Data Backup

SMBs need to take cyber security more seriously, study shows

According to a new study, a large proportion of small business owners in the United States are laboring under a misapprehension regarding the true state of cyber security. More than three-fourths of respondents indicated on the survey that their own business can be classified as “safe” from the threats that exist in the current cyber environment. If this were actually the case, it would be excellent news because it would mean that most small businesses had already enacted robust measures to ensure data security and integrity.

Unfortunately, however, the same survey indicates that 83% of respondents lack any formalized plan for cybersecurity needs. This means that small business owners and managers are taking some measures to fight against malware such as viruses, worms, bots, and Trojans, but these measures may be lacking in several key regards. A program without a true plan is often carried out on a haphazard basis that leaves large sectors of an organization vulnerable to threats. Just as importantly, organizations without a robust and consistently enforced cyber security plan are poorly positioned to respond effectively to the constantly changing threat environment that is a reality in the modern business world.

The survey in question, released this week, comes from the National Cyber Security Alliance and involved more than a thousand small and medium-sized businesses in the United States. The timing of the report’s release is not coincidental; October is National Cyber Security Awareness Month, a time during which businesses of all sizes should review their current plans and procedures in an effort to improve their ability to maintain full business continuity even in the face of emerging cyber threats.

“We want U.S. small businesses to understand they cannot completely remain safe from cyber threats if they do not take the necessary precautions,” explained NCSA Executive Director Michael Kaiser. “A data breach or hacking incident can really harm SMBs and unfortunately lead to a lack of trust from consumers, partners and suppliers. Small businesses must make plans to protect their businesses from cyber threats and help employees stay safe online.”

Robust protection requires the advice and assistance of computer safety specialists and can be provided as part of an overall managed services model of IT support.

Antimalware efforts: the importance of early detection

Small- and medium-sized businesses utilize a variety of methods to promote computer protection. From firewalls to carefully assigning permissions only to users who actually need them, data loss prevention usually consists of a multi-tiered approach. Ideally, this type of layered approach will completely prevent the intrusion of malware and viruses into the systems a business depends on. Unfortunately, however, the reality is that some malicious software will find its way past a firewall. The key to preventing damage to the company’s computers and the data they house can then be summed up in two words: early detection.

Scanning software is instrumental in these early detection efforts. Noticing the presence of viruses,worms, bots, Trojans, and other forms of malware before true damage can be done is a central tenet of data loss protection – along with, of course, a robust system of backups so that data recovery can proceed if the worst case scenario comes to pass.

Early detection: two types of scanning

A strong antimalware system needs to be able to perform two types of scans: event-based and scheduled. Early antivirus programs generally only used the latter approach. Users could configure the software to perform targeted or full-system scans at pre-determined intervals. While this certainly did help to catch viruses, it cannot really be considered “early detection,” not even if the scans are configured to run every day. This is because during the interim between detection scans, many viruses had plenty of time to wreak havoc on a system, performing actions such as reassigning permissions, harvesting data for useful information such as credit card numbers or passwords, or even erasing huge sections of the hard drives attached to the computer.

True early detection requires scans that are triggered by system events. Instead of accepting all email and scanning it later, for example, the arrival of an email will immediately cause the system to scan incoming files. If a problem is detected, the email can be instantly quarantined, which in most cases will keep the virus or malware attached to it from being able to cause damage to data or systems.

It’s Time for a System Audit

Are you concerned your AntiMalware and Data Protection measures are out of date or need to be more robust?  Take advantage of Great Lakes Computer’s FREE OFFER for a proactive review of your computer network systems and security.  Gain the knowledge you need to be able to manage your system’s integrity and security.

Admin Rights Can BackFire on You!

Many employees who use computers routinely as a part of their daily workflow prefer to have administrator privileges over their machines so that they can install software as needed without having to wait for an IT department to provide them with services. While this strategy can provide some benefits in terms of employee satisfaction and at times, productivity, it can backfire badly when it comes to one particular category of software: antivirus and antimalware programs. For several key reasons, these types of programs are best installed and administered on a company-wide basis.

Coordinated updates

When employees manage their own antivirus programs, they may not update them on a regular basis – some workers may not ever update them at all. This obviously compromises data security. A company-wide strategy, in contrast, means that not just virus and malware definitions but also the engine programs themselves will receive regular updates.

Moreover, all such updates can be scheduled to occur at the same time – an approach that when done correctly can keep software updates from interfering with ordinary workflow. With a company-wide strategy, for example, machines can be scheduled to download and install updates seven days a week at 2 a.m. Few employees on their own would be diligent enough to update antimalware protection daily, and even those who are would have to interrupt other work tasks to do it. A coordinated, company-wide strategy solves both these issues at the same time.

Inter-program conflicts

Another reason for a coordinated antimalware strategy is the unfortunate fact that when two or more antivirus or antimalware programs are installed on the same machine, it can result in serious conflicts that slow down system operations or even cause the programs themselves to occasionally fail. Employees seeking to be diligent may install two antivirus engines and believe this is a good thing, but it takes a computer safety specialist to know when it is appropriate to use multiple antimalware strategies. Once again, a company-wide solution is the best way to guard against inter-program conflicts.

Read some more information from the source of this post at: http://www.business2community.com/tech-gadgets/10-tips-for-keeping-your-pc-healthy-online-0270516