Archive for the ‘Security’ Category

Is your company’s cloud storage secure?

Monday, August 22nd, 2016

Is Your Company’s Cloud Storage Secured?

Probably not.

The 2016 Global Cloud Data Security Study unfolds the bitter truth in cloud storage security of organisations in UK, Germany, US, Russia and other countries.. The study conducted by Ponemon Institute reported that behind the stable growth of cloud usage, companies lack necessary governance practices and security measures.

With over 3,476 IT security practitioners surveyed, only 43% said their establishments are implementing accountability measures to safeguard confidential and sensitive data in the cloud.

One of the weak points of companies is the lack of personnel charged to evaluate the cloud resources being deployed and increasingly, cloud resources deployed without security, due to loss of control over end users.

This is critical in the environment where cloud usage continues to grow in importance. About three quarters (73%) of IT security practitioners consider cloud computing applications are important to their organisation’s operation. On the contrary over half (54%) of the respondents do not agree that their organisations are committed to comply with privacy and data protection regulations in the cloud.

Ultimately, 56% of organisations are reportedly not cautious about sharing sensitive information with third-parties like business partners, contractors and cloud-providers.

The types of data at risk in the cloud are usually highly sensitive and confidential such as customer data, email, employee records, consumer data and payment information.

The paramount reason why cloud security is a challenge for organisations is that it is difficult to apply “conventional information security in the cloud computing environment.”

Another alarming revelation is that only a fifth of security practitioners are permitted at the table for decision making about data security governance. What’s more, according to the study, “Most organisations still do not have security policies for the cloud.”

On this note, Gemalto recommends adopting “encryption, tokenization or other cryptographic solutions to secure sensitive data transferred and stored in the cloud ” and said that organisations should improve compliance with data security and privacy regulations.

How docSafe can help you

For individuals working on a client-based industry like lawyers, accountants, writers, creatives and small business, you can store and access data filed in the cloud safely and efficiently. With docSAFE you can work collaboratively and exchange files with clients in the most secure way possible. You can have convenience, security and efficiency for just a few pounds each month.

Have you ever had trouble sending large confidential files through the internet safely? Or have you had the problem of how you can collaborate on a project with partners miles away?

docSAFE can help you with its secure and reliable file sharing online.
To learn more visit our site.

What do you know about GDPR?

Monday, June 13th, 2016

Screen shot 2016-06-13 at 09.29.40The new GDPR comes into effect in 2 years from now. That might seem a long way off but it is barely enough time to understand the changes and put everything into place for total compliancy. What are we talking about? The new GDPR replaces the Data Protection Act as we have come to know it. It has serious implications for any business holding customer information – this includes businesses that sell products and services and also those who monitor customer behaviour (in any way – research, social media etc) of EU citizens.

It is important on many levels – for ethical reasons obviously – you are holding someone’s personal details. However you should be aware that the fines for misconduct (and this can happen just as easily by accident than design) are severe. Previously the ICO (Information Commissioner’s Office) could demand up to £500,000 for serious breaches. Under the new rules, the ICO can fine companies up to 4% of global turnover or €20m. For more minor breaches, fines up to 2% of global turnover or €10m can be levied. This is serious stuff.

A useful article outlining this is more depth can be found in the Law Society Gazette.

There are many things to understand about GDPR but you must comply with the 6 main principles of the law, have a Data Protection Officer (employed or outsourced) and completely understand what the implications of holding data are. Talk to us and we can help. Time is ticking.

No one wants to announce a security breach

Tuesday, May 31st, 2016

Telling the world (or just your clients) that you’ve had a security breach is embarrassing and it has a huge effect on people’s confidence about your business. LinkedIn just announced such a breach and it spells nothing but trouble.

Screen shot 2016-05-31 at 10.50.08“On May 17, 2016, we became aware that data stolen from LinkedIn in 2012 was being made available online. This was not a new security breach or hack. We took immediate steps to invalidate the passwords of all LinkedIn accounts that we believed might be at risk. These were accounts created prior to the 2012 breach that had not reset their passwords since that breach.”

LinkedIn Trust & Safety Team

For an organisation that makes its living from the exchange of personal data, this is a serious issue. It means that everyone on the business networking site, all of whom have been notified of this situation, will be rethinking their membership (and if they’re not, they should be). We’re not saying ‘leave LinkedIn’ but what we are saying is that LinkedIn should enforce regular password changes and take every step possible to prevent this happening again.

LinkedIn has 433 million members – that’s a lot. That’s also a lot of data to be unsecured. The data affected was email addresses, passwords and member IDs. Hackers don’t always target such high profile sites, they go after any site randomly – accessing information, placing hidden links, installing hidden ‘back doors’ to your site and adding malware to infect your visitors. We were handed a problem website recently only to find 55,000 hidden links in a 100-page site.

Don’t risk your own security, no matter what size of business you are.

Don’t risk having to tell all your clients that their data has been exposed.

 

Are you safe from computer hackers?

Thursday, May 12th, 2016

Some scary numbers here…

Two thirds of large UK businesses experience computer hacking
Nearly seven out of ten attacks on all firms involved viruses, spyware or malware.
Record £1.9bn government investment to protect UK but industry must act to help protect themselves

And the new National Cyber Security Centre will launch in the autumn 2016.

Why?
Britain’s businesses are being urged to increase protection from cyber criminals after government research into cyber security found two thirds of large businesses experienced a cyber breach or attack in the past year. The research also shows that in some cases the cost of cyber breaches and attacks to business reached millions, but the most common attacks detected involved viruses, spyware or malware that could have been prevented using the Government’s Cyber Essentials scheme.

The Cyber Security Breaches Survey found that while one in four large firms experiencing a breach did so at least once a month, only half of all firms have taken any recommended actions to identify and address vulnerabilities. Even fewer, about a third of all firms, had formal written cyber security policies and only 10% had an incident management plan in place.
Minister for the Digital Economy Ed Vaizey said: “The UK is a world-leading digital economy and this Government has made cyber security a top priority. Too many firms are losing money, data and consumer confidence with the vast number of cyber-attacks. It’s absolutely crucial businesses are secure and can protect data. As a minimum companies should take action by adopting the Cyber Essentials scheme which will help them protect themselves”.

Results from the survey are being released alongside the Government’s Cyber Governance Health Check, which was launched following the TalkTalk cyber-attack. It found almost half of the top FTSE 350 businesses regarded cyber-attacks as the biggest threat to their business when compared with other key risks – up from 29 per cent in 2014.
The Government’s Cyber Governance Health Check also found that:only a third of the UK’s top 350 businesses understand the threat of a cyber-attack; only a fifth of businesses have a clear view of the dangers of sharing information with third parties; and many firms are, however, getting better at managing cyber risks, with almost two thirds now setting out their approach to cyber security in their annual report.


Both surveys form part of the Government’s rigorous approach to tackling cyber-crime, which will see £1.9 billion invested over the next five years.
The Government is encouraging all firms to take action: the 10 Steps to Cyber Security provides advice to large businesses, and the Cyber Essentials scheme is available to all UK firms. The Government is also creating a new National Cyber Security Centre offering industry a ‘one-stop-shop’ for cyber security support.
A new national cyber security strategy will also be published later in 2016 setting out the Government’s plans to improve cyber security for Government, businesses and consumers.

More than a security blanket

Monday, April 18th, 2016

When you’re considering your internet security, you may give it a passing thought and assume all is safe in your world – “Yes, we have passwords in place and I’m not sure anyone would want to access our data”. But stop for a moment and think about how your professional practice would be compromised if there was any kind of security breach. If your clients’ information were to be accessed, for whatever reason, you would undoubtedly be out of business.

Security exists on many levels. We have basic passwords to provide a first layer of protection. If you are more aware, you may have other layers too. This level of security is in place for intended security breaches. However, what about human error? What about the times when your staff (or you) send client information to the wrong place? It happens, we’re human. We make mistakes. You cannot afford for these mistakes to happen so emailing simply isn’t secure enough.

What about internal security? Are your personnel records safe from prying eyes? Is your precious client data available to everyone? Are you protected against the ever-present threat of viruses? Do you allow staff to use their own memory sticks, disks, drives and CDs? Do you have all of this kind of removable data accounted for?

“Cybercrime and threats to computer systems have become a major concern of businesses around the world. Our growing reliance on IT and the internet has greatly increased the impact of hacking, security failures and the loss of systems. At the same time, cyber attackers have become more sophisticated and organised.” (ICEAW)

We specialise in providing all kinds of IT solutions for professionals. But most of all, we specialise in providing secure IT solutions. Because it really matters.

Take the next step, call us today
0121 794 0685