needs of your business. Small to medium enterprises often don’t have a dedicated CISO so they can outsource this responsibility to organizations like ORAM Corporate Advisors.

Written Information Security Plan

As part of your business continuity plan, you’ll need a written information security plan (WISP), which also happens to be a requirement of many regulatory bodies, especially for businesses who contract or subcontract with the government and financial institutions. While government regulations vary from state to state and with the federal government, in Massachusetts this written document should contain, “certain minimum administrative, technical, and physical safeguards to protect” personal information such as names, driver’s license numbers, social security numbers, and financial account numbers. You’ll need to check with both your state and federal government to determine which regulations impact you as well as any industry-specific regulations. This is another place a CISO or third-party IT vendor can help.

Your WISP should designate an individual responsible for maintaining your IT program. This may be a business owner, CISO, or even a trusted advisor such as ORAM. It will also need to identify any reasonably foreseeable data security risks as well as protect and restrict access to electronic data that may include personal information for your employees and/or clients. This plan should also outline the oversight of third-party service providers and ensure those providers comply with local, state, federal, and industry regulations as well.

Because your business and its processes, risks, and procedures are unique, your WISP will be very specific to your organization. It cannot effectively protect you from culpability in the event of a breach or loss if it doesn’t address the particular risks of your company or if it includes practices that have not been put into practice in your business. Through coordination with your IT team and/or third-party IT vendor, you will need to identify “reasonably foreseeable risks” to ensure your WISP includes the practices your business adheres to.

In addition to IT functionality, your WISP will also address the non-technical operations that will still need to work in a disaster situation to keep your business moving forward. For example, it might address the accounting measures you have in place to keep employees and bills paid and clients invoiced if the worse should happen.

What Crisis Looks Like

Stolen laptops, lost cell phones, and an employee clicking on a phishing email that infects your entire network. These are all crisis that can and often do occur in the business world. Think of all the critical information that can be lost, stolen, or even held ransom. What do you do and who do you talk to? This is where planning ahead and having a WISP helps. It will outline how to respond to a variety of incidents.

Lost your company cell? Your WISP will inform you of who to call to wipe the lost phone and deactivate it before serious damage can be done. Did your organization experience a data breach? Your WISP will have identified a data backup plan so that nothing is completely lost. Has a virus made accessing email impossible? Your WISP will have determined if your email is stored locally, in the cloud, or both to decide how to get it up and running again fast. This thinking ahead with recommendations by your IT team or third-party vendor will help ensure you have continued access to business email which is the lifeblood of most commerce today.

Recovering from Incidents

One of the best things your WISP will do is outline policies and procedures for how to react and recover in a crisis situations. Regardless of the disaster that strikes, your WISP will point you to who to contact and how to react. Part of your WISP will address incident response and crisis management to minimize the impact when things do go awry, as they inevitably do.

Incident response and crisis management involves having the ability to maintain critical business functions during a disaster scenario. It also encompasses having plans in place for a rapid recovery from catastrophic incidents. If your business were to experience a flood, fire, or data breach today, would it be able to recover quickly and efficiently? Business continuity is all about having a plan in place that expects the unexpected and is prepared to handle it.

When it comes to IT and business continuity, the big question is, “How do you operate tomorrow?” If you don’t know the answer, it’s time to get a plan in place starting with an evaluation of the foreseeable risks your organization may face and a WISP to address them. Think of it as an insurance plan that also helps your business with regulatory compliance. When disaster strikes, your business’s IT team, CISO, or third-party IT vendor should have already given you advice. Hopefully, you have followed it. Then you know who you can call when things go wrong so they can tell you how to react to keep your business moving full-steam ahead.

If your company or organization needs assistance with risk assessment, developing a WISP, and planning for business continuity, call the trusted advisors at ORAM today at (617) 933-5060 or visit us online. Our experienced professionals are here to help and we are dedicated to partnering with small businesses to assist them in achieving success.