Blog

January 10th, 2013

Take a look at any product or building based on Bauhaus design. It’s clean, modern looking with a touch of simplicity that just looks right. Now, take a look at the cables connected to your computer or servers. They probably resemble something closer to a free-form, throw paint on the canvas type of art. While this may not seem like a big deal, it’s important to have organized cables.

Like most things in business, organization is key, and a neatly organized cable system not only helps IT, but can help ensure you can troubleshoot/repair if an IT professional isn’t available to do so in person.

If your server room/office looks like a Jackson Pollock painting, there are a few measures you can take to ensure a neat and tidy set of cables.

  • Use a cabling professional. If you are starting out with a new system, or moving offices and need to lay new cable, it’s a good idea to skip the DIY and contact a professional who can help. This will help minimize cable mess along with potential performance and connection issues.
  • Make a device map. On a piece of paper or chart, depending on how many devices you have, mark every device, assign them a unique number and mark what they connect to. For example, if you have a server and five computers, all these should link to the server.
  • Tag on the hub. Use the numbers you’ve just applied to the devices and mark their current location on the Patch Panel - the panel on a server or electrical device where you attach cables. For example, If Computer #1 connects to Patch Panel B, mark this on the panel.
  • Untangle those wires. Once you know the connection location, you can unplug all the cables, untangle them and plug them back in, in an orderly manner. Use Zip-Ties or twist ties to link cables together to make them easier to move or keep track of.
  • Use colored cables. If you have different types of devices connected to one hub, it’s a good idea to use different colored cables so you know what is connected. For example servers could be red cords, printers yellow and computers white/blue.
Is your cabling in need of a good organizing but you lack the time or are unsure of how to go about it? Contact us, we can help.
Published with permission from TechAdvisory.org. Source.

Topic Security
December 28th, 2012

When it comes to security most businesses take adequate steps to ensure their networks and systems are secure from the majority of attacks. The major problem with this is that many don't look beyond what they already do, and this is where security issues can harm them. One such security threat comes from social media. Your employees are likely using these platforms right now, and if you're happy about that then it's a good idea to develop a policy that ensures your business remains secure.

Here are five things you should integrate in a social media policy to ensure social media is conducted in a secure manner.

  • Log in using HTTPS - HTTPS is a type of transfer protocol that ensures the data is transferred in a more secure manner between networks. Many websites like Facebook, Google, etc. support HTTPS, and you should ensure that you use it. To use HTTPS, you simply put an S at the end of the usual http address in the URL bar of your browser. I.e., https://facebook.com will open a more secure version of Facebook. By using HTTPS you can eliminate Man-in-the-Middle attacks and other similar types of phishing.
  • Don't share personal information - This might seem like a no-brainer to some, but there are still users out there who love to share their personal information. It's important to remember that social media is all about being social. Most information you share can be viewed by others. The last thing you want is a hacker getting a hold of all of your contact info, etc. It's a good idea to limit your contact information and never give it out over social media.
  • Update privacy settings - Social media sites, and the companies who run them, love to tinker with security settings on a fairly regular basis. This has led to a number of users being caught unaware of their security settings. It's a good idea to ensure that all of your profile information is private.
  • Watch what you click on - Take a look at any service and you'll notice that the vast majority of content contains links. This is where hackers are starting to target, by placing malicious software connected to links, or hijacking accounts and sending links to users to get them to click on them. Tactics like these need to be highlighted, and you should tell your employees not to click on any suspicious links. If they receive links from friends that seem uncharacteristic, it's a good idea to not click on them.
  • If you don't know them, they aren't your friend - Yes, social media is about connecting with people. However, when it comes to personal accounts, you should encourage your employees to be judicious in who they connect with. In general, if they don't know the person who has just tried to add them to their network then it's advisable not to do so.
The five tips above are just a few things you should include in a social media use policy in the office. It's important to have a solid policy if you want to ensure that your network and data remain safe from potential threats from social media. Looking to learn more about safety and security of your networks? Contact us, we may be able to help.
Published with permission from TechAdvisory.org. Source.

Topic Security
December 13th, 2012

Security of technical systems and devices used in the office environment is an issue that is important to many companies. Businesses often go to great lengths to ensure that their systems are secure from external threats, yet often fail to take into account inner threats. One of the most common inner security threats is that employees have too much access to systems. A recent survey's findings have highlighted this problem too.

According to the survey, conducted by Viewfinity, 68% of the 600 IT professionals surveyed don't know who has administrative access to computers in their office. While this survey looks at the numbers from the IT viewpoint, it's highly likely that many managers don't know who has what access rights to computers.

The survey also found that 20% of all respondents noted that between 15% and 30% of users in their company had administrative rights. Is this a bad thing? Yes and no. Some users need to have full access to their systems, especially if they manage other systems, while others don't.

Is this a big deal? One of the biggest drawbacks of unnecessary access privileges is security. If users have more access than they need, the chance of a security breach is higher. For example, malware on a locked down system likely won't spread to other systems in the network without direct transmission. Similarly, if a user can't install programs because they lack the administration privileges, malware, for the most part, won't be downloaded and installed.

If a user with full administrative privileges and downloads a piece of malware, chances are high that they won't even notice it's been installed and it will be transmitted to other systems with ease. In fact, one of the main ways hackers gain access to networks is through exploitation of administrative rights. They first look for an unsecured computer with administrative rights, hack it and then follow the chain up to more vital network systems.

What can we do? While the survey was largely centered around IT professionals, business owners can learn from these findings too. They should take steps to audit their network and figure out who has access to what. Then they need to validate the findings and ensure that users have an appropriate level of access privileges. If some employees have no need to download and install programs, then they likely don't need administrative access privileges.

If this sounds like a chore, it's a good idea to work with a service provider who can help determine not only the type of access employees should have, but also the appropriate security and management that's needed to ensure a more secure organization. If you're unsure of who has access to what, please contact us, we may be able to help.

Published with permission from TechAdvisory.org. Source.

Topic Security
November 30th, 2012

Security is a hot button issue, with nearly every company focusing on some form of security and many focusing on security related to the technology they use. This ensures company networks are secure from attack, and businesses often have drafted usage policies for employees to follow when using their computers. While this is a good step, there is one area that's usually glossed over - security of mobile devices. One common way to ensure these are secure is through the use of encryption.

Encryption is not a new concept, it's probably been used since the inception of communication. In standard terms it's the conversion of data into a form that can't be easily understood by unauthorized people. This form is commonly referred to as a ciphertext, or more commonly a cipher. Some people will call this a code, as codes are the same idea. Only the form is not meant to be secure and can be understood by other people e.g., binary code, Morse code, etc.

When data is encrypted, it can be sent to recipients, usually using normal transmission methods e.g., Internet or data connections. Upon receipt of the encrypted data, it needs to be decrypted (changed back to normal data). Decryption on mobile, and most computerized devices, is done using a key. This key is an algorithm that can understand both the encryption and normal data. It takes the encrypted data and essentially translates it to a form of data we can read or interact with.

Many businesses go to great lengths to ensure their data is encrypted both within the network, when sent amongst the network, or to trusted recipients outside the network. In a perfect world, all of your connection points - devices that connect to the network - would be secure. In the real world, employees using mobile devices that are unencrypted to store data or access company systems pose a big risk.

Take for example the CEO checking his work email on his own iDevice. Any emails sent between the company's email server and the phone's email program will usually be encrypted. However, when an attachment is opened with confidential news about an upcoming merger, a copy is usually downloaded onto the phone's memory. If the boss hasn't taken steps to encrypt the mobile device's memory, and the phone is lost then someone picking up the phone could turn it on and see this information. If the user can understand the information, they could create a ton of trouble for both companies involved.

Another scenario, one that's becoming more popular, is where the company's accountant has visited one of the increasingly popular drive-by-malware sites and malware has been installed on an unencrypted phone. The accountant might open work emails and download next quarter's financial projections, along with a document containing the password to a newly reset work account. The phone's memory is unencrypted, so the hacker who monitors the malware can come along and grab the information. Now, not only does the hacker have access to the system - through the password - they also have confidential numbers a competitor would likely pay a handsome sum for.

While these situations may seem extreme, they can and have happened. The risks can be minimized though. While the obvious answer to problems like this is to simply bar employees from accessing work systems from mobile devices, this solution runs counter to the way most people work, and will likely be largely ignored by nearly everyone.

The best solution lies in a mixture of different approaches, all centered around a solid mobile device usage plan. You should take steps to first figure out when your employees access office systems using a mobile device, why they are doing this and what are they accessing. From there it's a good idea to look into security options, vendors like us can help you with this step. It's also beneficial to establish a use policy that dictates when devices can and can't be used. Also, utilizing apps to encrypt memory on phones will help. At the very least, it's a good idea to encourage your employees to use a password on their phone.

Mobile device encryption should be an important part of your company's security plan. If you'd like to learn more, or implement a security system please contact us as we may have a solution that meets your needs.

Published with permission from TechAdvisory.org. Source.

Topic Security
November 23rd, 2012

2013May08_DietNutrition_AYoung children who eat the same meals as their parents are far more likely to have healthier diets than those who don't, according to a recent study looking at the lives of thousands of kids across Scotland. Beyond the UK, the concept of a family sit-down meal is often far from the norm in modern busy societies across America and Australia. However, the study finds that it isn't where or with whom you eat that's important when it comes to the dietary health of youngsters, but eating the same meals as the rest of the family.

On a relationship level, family meals are a positive way to bond and socialize. However, the harsh reality is that for many people, family meals can be quite stressful, not an experience that is looked forward to or relished. In the Scottish study, a quarter of participants revealed that they rarely if ever enjoyed mealtimes together, and a fifth reported that they never really had time for drawn out or chatty mealtimes.

What impacts children's diets

Even if family meals are not quite as enjoyable as they should be, it seems that this does not mean that children necessarily have unhealthy diets. The University of Edinburgh study which looked at 2000 five-year-olds, concluded that other mealtime habits, beyond eating the same food, were less likely to have a negative impact on a child's diet. These included:

  • Not eating a main meal in the day or at regular times
  • Regular snacking between meals
  • Not eating at the dining table
  • Stressful shared mealtimes
Convenience with busy lives

It is perhaps a reflection of the modern world that most families eat not only at different times but different meals. We have less time and more demands on it. So it is often easier to heat up a separate meal for children who are coming and going than to prepare a large family meal and expect everyone to sit down at the same time. Stressed and busy parents often take the path of least resistance with their children too. It is often easier to give your child something you will know they'll eat than to spend 40 minutes insisting they finish all their vegetables.

Eating the same meals

Valeria Skafida, research fellow and the study author explains: "Offering separate 'children's food' for a main meal often results in children missing out nutritionally. It is likely that in cases where children eat different foods, they are eating a less nutritious option. This is already known to be the case with kids menus in restaurants, so children are best off eating the same foods as their parents."

Parents trying to offer the best

Often the reason parents offer children a different diet option is to try and give their kids a healthier, more child-friendly meal plan. Parents might concoct a meal plan that avoids high-fat and high-sodium dishes, to give youngsters a more nutritious start. However, the study suggests that often diet recommendations for children are written expecting "parents to monitor nutritional targets in an unrealistic and impractical way."

Lead by example

One thing that's certain is that having a healthy diet as an adult is the best way forward if you want your children to follow. If you lead by example and share healthy meals with the rest of the family your children will pick up your habits and have a much healthier attitude about food and eating.

Do you need a diet and nutrition overhaul? Is it time you changed the way you eat and what you eat? Do you need help with a plan?

Published with permission from FitnessAdvisory. Source.

Topic Security
November 16th, 2012

Freedom is something many take for granted, especially when it comes to the Internet. We tend to think that countries that block certain sites on the Internet, like China and their 'great firewall' are infringing on basic rights. While blocking sites and access might seem pernicious, there is some benefit that comes from it, especially for companies; a decreased security risk and better control. Does your company allow employees unrestricted Internet access? If so there might be some issues that could arise from this.

Here's four potentially negative outcomes that can result from unrestricted Internet access.

Loss of productivity We live in a world where we are reliant on the Internet and the once clear line between work and life has blurred into more or less the same thing. When we're at work, it's often hard to resist the temptation of checking our email, personal Facebook accounts, or even the news. When we do this, we aren't focusing on work which could mean we are less productive as a result.

Legal liability The potential legal liabilities from improper use of the Internet while at work could lead to some serious legal implications. For example, over 27% of Fortune 500 companies have been accused of sexual harassment stemming from inappropriate emails sent by employees. To go one step further, in the US, the Supreme Court has ruled that companies can be held liable for their employees forwarding offensive or illegal material.

Reputation damage There are numerous cases where an employee has received an email and forwarded it to several other employees, who then in turn forward it on until it reaches someone who is unintentionally offended. It's made worse when this email is plastered with company branding and from a work email address. In serious cases word can leak to the media and the company’s reputation takes a serious hit.

Increased bandwidth consumption Websites like YouTube, or those with some sort of streaming media, can be bandwidth intensive. With services like these, you'll notice that anything that relies on an Internet connection runs slower. This alone will increase costs, especially if you rely on the Internet and need to purchase more than one connection to keep speeds where they should be.

With these four outcomes, it seems like the answer might be obvious: you should limit or block non-essential websites. Be warned however, younger generations entering the workforce have come to rely on and expect openness, and freedom of the Internet. Watch your typical Gen Y work, and they will use the Internet both for work and relaxation. Draconian blocking of sites could in fact bring about an even larger decrease in productivity in these Internet-hungry employees, as they either focus on finding ways to circumvent the block instead of working, or simply leave the company.

So, what is the best solution? The answer is one many companies have struggled with. The truth is, it's different for every company, but the one thing productive companies have in common is a policy on Internet use, combined with taking adequate steps in terms of security. Many tech companies allow free and open access to sites like Facebook in the belief that even if used for personal measures, the employee is spreading the word about the company. If you're not an expert in this, or would like some guidance, we are happy to help, so please get in touch.

Published with permission from TechAdvisory.org. Source.

Topic Security
November 8th, 2012

Security issues seem to follow cycles. An exploit or security weakness is found in an operating system and all of a sudden, there's tons of hackers taking advantage of it. Then, the OS developers and security companies develop and implement a fix and things die down for a few weeks, only to have another exploit submerge. Microsoft knows this all too well, and has implemented some new security features into Windows 8 that will hopefully curb the cycle.

Below are three common security issues faced by all networks and how Windows 8 combats them.

Spear phishing Spear phishing is a form of social engineering conducted over email. If a hacker wants to access a system, they will often pose as a customer and either send an email with an attachment, or send this over IM. The attachment contains a virus or trojan horse which then gives the hacker access to any system that the 'attachment' is downloaded onto.

The main way Windows 8 prevents this is through Windows Defender. This is a full antivirus and malware solution that is based on the Microsoft Security Essentials platform. If you aren't currently working with a Managed Service Provider, or have decided to take on the migration in-house, Windows Defender can be a good device to protect you while you upgrade and before you implement other antivirus solutions, and is available on all versions of Windows 8.

Drive-by malware One way to infect a network is to post a link to a website or file that contains malware. When a person clicks on the link, the malware is installed, often without the user knowing. To combat this, Windows 8 has two features: SmartScreen and Secure Boot.

SmartScreen has two functions. It scans URL links typed into a browser. When a URL is entered that's known to contain malware, it blocks the user from accessing the website. While this isn't a new feature, reports have noted that this is the best URL scanner among any modern browser. The other function of SmartScreen is to scan files that have been downloaded for malicious software.

Many users know there is a similar feature on Windows 7, that notifies you that a file has been downloaded from the Internet when you open it, and gives you choices on what to do with it. SmartScreen improves on this, and takes an active role in notifying you about the security of downloaded items. SmartScreen is available on all versions of Windows 8.

Secure Boot on the other hand works on a far more basic level. Developed for use on motherboards using UEFI - Unified Extensible Firmware Interface, a new form of firmware which will replace the aging BIOS. It works by validating the digital signature of all boot components - software and hardware that starts during the bootup of a computer - to look for any tampering. If a disparity is found, Windows Recovery will start and attempt to fix the problem. This will help cut down on the number of Rootkits - malware that modifies an OS before it starts up. Secure Boot is available on Windows 8 Pro and Enterprise

Out-of-date devices connecting to network One of the more common trends in the past couple of years is employees wanting to bring their own devices to work (BYOD). While there are many benefits to this, a device that an employee brings in which isn't up to date, or already infected, could pose a huge security risk. One way IT can manage this is through an approved list of programs that can be centrally managed.

Windows 8 allows this through a feature called Applocker. Applocker is an application control program that allows an administrator to create either a white (allowed) or black (not allowed) list of apps users are allowed to download on a company controlled system. If you create a BYOD policy where an employee can bring in their own device, but have to connect through a virtualized desktop, managed by the company, this is a great way to ensure malicious apps and unapproved programs aren't downloaded and that company security is maintained. Applocker is available on Windows 8 Enterprise.

These are just a few of the common security issues faced by companies, and how Windows 8 can protect a network or system from them. If you're thinking of upgrading to Windows 8, please contact us.

Published with permission from TechAdvisory.org. Source.

Topic Security
September 21st, 2012

It used to be fire and thieves that destroyed or stole all your precious and important possessions. While these two things still happen, the more modern equivalent is having your various Internet accounts hacked, information deleted or confidential information stolen. There are two recent cases of this happening, both involving Apple and Apple’s products, which go to show that even Apple users can be targets.

Here’s a brief overview of the two high profile Apple security breaches and seven steps you should take to prevent these from affecting you.

Mat Honan’s problem Mat Honan is a writer for Wired, who in early August had nearly his whole digital life wiped off the map. His article on Wired is a fantastic and scary read, we highly recommend it. To summarize, he had the majority of his website accounts linked together, with one account linked to many. Hackers were able to get into his iCloud account by taking advantage of Apple’s lax password reset.

To begin with, the hacker wanted to take Honan’s Twitter account. They noticed that he had a Gmail account linked to Twitter, and from there was able to find that an Apple account was linked to the Gmail account, as a secondary account. To get access to the Apple account, they reset the password, which requires a billing address and the last 4 digits of the card registered to that account. The card number came from hacking into Honan’s Amazon account, which shows the last 4 digits of the card.

From there, it was a simple step of resetting the Apple account and shortly thereafter the Gmail password, sending the Gmail reset to the registered Apple account address (the secondary address on the Gmail account). Once in control of the Gmail account, asking Twitter to reset the password using the Gmail account and Bob’s your uncle, the hacker had access to the Twitter account.

Apple UDID leaks In early September infamous hacker group Antisec, related to the hacker group Anonymous, released over 1 million Apple UDIDs. A UDID, Unique Device Identifier, is the code Apple applies to all devices to be able to identify them. Upon the release of the UDIDs, Antisec announced that they had come from a breached laptop, owned by the FBI, and that the FBI was using the UDIDs to track users.

While it’s not known exactly where the breach came from, security experts have been able to prove, to a 98% surety rate, that the UDIDs came from Blue Toad, an app developer that had a digital breach previous to the release of the UDIDs. Blue Toad’s CEO has come forward acknowledging the leak and noted that the company is sure the info came from them, and not the FBI.

While it can be alarming that UDID were out there, users can be assured that passwords were not exposed, as the UDID tends to store information like account name, phone number and address. Yes, contact information is out there, which might raise concerns,  but don’t kid yourself, this information, or most of it, is already readily available on the Internet anyway.

With these two, fairly serious incidents, iPhone users are right to be a little wary, and should be taking steps to insure their information is secure. Related to these two events, here’s seven steps you can take to minimize the chances of this happening to you:

  • Unlink all essential accounts from one another.
  • Set up an email account that’s only used for other account resets.
  • Regularly back up all your devices onto a secure hard disk.
  • Change your password regularly and use two-factor authentication if available.
  • Don’t have the same username or password for all accounts.
  • If the information isn’t necessary for your account don’t provide it.
  • Delete and never store any credit card numbers.
If you have any questions or concerns about the security of your accounts or systems, please don’t hesitate to call us.
Published with permission from TechAdvisory.org. Source.

Topic Security
September 13th, 2012

What do the IFC (International Finance Center) in Hong Kong, HKPD Riot Police and Apple have in common? During the release of the iPhone 4s, crowds got a little out of hand at the Apple store, located in the IFC, forcing the HKPD to send crowd control experts - riot police - in to keep the peace. Pretty amazing if you ask us. This year, the new iPhone caused long lines, but the police weren’t needed. The question is though, what is the iPhone 5 worth for your business?

Here’s an overview of the iPhone 5 and the changes it brings with the new version.

New version of iOS As has become tradition, a new iPhone means an update to the operating system. iOS brings some features like a modified user interface, deeper iCloud integration, a new maps app, a digital wallet and many more. At this time, the maps app is good, but will need a lot of work to compete with Google Maps, while the digital wallet has yet to really be tested. To provide iPhone users information about businesses, Apple integrates Yelp information, so it will help you if you have a presence on Yelp.

Bigger screen The iPhone 5 has a 4-inch screen, when measured from top-left to bottom-right. This extra screen space allows for an extra row of icons and a better landscape view. The retina display makes a comeback and produces some of the highest quality images on any mobile phone. The bigger screen also means you will be able to see more of a document, web page or any new program.

Is the extra screen space worth upgrading from older iPhone models? Yes, ask any Android user who has upgraded to the now standard 4-4.3 inch screen and they will tell you that they don’t know how they coped with a smaller screen. The same can be said for the iPhone.

More battery power An important factor to consider before buying a smartphone is if the battery will last through your whole work day. Many iPhone 4 and 4s users know that their phone could get through a day of minimal use, but make calls or put the phone through it’s paces and a mid-afternoon top-up is needed. The battery for the iPhone 5 is bigger and according to Apple you should be able to get up to eight hours of surfing the web out of the phone.

Actual reports have been mixed from poor to amazing, with most reviews stating battery life is better than the iPhone 4, meaning you should be able to get you through a day of moderate use without needing to recharge.

Faster processor The iPhone 5 has a new processor, called the A6, which is touted as being smaller, but nearly twice as powerful. This means that the phone will run faster, open apps quicker and be able to run more advanced apps. As of the launch, there aren’t a wealth of programs that utilize the new processor’s power, but give it a few months and you’ll see some highly useful programs that parallel those found on the computer.

New connector If you are like any other modern worker, you probably have at least one laptop, two phones, an mp3 player and maybe a tablet. This can amount to a number of cables and cords that can be hard to keep track of. Apple isn’t making your life easier, as they have introduced a new connector. The connector is pretty cool, as it’s smaller and double sided, meaning you don’t have to worry about which way you plug in the device, both sides will work. The downside to this is you have to buy adaptors to use old cords, which cost around USD$30 each.

LTE support LTE is a new form of wireless communication that’s widely thought to be the next version of mobile communication. Most networks in the world use 3G; LTE is commonly known as 4G, and is currently available in, or coming soon to, a large percentage of countries. The iPhone 5 can connect to LTE networks allowing users to benefit from super fast Internet speeds, and supposedly improved connections.

Durability One of the most common complaints about modern phones is that they are somewhat fragile. Most people have dropped their phone at least once, many have had screens replaced. A drop test conducted by the Android Authority has shown that the iPhone 5 is durable, with three drop tests from different heights showing little damage. If you err on the slightly clumsy side you’ll be glad to know that the iPhone 5 appears to be more durable than other models. In general, the iPhone 5 is an evolution more than the proposed revolution, but it’s a development that should be good for businesses users who pick one up. The biggest barrier might be price, which is the same as the iPhone 4s. If you’re looking to upgrade, contact your mobile provider, or let us know, as we may be able to help.

Published with permission from TechAdvisory.org. Source.

Topic Security
August 22nd, 2012

One of the main issues that puts off a large number of businesses is how secure their data is in the cloud. If a company uses a cloud service they have no choice but to trust the provider with their data, and recent attacks have shown that some cloud provider technology isn’t as secure as it needs to be, potentially putting your data at risk.

In this year alone, nearly every major cloud provider has had issues with their services. From natural disasters to hackers, companies have seen their data exposed or unavailable, and this isn’t the first time this has happened. In 2011, Sony Entertainment had nearly 77 million accounts hacked, exposing user’s information, Dropbox had numerous service outages, and Gmail had a 30 hour outage that resulted in 44,000 accounts being lost. The list goes on and issues since 2011 go to show that cloud providers and their systems aren’t invulnerable.

Despite numerous attacks and problems, many data centers where cloud providers have their servers are physically secure. Google’s recent security video is a good example of how secure the physical locations are.

When companies talk about cloud security however, they don’t just talk about how secure their physical location is, they also strive to protect against three other elements:

  1. Service outages
  2. Confidentiality of your personal information and control over who can access it
  3. Privacy of banking details and other related information
By focusing on these four factors cloud providers are able to provide close to 99% security. However, many companies are still at risk when using the cloud and this risk actually comes from inside the company. Nearly every cloud service requires a password to access, but scammers know this and they can attack other services, or your company, to get you to give up your password. Once they have obtained this your data is compromised regardless of where it’s stored. This is what happened in a latest security issue with Dropbox.

If your company utilizes cloud services there are a number of things you need to be aware of when it comes to security:

  • According to all cloud providers, liability for sensitive data stored in the cloud rests with your company, not the provider.
  • Some cloud vendors provide reports written by a neutral third party on the security of their service. These should be taken into account when looking for a provider.
  • As with anything online, you should be taking steps to backup data stored in one cloud to a secure physical location.
  • You should establish a process that encourages your employees to change their passwords at least every three months.
Do you have cloud solutions in your company? If so let us know what your concerns are about security. If not, then let us know why.
Published with permission from TechAdvisory.org. Source.

Topic Security