Miami Cyber Attacks Happen: Build Resilient Systems

You can’t stop all attacks or build the perfect defense system. The higher-level objective is resilience.

Every week, billions of cyber-events batter government networks. Millions of these attacks hit at network speed, and thousands succeed, as reported by the Homeland Security Department’s US Computer Emergency Readiness Team. The US Navy alone was attacked more than 1 billion times in 2016. Although security analysts strain to counter these breaches, mostly with manual processes, it’s likely terabytes of data are stolen.

Given this dynamic landscape, you might think federal CIOs are getting more resources to defend against mounting cyberthreats. They’re not. Money and security expertise are in short supply, meaning agencies need to innovate. First and foremost, they can no longer take a piecemeal approach to information security. A holistic strategy that incorporates real-time risk management and continuous monitoring is the only way to go.

To help companies build these more-resilient systems, the National Institute of Standards and Technology, in collaboration with the Defense and Homeland Security departments and private sector intelligence communities, has come up with security controls that focus on mobile and cloud computing, application security, the insider threat, supply chain security, and advanced persistent threats.

So it comes as no surprise that more than half of the respondents to Information eek’s 2014 Federal Government IT Priorities Survey say cybersecurity/security is the top priority in their agencies. Seventy percent rate security as “extremely important,” with another 16% viewing cyber-security/security as “very important.”

Federal managers want to know “how to stop the bleeding,” says Ronald Ross, project leader of NIST’s FISMA Implementation Project and Joint Task Force Transformation Initiative. You can’t stop all attacks or build the perfect defense system. The higher-level objective is resilience. “What does it mean to have an adequate degree of resilience in a modern information system that supports critical missions?” Ross asks, in a question that’s neither rhetorical nor unique to federal agencies. State and local governments as well as private sector companies are struggling, too — anyone with valuable information and using very complex high-end technology is subject to the same types of threats.

Resiliency means “becoming healthy after something bad happens,” says Bret Hartman, VP and CTO of Cisco’s security business group. “That is a good way to think of security because it’s impossible to stay healthy all the time.” Agencies should consider the attack continuum and which technologies they need in place before an attack occurs, during an attack, and after the attack to do systems remediation. This last area is still maturing and is where the biggest challenge lies today, Hartman says.

Time for better cyber “hygiene” in Miami 

To address resiliency in Miami, South Florida, federal government, NIST and its partner agencies are focusing on two tracks: improving “cyber hygiene,” and designing IT system architectures that can bounce back from damage and contain attacks. A good way to view cyber-security, says Ross, is to have a way to address areas “above the water line,” such as known patching and maintenance, and those below the water line — problems you can’t see that could cause trouble and inflict serious damage without warning.

Cyber hygiene focuses on tasks that security administrators deal with daily, such as promptly updating operating systems and applications with the latest security patches or making sure all operating systems and network devices are configured properly to close down attack vectors that could be exploited. IT must also assemble and maintain a complete inventory of everything on the agency’s network and the information it has to protect.

With NIST 800-53 R4, the government is starting to address security below the water level, too. Specifically, we’re talking about contingency-planning types of controls, which allow agencies to define alternate processing capabilities, storage sites, and communications plans in case of a natural disaster, like a hurricane, or a cyber-attack. “We have contingency plans in place and run those exercises as frequently as we need to, so when the event happens, we can move smoothly into that backup scenario,” Ross says.

Use social media for more than marketing

Use social media for more than marketing

Social media has become an important part of any business’s marketing strategy. By having an active presence on the main networks, you will likely see increased sales and or brand recognition. So, while social media is an invaluable marketing tool, there are also other departments which could benefit from it.

Below are four non-marketing oriented uses of social media that businesses could benefit from.

LinkedIn is a social network dedicated to helping professionals and organizations connect, find jobs and new talent. Most social savvy companies will have a presence on this network and may even hire exclusively from here.

If you are looking for new employees, it wouldn’t hurt to have a LinkedIn profile. To find the best talent, you need to forge and maintain connections (usually starting with people you know), and be somewhat active in groups and on message boards.

It’s also important to not forget the other major networks when it comes to hiring. Tweeting a job opening on Twitter, or posting ads on Facebook could also help you find your next employee. Facebook can be particularly useful because you can pay to target ads (in this case, job openings) at specific demographics.

Internal communications
Communication is an important part of the business, and most people choose to communicate using email. You have probably seen emails with jokes, invitations to after work events,  sent to the whole company and also received many replies that go with it. This can get very annoying, and also confusing.

Why not utilize social media for non-essential (aka. not related to work) communication. Set up a Facebook group where your employees can share content, invitations to lunch or after work gatherings, interesting stories, etc. That way you can limit email to more important, business-related aspects.

Using social media for internal communication is also beneficial for companies with younger workers. Most already see Facebook, Twitter, etc. as their main form of communication. Some even feel more comfortable communicating over this medium as opposed to speaking out in meetings. Having a group portal or Facebook page could give less-empowered employees a way to voice their ideas, and maybe even improve on them with feedback from others.

A common complaint of many business owners is that they have a tough time staying on top of ever-changing trends and what interests their customers. Using social media to connect with your customers can be a great way to learn not only hot trends but also about new ideas.

Customer service
When it comes to social media, users will often complain publicly on their wall or through their tweets. This is bad for you, as the reach of this complaint can go a long way and make you look bad. Some companies have decided to confront this head on by having specific customer service accounts. If a customer complains, has an issue, or even compliments you, be active and respond using that account.

If done properly, over time, you will see more and more people reaching out to your customer service account through social media. This also gives you another way to please clients or turn around negative customer experiences.

Social media and the various platforms are not only great for marketing but can be incredibly useful for other business functions. Do you have any other ways you use social media? Let us know. Or, if you would like to learn more about how it can help your company, then contact us today.

Secure your business in 5 ways

Secure your business in 5 ways

Most computer users, including business owners and managers, know that while computers are incredibly useful, they can pose a security risk. While a security breach for personal users can be serious, it is potentially even more so for businesses. This is why, when it comes to company use, those in charge want to make sure that their systems are secure. The problem is that this is seen to be not only expensive but a drain on time and other valuable resources. In truth though it doesn’t have to be.

Here are five low-cost things you can do to ensure that your business is secure.

1. Communication is key
Many companies take adequate steps to ensure that their systems are adequately protected. The thing is, many security breaches come from within the company. If your employees keep passwords written on pieces of paper that they leave lying around their desks, this is a security issue. It is a good idea to agree with employees where to keep important information and ensure they follow these rules.

Beyond that, if you implement security changes or new systems e.g., new virus scanning software, it is important that you talk to your staff to ensure they know how the system works and how they can use it. You would be surprised at how much effective communication can help to minimize security issues, and best of all? It’s free!

2. Educate your staff
One of the more common security issues comes from spam and malware found in emails. It is a good idea to educate your staff on how to spot these different types of emails and other malicious websites, as well as how to avoid them.

It is worthwhile ensuring that your employees know their roles when it comes to security too. If you have a secretary who you believe is responsible for ensuring the office is locked at the end of the night, take steps to ensure that this person understands their responsibilities. The same goes for computers your staff use: If they are responsible for conducting security scans let them know this. While this may take some time, the cost is low to free.

3. Keep track of your keys
To ensure the security of your IT systems and your physical office, you should keep control of your keys. That is, both the physical keys and those associated with your software (the codes you enter to verify software and unlock full versions).

Keep track of which staff members have a key to the office and if possible number them. The goal here is to know where your keys are at any given time, and if a staff member changes employers make sure you ask for them back.

Many software keys or licenses are single use only. If you invest in software and an employees steals this along with the key, you will likely have to purchase the software again. A good tip is to keep software keys secure and separate from the software itself. The best part about this step is that the cost of doing this is minimal.

4. Keep your software updated
Hackers can be a lazy bunch. They will often target those with out of date software, because it’s usually easier to hack. To reduce the chance of being hacked, you should take steps to ensure that your software is up-to-date. This includes your virus and malware scanners, as well as browsers and even software you don’t use.

Get your staff to perform a ‘software audit’ on their computers on a regular basis. This means going through their computer and properly uninstalling software that they don’t use, while also taking time to ensure their system is completely updated. This step is easy to implement and will cost you next to nothing.

5. Keep important systems off site
Many small to medium businesses keep their servers on site. While this is convenient as your systems are right there and easily accessible, this could also create a security issue. One way to minimize this is to work with an IT partner who can host your systems or servers off site or in the cloud. While this involves some cost, working with an IT partner could save you profits and productivity in the long run, as good providers will ensure that your systems are secure and working properly.

If you are looking to make your systems more secure, please contact us today. We may have a solution that will work for your business.

Texting and Instant Messaging

Instant Messaging: An Evolution

It doesn’t take a rocket scientist to see technology is getting faster every day. On average, more than 100 billion emails are sent and received every day – a nearly instantaneous form of communication free to anyone on the Internet. For comparison’s sake, 509 million items are processed by the United State Postal Service each day, and may take days or weeks to arrive at their destination. The Internet offers a level of instantaneous communication not even the telegraph or telephone could achieve, and it offers countless platforms for said communication.

Instant messaging had humble beginnings, however – spending decades confined to single laboratories and university campuses. True appreciation of modern instant messaging requires some degree of knowledge of its past.

Humble Beginnings

The most archaic messaging systems were housed in laboratories at universities and were used as notification system or to send basic text messages between users logged into the same machine. Throughout the 70s and 80s, technology grew to allow messages to be exchanged between multiple devices connected to a shared server, and by the late 1980s, programs like MIT’s Project Athena had built networks which could send communications throughout entire university campus. The 1980s also saw the popularization of bulletin board systems, or BBSes, which allowed users connected to a network to upload and download information to a server, or even for just one computer to call another computer and exchange information. Bulletin board systems were made feasible by early dial-up modems which didn’t require manual user intervention to connect to a server.

When dial-up Internet became widely accessible in 1994, bulletin board systems and other communication systems confined to a single small network began their slow-but-rapidly increasing journey to oblivion.

The Age of the Internet

With the rise of the Internet in 1994, instant messaging became a much more plausible idea for the general public. The first America Online (AOL) instant message was sent in 1993, and AOL Instant Messenger, or AIM, would go on to become one of the most popular messaging platforms through the early 2000s, offering one-on-one communication and chat rooms. Internet forums began to pop up, some of which are still maintained. While they weren’t necessarily instant mediums, they allowed for prolonged and in-depth discussion.

Cell phones also gained the ability to send SMS messages in 1994, though text messaging wasn’t nearly as efficient then as it is today. Original full keyboards were a feature of task managers rather than phones – until the two device categories were married by the rise of the smartphone.

The Instant Era

Smartphones helped to kick off the era in which we currently live, where instant communication is a normal part of life. Phones with built-in keyboards made text messaging practical as a form of communication, making “textspeak” a part of the Millennial vernacular.

The release of the iPhone and subsequent spike in popularity for Android devices allowed an instant messaging service to dwell inside a device as an app. Whatsapp, founded in 2010, is among the most popular instant messaging services on smartphones. Whatsapp is ubiquitous in Europe and Asia, where unlimited texting isn’t as widely offered from service providers. Social networks like Facebook and Twitter, as well as conferencing apps like Skype, also offer built-in chat functions.

Apple then streamlined texting by introducing the iMessage, which replaces SMS messages for texting between multiple Apple devices.

Instant messaging has grown from humble beginnings into a generation-defining phenomenon with a litany of personal and professional applications. These services will only get bigger and better over time, but even today, current technology allows for lightning-fast communication that connects people on opposite sides of the planet each and every day. As space exploration and futuristic technologies trudge along, we may yet discover that not even the sky is the limit for instant messaging.

Want to IM Like A Boss? Talk To A Nerd.

We Nerds are pretty darned excellent at setting up the best IMs and collaboration systems for business. Drop us a line, and we’ll get you chatting as early as yesterday. Sorry, nerd joke.

Nerds Support Instant Messaging

Instant Messaging for Your Business

For a business in a competitive industry, effective communication can be the difference between massive success and complete failure. Being able to effectively communicate both inside and outside of the office is a massive asset that shouldn’t be underestimated when building your organization. Video conferencing technology is continually advancing, but in most cases, you can fall back on a classic tool: instant messaging. Originally popularized in the 90s, instant messaging has been a social tool for decades but is just beginning to see real use within organizations as a legitimate communications tool.

Instant messaging in your business is a powerful digital solution that can make life just a little bit easier for you and your employees.

Instant Messaging is a Gateway to Other Digital Solutions

If your business is in the early stages of going digital, acclimating your employees to communicating through instant messaging is a great way to build a culture that is open to more digital solutions in the future. Instant messaging can make employees more open to video conferencing, file sharing, and integrating their personal devices into their work life.

If your business is split between multiple locations or relies on employees working from home or freelance employees working from out of town, instant messaging is a great way to bring employees closer together without having to cram them in the same physical location or cause unnecessary noise with telephone conversations and physical meetings in the office.

Instant Messaging Creates Organizational Efficiency

Imagine trying to relay information in the office without instant messaging. Unless your desk is in the same room as the person you need to speak with, your options are limited to a phone call, a trek to a different part of the building, or shouting, all of which can be disruptive to you and those around you, and none of which are necessarily clear and concise.

Instant messaging is a simple way to communicate clearly and effectively with employees at your business without disrupting the workplace, and most instant messaging services are native to your desktop and don’t require a glance down at a phone or tablet.

When properly implemented, instant messaging can also facilitate enterprise mobility efforts. When employees can communicate quickly and quietly with those in the office, it becomes feasible to let employees work remotely once or twice a week. Working from home or a local coffee shop can be a relaxing alternative to spending time in the office as long as employees are reminded that time spent working remotely is still a time for work.

When preparing a business for the future and optimizing it for the present, instant messaging is an ideal place to start. At Nerds Support, we’re committed to helping your business run as smoothly and intelligently as possible. If you’re thinking about moving forward with instant messaging or any other digital solution, get in touch! We can’t wait to help you get moving.