Blog

April 13th, 2012

One issue that’s gaining steam, especially with SMEs, is business continuity planning. Many companies are starting to develop plans so that they can continue to operate through both problems large and small. If you’re one such company, and are stuck at the point where you need to choose between software and templates, we have some advice for you.

The decision between templates and software can be a tough one to make, as whichever one you choose, you’ll be using and relying on for a long time. To help you we’ve covered some pros and cons on both choices:

Using Software If you choose to go with a software program, you will be walked through the whole process allowing you to develop a useable plan. Another benefit of using software is that you’ll be able to develop reports if needs be.

The drawbacks of using software include cost, inflexibility and learning time. For the most part, business continuity planning software is not cheap, and at times can be inflexible due to limits within the program. If you have a niche need, the software may not cover it. In addition, as with mastering any program, the learning curve can be quite steep.

In general, using software would be advantageous for companies that have a bigger budget for the development of a continuity plan. Software is also a good bet if you don’t have staff who are experts in continuity planning, or if you operate in an industry where a continuity plan is necessary, e.g., companies working with healthcare insurance, or manufacturing companies that have introduced ISO 9000.

Using Templates If you feel that your company is not ready for software you can use templates to help you develop your plan. These solutions are mostly written plans that you adapt to meet your business needs. They’re useful if you’re just starting to do continuity planning, as they provide a normally solid foundation, and are generally a lot cheaper than software.

A limitation to using templates is that they can be a little too basic at times, and may not meet your needs. Granted, most plans will follow a basic structure and your developer will need to adapt some steps for your relevant region and industry.

As each industry is different, it’s hard to make a recommendation on what type of planning style companies should take. We recommend you take your time, do your due diligence and weigh out what’s best for your business. No matter which method you choose to go ahead with, ensure that it’s easy to implement, and that you’ll be able to teach your staff how to run the plan.

If you feel really lost or are not sure what to do, talking to professional consultants could go a long way in helping you develop a plan. If you’d like to learn more about business continuity planning please contact us - we are happy to help.

Published with permission from TechAdvisory.org. Source.

April 12th, 2012

Does your company use cloud storage services or peer-to-peer (P2P) networks for the storage and sharing of data? Many businesses are now using both these services in an effort to make work less complicated. But did you know that there are potential issues in relation to recoverability and security of data?

With the seizure of a number of cloud storage and sharing websites, including Megaupload, and the seemingly omnipresent malware in P2P files and the shaky security in relation to P2P networks, businesses have had their hands full staying secure. Do you know what your options are when it comes to data security?

Cloud Services Knowhow The recent seizure of Megaupload’s files and servers by the US Government caught many people and businesses unprepared. While Megaupload’s main purpose was file sharing, it was found that a large number of organizations were using their services to store files. If you had files stored on Megaupload, the chances of getting the files back are non-existent.

It needs to be pointed out that many cloud services don’t guarantee that files stored on the service will be recoverable in the event of a crash, or disruption in service, e.g., a government seizing servers. If you read the user agreements of a number of major cloud services, they all have clauses stating that if data stored on their service is lost for any reason, it’s gone forever, and the hosts can’t be held liable for losses.

Risks of P2P With high speed Internet widely available at low prices, P2P file sharing has become incredibly popular, it’s almost uncommon to find someone who has never used a P2P service. If you or your employees use P2P at your office, there are a number of potential security threats you should be aware of:

  • The unknown share: If you put a file in a folder that is shared on a P2P network, it’ll be shared with all other people connected to that folder and almost anyone can access it. This is normally done by mistake, i.e., not looking where the file will be saved when you save it. There’s also malware out there that will move files into a shared folder which the developer of the malware can find and upload with ease and without the user knowing it is happening.
  • Open network: Typically P2P works on open networks: users give and share. What this means is that when using P2P on a poorly configured network, the whole network could be unsecure, allowing for access to other computers connected to the network.
  • Untracked data: If you share a document with another person, and they then share it with others, there is potentially, an unlimited amount of people that can get the data. If you want to take it back, it can be impossible to do so, even if the original document is deleted.
  • Storage hijacking: There’s news of malware that has been developed with the purpose of downloading illegal material onto your hard drive. This could pose a problem if the data is found, as you will be liable.
What Should I do? With regards to cloud services, as with anything that comes with a contract, the first thing you should do is gain an understanding of it by utilizing reading material such as blogs, news articles and Wikis. It’s a pain in the neck, but it’ll help you understand the boundaries of the program and your responsibilities. Remember that if you go to court to get files back from a company, and it becomes known that you didn’t read the agreement, you’ll probably end up losing that case.

Second, it’s not recommended to keep single copies of data on one cloud service. Chances are high that in your business, you store your data and backups in a place separate from the computer. This makes sense with the cloud as well - keep your data with a number of different cloud services. If it’s important enough, have physical backups of what you put in the cloud.

For P2P networks there are also a number of steps you can take to protect the data on your network:

  • The most obvious one is to ban employees from using any file sharing services outside of your network.
  • If you do allow file sharing, it’s a good idea to establish and strictly enforce a protocol for this. You should also set which users are allowed to share files, and what files are appropriate to share. Be sure that all staff are aware of your policy and the measures that will be taken in the event of any deviations.
  • Develop a system to classify documents by whether or not they can be shared, and who they can be shared with.
  • If you work in an office where you need to share files, but don’t want to use a P2P network or the cloud, and are unsure of other solutions out there, don’t worry. There are companies that specialize in document sharing solutions that should be able to provide you with assistance.
The most important thing is that whatever the situation is, you take action to try to solve the problem while frequently revisiting the actions to ensure that they are working. If you’d like to learn more about document sharing over the cloud, or via P2P networks, give us a buzz. We’re more than happy to help.
Published with permission from TechAdvisory.org. Source.

April 11th, 2012

If you have a smartphone, you no doubt use it for more than just SMS messages and phone calls, and with today’s 24/7 work demands, you’re probably using it for the odd bit of work too. The next step is to then use your smartphone, or other mobile device, while at work, in place of or in addition to your normal desktop or laptop. This last step is becoming known as BYOD, or “Bring Our Own Device”. Is BYOD already happening at your place of work?

When employees use their own device for work, it can be hard for their company to manage what the user is doing, after all it’s a personal item. Add to this the growing number of malware programs aimed at stealing information from devices, and you’ve got an issue that’s not going to go away anytime soon.

What Exactly is BYOD? BYOD came about when businesses began to assign laptops to employees for use at home or on the road. Companies quickly came to realize that the laptops were not as secure as the desktops at the office, and that employees were also using the laptops for personal use. To address this, companies introduced security measures and procedures to keep data on the laptops safe, while limiting personal use. This worked well until the introduction of the smartphone, which has now given employees the ability to access their office data on their personal devices, and has moved them off the machines provided by the company. Because of this trend, companies are being forced to examine or implement a BYOD policy.

Pros of BYOD The most obvious benefit of BYOD is the fact that the cost of the the technology is shifted from your company to the user. Think about it: no more costly hardware upgrades and minimal to nonexistent upkeep costs, thus bringing about significant savings.

The next upside to BYOD is user satisfaction. If your employees are allowed to use their own devices, they’ll generally be more satisfied with the systems they’re using, because they’ve already made the personal choice to buy that particular device.

There are some ancillary advantages to BYOD as well, including having employees on the most up-to-date systems, as many employees will buy newer, or top of the line models. The other advantage is that the usually slow update cycle can be exterminated, employees will be in charge of keeping their devices current, not the company.

Cons of BYOD As with all stories, there are two sides to this one. The biggest disadvantage of BYOD is that you’ll lose control of the hardware, and employees will generally be more reticent in allowing other employees to use their device.

Another major issue to overcome is usage policies. As employees will be using their own device, it’ll be harder to tell them what is considered acceptable use. As opposed to when employees are using company devices you can implement a fair-use policy.

The final negative side of BYOD is of what happens when an employee leaves your company? If they’ve been using their own device it can be a chore to get the data back, let alone establish who owns the data in the first place.

So What Can I do? If you take a step back and observe, you’ll notice that smartphones are becoming more and more mainstream, and while in the short term you could say no to personal devices at work, it won’t work in the long term. It would be beneficial if you developed a BYOD plan that clearly states your expectations, and has a usage policy regarding network and data use. You don’t have to implement it right away, but it’ll help to have the plan ready, for when you do decide to allow employees to use their own devices. You could also set up a trial with some employees, observe how they get on with the devices and reevaluate your position after the trial period.

You should also establish a set point of security measures that are not optional. This is particularly important for companies that operate under set data security mandates, e.g., mandates regulating data storage in relation to point of sale and credit systems. Methods of increasing security include software that must be installed, and basic security measures such as a locked screen, or regular data backup.

It is also important to establish a process for when an employee leaves your company. Set up a policy regarding who owns what data and the steps to be taken at the end of employment. If your employee uses a device with a removable memory card, you could set up a partition - mini non-physical hard-drive within the larger physical hard-drive - on the card where data from the business is to be stored, allowing for easy access and retrieval.

Should your company go BYOD, or abstain? Be aware that this is a major trend and in the near future employees will start to push to use their own devices at work, if they haven’t already. If you’d like help setting up a BYOD plan or more information concerning security measures, please contact us.

Published with permission from TechAdvisory.org. Source.

March 29th, 2012

Most businesses have started to take social media seriously. They are spending time and effort developing their profiles and reaching out to customers. It makes sense for a business to have an online presence beyond their website. Are you taking advantage of all the available options the Internet has to offer? If not, it may be time to start.

Social media, once called a fad, has become the norm and is going to be with us for some time. A large number of companies already have an online presence, and are taking advantage of the benefits that social media can bring. Here are a number of things you can do to get your social media adventures underway.

Be Clear on Social Media It’s important that before you start looking into the different forms of social media that are out there, you are clear on what social media is, and what it isn’t. Social media is a way to meet people, and share content and ideas with them. For companies it’s a form of non-traditional marketing - think of it as soft marketing - it’s not meant to be the place where you flog your products, rather a place to develop interest in your company, so people will want to do business with you. By using social media you can show people who your company is, and connect with them on a more personal level. If you are clear on what social media is from the beginning, there’s a higher chance that you’ll be successful when you develop your online presence.

Before You Launch Into Social Media There are a number of things that your company needs to have either already done, or considered, before you jump in:

  • Have a website: It’s a good idea to have a solid website with information about your company, contact information, products and services. Most potential customers will look at your website after looking searching for you online, and before they choose to do business with you, so your website needs to provide the relevant information they are looking for. If you don’t have a website, or feel yours is lacking, it’s easier than ever to get a professional looking site. With a quick search you will be able to find some competent designers.
  • Get educated: It will be beneficial to educate yourself on current trends regarding social media. This can be done by simply going to social media websites, taking the free introduction tours and reading blogs related to the sites. Beyond that you should also research your competitors’ websites and Internet presence. Observe what content they have online, and more importantly: what they don’t have. It will also help to connect with and observe industry experts, see what they post online, and note the style and tone they use. This will help provide you with a sound knowledge base from which you can then create a more effective online presence.
  • Set goals: As with any step in business, you should have a plan with realistic goals. Aim for results that are achievable for your company. If you’re a small, local IT company that focuses on providing support for banks, don’t expect to have the same massive hype that Microsoft and Apple do. Clearly set objectives and review periodically.
  • Develop a focus: In real life, you can’t be all things to all people. The same goes for social media. You need to develop a focus on what type of online content you would like to share. You should aim to create content that your customers will want to share with people.
  • Stake a claim: You should to go to the main social media websites - Google+, Facebook, LinkedIn and YouTube - and reserve your personal and business usernames. This is important because it will make you look more professional by having the same username across all sites, and users will be able to find you easier.
  • Ask for help if you need it: While some companies make social media sound easy, it can be deceptively hard to master. If you feel lost, or are having a tough time with it, there are knowledgeable consultants out there who are happy to help.
Time to Get Social When you feel you know what direction you will take, it’s time to start developing your online profiles. It can be tough to decide which social media tools to utilize. Unfortunately there is no right answer. Most small businesses follow the crowd, and this means having pages on Facebook and Linkedin. This does not mean that you should join these networks simply because they have the most users. It is recommended that you follow what similar businesses or direct competitors are doing. If they are on one service but not another, do the same to begin with, but be on the lookout for new social media sites, or features being added to existing sites.

One Thing to Not Forget There is one really important thing we can share with businesses thinking of pursuing social media: it isn’t a turnkey operation. You can’t just, “set it and forget it.” To be successful, you need to be active by posting updates, news, and above all interacting with the people who reach out to you. After all, they are your customers. If you do establish your social presence but forget to keep it up to date, you will be the company that’s forgotten.

If you would like help with your social media strategy, please get in touch with us. We’d love to hear from you.

Published with permission from TechAdvisory.org. Source.

March 29th, 2012

Many companies are turning to Twitter to increase their online presence. This is a bit of a double-edged sword, as companies can easily reach a large amount of existing and potential clients at the same time. The downside is, if there is a negative tweet about your business, all subscribers can see the complaint. Does your company have a plan to address negative tweets?

Traditionally, the general rule regarding complaints was that a disgruntled customer or client will tell up to 20 people when they are unhappy, versus 5 when they are happy. When a complaint is made on Twitter, chances are very high it will be seen by more than 20 people. Complaints on Twitter should be taken seriously, even one complaint could damage your online reputation. Here are a few tips on dealing with this new breed of online customer service.

Ensure Team Alignment If you have more than one person looking over your social media accounts, or someone other than you looking over it, you need to be sure that they are experts on your products and services. This is important because it is them who will be responding to questions and complaints. If you don’t have an FAQ section set up, it is a good idea to establish answers to the most commonly asked questions, as well as answers or responses to any frequent complaints. This will provide you and your employees with a way to quickly handle displeased customers.

Prompt Response is Key Oftentimes, a quick response will go a long way in dampening the complaint. As people, we like to be acknowledged and when it is done promptly, we are more likely to be open. Many complaints are made when people are mad, and as such, the complaints tend not to show the whole picture. If you quickly respond, ask for more information or suggestions on what you can do to help, the complainer will often give you valuable feedback to use. If the complaint is serious, it is a good idea to acknowledge the complaint briefly, and then pursue a private dialogue. The average window to respond is 2-3 hours from the time of the complaint, so try to at least acknowledge the complaint within that time.

Personal Responses go a Long Way As with any response to complaints, it is a good idea to personally respond. If you use a company account, the response or apology will be read as insincere, and potentially make the problem worse. Many people feel valued when they are contacted from the owner’s or manager’s personal company account. In small businesses like yours, it is a good idea that someone at the very top replies. This will make it look like you care.

Word Limits, We Don’t Need No Word Limits The 140 character limit is usually not enough to explain yourself, or conduct damage control. So, don’t limit yourself to just the 140 characters. Use the space to acknowledge the complaint, and ask the person who lodged the complaint for their email so you can help them.

Pick Your Battles Remember one of the most important sayings in business: “You can’t please everyone, all the time.” There will always be people who complain simply because they can. In an ideal world, you would be able to personally address and solve each and every complaint, but chances are high you won’t be able to do that. Use your business sense about the complaints, or have a colleague look at the complaint and debate about what you should do.

With careful responses that are prompt and personal, there is a high chance you will turn the complaint into praise, and not only keep your client, but look good while doing it. If you have any questions about Twitter or any other social media tools, please give us a call.

Published with permission from TechAdvisory.org. Source.

March 25th, 2012

Keys, wallet, smartphone...These days, it’s fairly common for people to be seen using mobile devices for their work-related tasks. But with this welcome flexibility comes the daunting task of making sure that usage is properly managed and regulated.

Using smartphones for business purposes can indeed lead to increased efficiency and improved productivity, but if left mismanaged and unregulated, smartphone usage can cause more trouble than it’s worth. Here are a few tips to help you get the most out of mobile devices:

  1. Formulate a Specific Policy For IT: One common mistake many businesses make is that they lack a policy specifically for the use of mobile devices. This is where you determine whether employees can use their own personal devices for work or not, indicate reimbursable expenses and other costs, and control networks where business-purpose devices can connect to.
  2. Have a Security Action Plan: Data security is a major issue for any IT device, especially one that employees can take outside of the office. It is then imperative that any device used for business has the proper security to protect it from online attacks, and remote access features that allow it to be completely wiped, or “bricked” if said device is stolen.
  3. Consider Developing Your Own Applications: Customized applications that employees can use for their business needs can prove to be much more secure, and more efficient than other third-party apps. As they’re made specifically for you, you can be sure that tasks done through mobile devices and the corresponding output are better tailored to fit into your organization’s work flow.
If you would like to know more about how to better manage the use of mobile devices for your business, please don’t hesitate to get in touch with us. We’d love to sit down with you and discuss a possible blueprint that addresses your business’s specific needs.
Published with permission from TechAdvisory.org. Source.

March 24th, 2012

One issue that has caused business owners and managers many headaches, and possible sleepless nights, is cybercrime. Businesses are always under threat of having data or money stolen, and need to be taking actions to stop this. Do you know what you need to protect your business?

A quick Google search for “cybercrime trends” yields over 78 million results, the majority of which are likely to affect large enterprises or governments. While it is beneficial for all businesses to be aware of the major trends, there are a number of threats that will affect small businesses more than others. Here are some current cybercrime trends that SMEs should be aware of.

Mobile Malware Smartphones are becoming ever more popular, and with this popularity has come an exploding number of apps. Malware developers have been picking up on this during the past few years and there have been an expanding number of apps dedicated to attacking your phone or mobile platform. The most common type of malware on mobile devices is spyware, followed by SMS Trojans. SMS Trojans run in the background of some applications, and make international calls or text messages from the developers’ services causing huge phone bills. The final form of malware targets online payment apps on the phone.

One of the main reasons this form of malware has become so popular is due to the openness of some markets, such as the Android Market. The owners of the app markets are working to track down and get rid of the guilty apps on their marketplaces, but you still need to remain vigilant. while installing apps. Look at the developer of the app - how many times has it been downloaded? Maybe double check the app’s integrity online before installing and double check the app on the internet.

Open-Source Malware Kits A common thing malware developers do is write code for malware and then sell it to interested buyers. But a rising trend is that developers are writing malware that is open-source—any person can download and change it. The worrying thing is, many developers of already powerful malware have been releasing open-source versions of their software. This means that there will be an increase in the number of malware attacks out there, as devious developers can easily come up with more elaborate hacks.

Banking Trojans Along with the open-source malware kits, there has been an increase in the number of banking trojans—aimed at stealing account information and passwords. While these trojans have been a threat ever since banks first started offering online banking, they have become popular again as people and businesses are starting to move their online banking onto mobile devices, and the trojan software is easily accessible. This makes mobile banking apps an easy target.

With cybercrime on the increase, now is a good time to review your security, ensure its up to date and remind employees of your mobile device policy. If you don’t have a policy in place, or feel that your security is inadequate, give us a call, we are happy to help you. Remember: with good security and knowledge, there is no reason you should fall victim to cyber theft.

Published with permission from TechAdvisory.org. Source.

March 20th, 2012

Business Intelligence (BI) is not a new idea; many large MNCs and enterprises have been using BI for many years. The only problem is that the practice of BI and the software used has been beyond reach for many SMEs due to cost and complexity. This is changing as more and more companies are offering BI solutions to SMEs. Are you thinking of implementing BI into your organization?

If you are looking into integrating Business Intelligence at your company, no matter what system you choose or the size of the project, there are a number of things you need to be aware of in order to make the implementation successful.

4 Things to Know before You Start Before you start any BI project, there are 4 key BI implementation areas that you and your company will need to be clear on:

  1. Data or Information: In most SMEs there is a limited amount of data available, so you need to be sure where all the relevant data is located. This typically includes client and employee information kept on accounting systems, spreadsheets or contact manager databases, sales or business reports, industry and competitor information, and more.
  2. Technology: A large number of BI programs require technical systems that are stable and have minimal downtime. It’s a good idea to ensure that your systems meet the requirements and are stable. As with any software, be sure to do your homework and pick a system that is reliable and compatible with your business. Don’t just pick the cheapest system – pick the system that best meets your needs.
  3. Knowledge: Many SMEs have employees that wear more than one hat, and as such may not be experts in any one thing. It’s important that, when implementing BI, you have employees who understand it and the related systems. If you don’t, there are many qualified BI consultants out there you can turn to for help and training.
  4. Communication: It’s crucial that you have constant communication with the employees involved in the implementation, and that you explain what BI is, the analytics used, how to interpret what the results mean, and the actions to take.
Your Criteria To Success Once you have picked a good system, there are a number of criteria you should aim for to ensure successful implementation:
  • Align Business and Technical: It’s important that the business side of your company knows about the implementation and will actually use it. Both sides need to work together to ensure an aligned team.
  • Piece by Piece: It’s a good idea to not implement BI across your whole organization in one go because that involves far too much work and complication. Instead, look at the areas of your organization that could benefit the most from BI and start there. For the majority of organizations, Customer Service and Sales are a good choice.
  • Ease of Use: Chances are, your employees do different jobs and won’t concentrate solely on BI. Therefore, you might want to pick or develop a system that is easy to use. As a benchmark, pick a sales or business manager and, if possible, a business analyst, and see how long it takes them to learn the system. The bigger the gap between the learning time of these employees, the harder the system is to use.
  • Flexibility: It’s common knowledge that your business is always changing. Therefore, It’s a good idea to ensure that the BI system you choose is flexible and can be quickly and easily adapted to meet changing needs. If you have a rigid system, it will be successful in the short term, but a nightmare or even a failure in the future.
With planning and patience, BI will bring about an improved business and bottom line. If you would like to learn more about BI or would like help implementing it please contact us.
Published with permission from TechAdvisory.org. Source.

March 15th, 2012

Many businesses are aware that they can be targets for hackers, and take necessary precautions to protect themselves. However, there is a new hack out there that is targeting your business’s banking information through a devious method. Be prepared, this hack could pose a difficult one to eradicate.

The hack, a variation of the Man-in-the-browser (MITB) hack, is a form of Trojan horse that mainly infects a Web browser and has the ability to change a Web page, insert orders or transactions covertly. The user will not notice any change to the website. This particular hack infects user’s computers with a Shylock malware program, a new form of malware that focuses on bank accounts and financial transactions.

The user goes to a banking website, attempts to log in and is given an error message stating that security checks are being undertaken. After a few minutes a window pops up telling the user that a representative from the bank will be contacting them to go over their account details. A chat window will open up and the “representative”, who is really the hacker, will ask the user for their account information. While the user and hacker are talking, the hacker will log into the account and proceed to go to town, so to speak.

At this time, it seems like the hack is not widespread, but it is spreading, and it is one of the more sophisticated programs out there. To learn more about this or any other security threat that may have you worried, please contact us.

Published with permission from TechAdvisory.org. Source.

March 13th, 2012

The thing about the social media boom is that so many people are thinking of ways to make it better and to put a unique twist on an otherwise used and reused concept. Pinterest is one of the few that have been successful at this – which means, like in any other social media platform, businesses stand to benefit provided they use it the right way.

What is Pinterest? In a nutshell, it's something like a social media scrapbook, album, and bulletin board combined. Each interest / theme has its own 'Pinboard' where you put photos, videos, or other media that interest you.

What makes Pinterest unique is its concept, which has been consistently growing in popularity, especially with female audiences. And while Facebook and Twitter are more open to overt advertising, Pinterest takes a more conservative stance. While advertising isn't exactly prohibited, the marketing should definitely be more subtle and more consistent with a personal Pinterest profile. Here are some basic tips that will help you utilize Pinterest to your advantage.

1. Understand your market. The first question you should ask yourself is if Pinterest is something worth your time investment. Since the majority of Pinterest users are female, ask yourself if your products and services appeal to them directly.

2. Invest time. As in many other social networking sites, you need to put a personal and human touch to your Pinterest profile and in the way you interact with your audience. Log in often, update regularly, and respond quickly to any kind of feedback. Let your audience know that you're there.

3. Use other social media to augment Pinterest. Since Pinterest is less known, use your other social media accounts to point people your way in Pinterest, such as Tweeting or updating your Facebook status with your most recent Pinterest profile update.

4. Talk about what you represent. As mentioned earlier, since Pinterest isn't big on overt advertising, you need to market yourself in a different way. Talk about what your brand is all about. What do you represent? What content can you provide that would inspire your audience to share on their own Pinboards? If you're a furniture company, for example, you can try giving some tips on basic interior design and picking the right furniture pieces for spaces, with pictures or videos. What's good about Pinterest is that it challenges you to be more creative, and thus, more appealing to potential clients.

If Pinterest interests you, give us a call so we can discuss how you can maximize this new social media platform for your business.

Published with permission from TechAdvisory.org. Source.