Blog

May 16th, 2012

Everywhere you look business owners are inundated by issues pulling their attention in a multitude of directions. One issue almost every owner has managed to get under control is network security. These businesses are secure from external threats and because of this, believe their systems to be 100% safe, however, they may have missed the possibility of internal threats.

In recent years the majority of security threats and compromises have come from within the company. A common threat to companies is the logic bomb - malware that targets IT systems and deletes data. As a logic bomb is introduced from within the network, the blame often lies with a disgruntled employee with full access to internal systems.

Insider threats Giving employees full access to the network when they don’t need it is a common mistake often made by companies. There’s little need for an employee who does graphic design to have access to weekly sales records. This practice could set your company up for a considerable security problem in the future.

Dawn Cappelli, an insider-threat expert at the Carnegie Mellon Software Engineering Institute stressed, "These types of insider attacks happen to businesses of all sizes, from small companies to very large corporations." This is an important issue businesses should be aware of if they want to remain secure.

Take Precautions Security threats can be a particularly harsh nightmare for small businesses, as many don’t have an IT department or staff with the technical expertise needed to maintain a secure network. If you’re one of these organizations, it’s a good idea to hire an outside consultant to help you with your network security. With consultants, it’s important that you maintain close contact with them to ensure any issues that crop up are dealt with expeditiously.

If you don’t work with an external company there are a few things you should do when you have an employee leave the company. First, their accounts should be deleted immediately and their access privileges should also be revoked. Second, if you have accounts with shared passwords, you should change them to ensure an ex-employee can’t gain access to the system.

If you’d like to learn more about internal security, and measures you can take to ensure you are safe, we are ready to help you. Please contact us.

Published with permission from TechAdvisory.org. Source.

May 16th, 2012

Respect him or not, Mao Tse-tung had it right when he said, “The only real defense is an active defense.” Businesses have taken this literally and have adopted Business Continuity Plans (BCP) to ensure that when a disaster strikes they are ready with an active plan. Many of them are prepared technology wise, but the other assets may not be so ready.

Here are six key non-IT functions and processes that need to be in place to ensure your company is ready to effectively execute your BCP.

Easy to use plans Many continuity plans have been developed mainly for the IT department, as such, they can be a little complicated to understand and follow if employees don’t have a technical background. You should aim to have a plan that’s easy to follow and can be understood by all employees.

Communicate plans Remember that your plan encompasses all facets of your organization. It’s crucial that every employee knows their role and the relevant actions to take when the plan is executed. To do this, you need to ensure that all employees have access to a copy of the plan and any changes or updates are clearly communicated.

Test plans Beyond communication, it’s important to conduct regular tests, with every quarter being sufficient. The tests should be as real as possible and span all departments within the organization. This will ensure that employees are aware of how they, and the systems, will react under duress. It’ll be beneficial to your business if the first time the employees execute the plan isn’t during an emergency.

Short term and long term plans Your BCP should consist of both long term and short term elements that can be easily adapted to meet changing business environments and the emergence of new threats. You should aim for an even mix of short and long term solutions that cover as wide a variety of situations as possible.

Ensure buy-in from all levels If you’re in the process of instituting a BCP you should ensure that the whole organization is onboard with the plan. If an employee is unsure about the validity of a part of the plan, take the time to find out why and ask for suggestions. An uninformed or uncooperative employee could be the difference between survival and failure in a disaster situation.

Update and Review After every test, staff turnover and technological update, you should review the plans and make changes if necessary. Essentially, if anything in the company changes, review and update the plan. Remember: just because you have an effective plan this month, doesn’t mean it’ll be so in the future.

Continuity plans are only as strong as the weakest link. In an emergency, the last thing you want is an employee following the wrong process or be unsure of what they should be doing. If this happens, you could see an exponential growth in recovery time and costs. We’re ready to tell you more, so please contact us if you would like to talk continuity planning.

Published with permission from TechAdvisory.org. Source.

May 14th, 2012

With a large number of technological devices and access to an incredible amount of data, our collective attention span is shorter than ever. This has posed a serious issue for SMBs. A rising number of companies and app developers are taking popular concepts and elements used in video games and applying them to business situations with the goal of holding our attention.

The term to describe this trend is gamification, but what is it, and how can businesses use it?

What is gamification Gamification is the application of game design techniques and mechanics to non-game applications. Foursquare and its badges is a good example of this - users check in at locations to earn points, unlock badges and compete with their friends. Do they win anything? Nothing physical, but there’s something satisfying with competing with other people to be the best.

While gamification got its start with technological related operations, it has since been integrated by businesses of all sizes. Business that have adopted elements of gamification have seen improved user engagement and ROI.

How can businesses leverage gamification? Gamification is interesting because it can be applied in a variety of different business situations. For example, here are three such uses:

  • To increase employee engagement. It can be hard at times to keep your employees engaged while they’re doing mundane tasks. One of the most common uses of gamification is deploying badges to act as a motivator to encourage employees to put effort into their job. When an employee reaches a predetermined level they are recognized for their achievement. This will go a long way in improving engagement.
  • To create brand advocates. You can use gamification to turn your customers and fans into brand advocates. Before they start singing your praises, they need to be given a reason to do so. The best way to do this is to create a points/reward system. For actions such as purchases or reviews, customers gain points that can be spent on other services. Think of it as akin to the points system used by credit card companies.
  • To generate traffic. Many SMBs are dependent on their websites for revenue but struggle to get traffic to their site. Gamification techniques can be employed to encourage people to spend more time on, and return to, your website, almost like a modern loyalty program.
There are many uses for gamification and we’ll continue to see new and innovative ways to deploy it in organizations. If you’re interested in ways you can implement aspects of gamification in your business, or would like to learn more, we are here happy to sit down with you for a chat. Please contact us.
Published with permission from TechAdvisory.org. Source.

May 14th, 2012

In 2011, Apple released OS X 10.7 “Lion” and businesses leapt at the chance to upgrade to a feature packed OS. Now, not much more than a year later, another version of OS X, Mountain Lion, is on the way. A collective groan could almost be heard from small businesses who use Macs when it was announced, but fear not, there have been some great features announced that will make the upgrade worth it.

Here are four features of Mountain Lion that small business employees will find useful:

Enhanced communication and social media If you use OS X to access and monitor your social media accounts you’ll be interested to know that you’ll have the ability to post directly to Twitter from various apps. If you use iChat, it will be renamed: Messages. With it, you’ll be able to send messages, pictures and videos to other iChat/Messages users, regardless of the device. This could be a beneficial external and internal collaboration tool due to the growing amount of Apple users.

AirPlay mirroring If you or someone in your company gives a lot of presentations, Macs running Mountain Lion will have the ability to wirelessly broadcast whatever is being shown on the screen. To share your screen with an HDTV or Projector, you’ll need to have an Apple TV box. It works by streaming content to the TV box which is connected via an HDMI cord to the TV or projector.

Gatekeeper Security is top-of-mind for companies these days, and Gatekeeper is an extra level that businesses can implement. Its purpose is to restrict the apps that can be downloaded and installed on your computer. While many businesses should have measures like this in place, this app can act as another layer to ensure an even more secure organization.

iCloud Possibly the biggest trend in small business computing is the integration of cloud storage. Apple’s cloud storage service, iCloud, will play a prominent role in Mountain Lion, especially for businesses. With this feature, employees will be able to access data stored in the cloud using Apple’s different devices. Any changes made to documents stored in the cloud will be automatically updated in realtime, without the user having to save and update.

Mountain Lion is shaping up to be one of the best versions of OS X to date. There are numerous features that users will find appealing, and many businesses are eager for the retail release. A word of warning though, while a version of Mountain Lion is available to download, it’s an unfinished product and as such, we recommend that you hold off from installing it onto your business’s computers. If you’d like to prepare your systems for the OS, please contact us.

Published with permission from TechAdvisory.org. Source.

May 13th, 2012

There’s a big gap between what physicians thought they could do, and what they were eligible to do, to collect meaningful use incentives last year, according to a new study, which appears in the May issue of Health Affairs.

The study shows that 91 percent of physicians nationwide were eligible for federal electronic medical record (EMR) incentives in 2011. However, only 10 percent intended to apply for the program.

That number was on the low side of what the federal government had anticipated. The Center for Medicare & Medicaid Services had estimated that 10 percent to 36 percent of Medicare-eligible professionals and 15 percent to 47 percent of Medicaid-eligible professionals would demonstrate meaningful use in 2011.

According to the authors, among physicians intending to apply for meaningful use, about 21 percent were ready with the 10 core capabilities. Even in the state with the highest degree of readiness - Wisconsin - only 32 percent of physicians were ready with the 10 core capabilities.

The authors say the low level of readiness illustrates the challenges in meeting the federal schedule for financial incentives. Healthcare practices have support options, however. Your IT provider can help you if you need assistance preparing your meaningful use.

Published with permission from TechAdvisory.org. Source.

May 12th, 2012

Presentations are an integral component of everyday business and can make or break your projects. With our busy schedules, we often collaborate on presentations with other people to maximize our potential and efficiency. VMware’s SlideRocket is a great tool for presentation collaboration, and with recent integration with a cloud storage provider it has become even better.

Google has recently released its cloud storage and collaboration app, Google Drive. What does this have to do with SlideRocket? Well, SlideRocket’s full set of content authoring tools have been integrated into Google Drive. This means that users of SlideRocket can use Google Drive as another way to create, collaborate on, and store presentations.

Chuck Dietrich, Vice President of SlideRocket by VMware, commented, “Together with Google, VMware is helping individuals and businesses embrace new technologies for collaboration in the cloud era.” He went on to note that SlideRocket and Google Drive provide users with a great way to do just that.

If you use SlideRocket and would like to work with other users over Google Drive, simply log into both services with the same account and in Google Drive select Create and More followed by SlideRocket. Once you log in and integrate your accounts, you’ll have access to your presentations without having to log in to SlideRocket.

If you’d like to know more about how you can virtualize your business, or the different products offered by VMware, we’re ready to tell you more. Let’s talk virtualization.

Published with permission from TechAdvisory.org. Source.

May 11th, 2012

The key to patient-centered care - a concept that continues to evolve - is the relationship between physician and patient. Finding the balance between patient engagement and information technology, however, can be challenging.

IT has benefited healthcare practices in many ways. For example, it allows patients to service themselves when it comes to transactional exchanges, such as scheduling appointments and reviewing bills.

There are fears, however, that IT can also create distance between the practitioner and patient, reducing face-to-face contact. Here are three tips to ensure that doesn’t happen:

  1. Accept that patient-centered IT initiatives help the physician. Small practices need to adopt the same features as their competitors, including large practices as well as low-cost primary care providers such as CVS and Walgreens.

  2. Determine your needs. Patient-centered IT practices vary. Some practices use patient portals to optimize patient input. Others use email, text, video and mobile apps to create an impact across a broader spectrum of their patients' health. You’ll need to find what works best for your patient. Younger patients, for example, might prefer text messaging; older patients might prefer email.

  3. Reconsider your reimbursement model. IT advancements have patients emailing, text messaging and video conferencing their doctors without payment. That puts pressure on the physician to do more for less. This is a problem with your business model, not your IT. You can't offer services that eradicate half of your service visits or you'll bankrupt your practice.

For details, please see “Five Keys to IT and the Physician-Patient Relationship.”

Published with permission from TechAdvisory.org. Source.

May 9th, 2012

One issue that’s sparked a large amount of debate is whether or not companies should allow their employees to access social media while at work. One thing's for certain, the number of employees who actually use social media on a regular basis is large, and growing. There will come a time when companies that block social media can no longer afford to do so.

There are four distinct advantages to allowing social media:

  • Increased productivity. There have been a number of studies that have found that judicious use of social media in the workplace will actually increase productivity. A study conducted by the University of Melbourne found that employees with access to social media are 9% more productive than those without.
  • Increased buy-in. Employees like to feel trusted and empowered. If they don’t you can expect to experience higher turnover and lower morale. A good way to gain trust is to allow employees to use social media in the workplace. If an employee feels like they are trusted, they’ll be more likely to stay with the company.
  • Recruiting. Small businesses have started to use social media for recruitment, but limit efforts to one account. If you have 10 employees in your organization, each with a social media account with 100 friends, you have the potential to reach 1,000 people. This is achievable if employees are allowed to access social media at work and are encouraged to share posts.
  • Identification of business opportunities. Through the use of social media, employees in charge of sales and business development can source new clients and build fruitful relationships.
There are many advantages to allowing access to social networks at the office. If you‘re hesitant to completely open the social media floodgates, try doing so in short periods, like the final three hours of the working day.

No matter what you decide, allowing access to social media is a good practice for your business. If you would like to learn more about social media and how you can leverage it in your business, we are happy to talk with you.

Published with permission from TechAdvisory.org. Source.

May 5th, 2012

Collaboration is all around us. We see it on a daily basis in both our personal and professional lives. At work we cooperate with colleagues, managers, suppliers, customers and almost everyone we come in contact with at the office. It’s become so important that if businesses have employees who don’t mesh, their chances of success are almost non-existent.

Here are seven tips on how to improve collaboration within the office environment.

  1. Open communication. One of the keys to successful teams is the adoption and encouragement of an open communication culture. With this, teams are better able to grasp what’s going on within the company, and be more efficient contributors and team players.
  2. Use the right technology. It seems like there are a million different software and technology options out there. Some of the tools available offer some fantastic features and it’s easy to get sucked in by a flashy component. It’s important that when choosing a tool you pick one that meets your company’s needs and is easy to use.
  3. Collaboration tools must play well with others. It’s beneficial to select systems that can be seamlessly integrated with other tools and software used by your employees. If your solutions don’t work together, all parties won’t be able to work together.
  4. Employee learning is key. When you find the perfect tool to use, be careful to take time and learn how to effectively use it. Training for the users of the tool is equally important.
  5. Work hard, play harder. Teams and departments should step away from their computers and actually have face-to-face meetings at least once a week. These meetings should be a mixture of formal and informal, and offer employees a chance to come together as a team, unwind and share ideas. A team that can interact well will always work together with greater efficiency.
  6. Mobilize. The smartphone is here to stay and with each passing year the number of users grows exponentially. It’s beneficial to encourage the use of these devices, and look for mobile solutions that allow users to be a part of the group while out of the office. If you do allow mobile devices, be sure to establish a clear usage policy so employees know how and when they should be using their phones.
  7. Don’t just focus on internal collaboration. One of the most common mistakes companies make is that they focus on group participation within the business, but don’t provide adequate support for external interactions. Be sure you integrate tools that provide stakeholders with a way to connect and work with teams within the company.
With a team that interacts effectively you’ll see happier employees and higher profits: a win-win situation. If you have any questions regarding collaboration tools, or other ways to increase business value please don’t hesitate to contact us.
Published with permission from TechAdvisory.org. Source.

May 4th, 2012

Macs running OS X are often touted as the most secure machines. While OS X is definitely more secure than other operating systems, it may not be as secure as owners think. A new trojan that takes advantage of a security flaw in OS X has been discovered, and it’s a doozy. This has the potential to be a security nightmare.

If you mention “OS X” and “virus” in the same sentence, you’ll get some weird looks from Mac users. Traditionally viruses and trojans on OS X were near non-existent, but there’s a Mac specific trojan, codenamed Flashback, that has affected more than 600,000 computers. This is big news as it shows that machines running OS X may not be as secure as first thought.

Many Mac owners are unsure of what exactly the Flashback trojan is, what it does and how to ensure they’re not infected. We’re here to help clarify the situation.

What is a Trojan and What Does Flashback Do? In general terms, a trojan is a piece of malicious software that infects a computer and gives control of part, or the whole computer to hackers. The Flashback trojan takes advantage of an OS X Java vulnerability and infects computers by tricking them into downloading a fake Java update.

When the program is installed, Flashback will download and install the main trojan code without the need for permission from the administrator. From there it proceeds to hijack your browser, redirect search queries to websites developed by hackers, and then take advantage of pay-per-click advertising.

Why Should I be Worried? While this version hijacks your browser, there are far more sinister things it could do. As this trojan acts as a downloader, there’s nothing stopping the developers from updating the malware to steal passwords, banking information and other confidential information.

How do I Ensure My Mac is Clean? Apple has released an update for machines running OS X 10.6 and later. The first step you should take is to update your computer to patch the vulnerability. To update your Mac:

  1. Press the Apple logo, located in the top right hand of your screen.
  2. Select Software Update...
  3. Press Install and Restart.
While the patch will prevent Flashback from working, it won’t delete the program if you’ve been infected. The Internet security company F-Secure has developed a script that scans your computer and removes Flashback if found. Once you have downloaded the script, open and run it. The script will search your computer and place the infected files in an encrypted ZIP folder labeled Flashback_quarantine.zip.

Flashback has infected a higher number of Macs than any other trojan to date and goes to show that Macs also have security flaws. This also serves as a reminder that you should have a virus scanner and security program running on your Mac. If you have any questions regarding the security of your Mac or other devices, please don’t hesitate to contact us. We are here to help keep your machines secure.

Published with permission from TechAdvisory.org. Source.