Author: Elizabeth Myers

You may be in charge of tech for your entire business, but that doesn’t mean you actually use all the technology you source, install, and maintain. You’re responsible for updating that tech, supporting it, and monitoring for threats, yet you don’t have hands-on with that tech day in and day out. That means you can’t fully understand what’s working and what isn’t.

To gain a holistic picture of how your technology is working, ask the people who use it every day. You can’t rely on the fact that people aren’t complaining to mean your hardware or software is running smoothly.

There are many reasons employees might not reach out to tell you what’s wrong:

• They are too busy to bring up their issues.
• They don’t know how to communicate what’s holding them up.
• They don’t realize that the obstacle they’re hitting isn’t normal for a particular solution.
• They don’t know who to talk to about the problems they are having.

So, it’s up to you to be proactive. Reach out to employees to find out what they need to do their jobs better.

Gain the employee’s perspective

If you’re in IT, you’re seldom found in the trenches with your sales or marketing. You aren’t in accounting trying to track payments or keep up with supply-chain management. So, you can’t expect to know what the lived experience of your tech is like for those teams.

Talking to your staff about what’s needed can help you learn about:

• digital solutions your people have heard about from peers at other companies;
• new technologies staff would like to try;
• roadblocks that are slowing productivity and undermining employee morale;
• low-hanging-fruit changes that you can make to improve an employee’s experience (e.g. adding a second screen may be all that a disgruntled staffer needs to see their job isn’t so bad).

You might host a lunch-and-learn, where you discuss technology with different teams, or you could send around a survey. Emailing employees directly, and asking them to answer key questions can help, too. Focus your information gathering in three areas:

• What works well for you?
• What challenges are you facing?
• What would make your life easier?

Of course, people are going to have different ways of speaking about technology. They probably don’t know a LAN from a PAN or a WAN, for example, but they will be able to convey whether they feel the network is too slow or not.

Prioritize tech solutions

Talking to people in the trenches with tech can help set infrastructure priorities. Once you’ve learned what tech is needed and what isn’t working as you’d hoped, reach out to a managed service provider for help. We can consult on new solutions and help you streamline business processes. We know tech for small businesses. Contact us today at 317-497-5500.

You’ve completed your annual phishing training. This includes teaching employees how to spot phishing emails. You’re feeling good about it. That is until about 5-6 months later. Your company suffers a costly ransomware infection due to a click on a phishing link.

You wonder why you seem to need to train on the same information every year. But you still suffer from security incidents. The problem is that you’re not training your employees often enough.

People can’t change behaviors if training isn’t reinforced. They can also easily forget what they’ve learned after several months go by.

So, how often is often enough to improve your team’s cybersecurity awareness? It turns out that training every four months is the “sweet spot.” This is when you see more consistent results in your IT security.

Why Is Cybersecurity Awareness Training Each 4-Months Recommended?

So, where does this four-month recommendation come from? There was a study presented at the USENIX SOUPS security conference recently. It looked at users’ ability to detect phishing emails versus training frequency. It looked at training on phishing awareness and IT security.

Employees took phishing identification tests at several different time increments:

• 4-months
• 6-months
• 8-months
• 10-months
• 12-months

The study found that four months after their training scores were good. Employees were still able to accurately identify and avoid clicking on phishing emails. But after 6-months, their scores started to get worse. Scores continued to decline the more months that passed after their initial training.

To keep employees well prepared, they need training and refreshers on security awareness. This will help them to act as a positive agent in your cybersecurity strategy.

Tips on What & How to Train Employees to Develop a Cybersecure Culture

The gold standard for security awareness training is to develop a cybersecure culture. This is one where everyone is cognizant of the need to protect sensitive data. As well as avoid phishing scams, and keep passwords secured.

This is not the case in most organizations, According to the 2021 Sophos Threat Report. One of the biggest threats to network security is a lack of good security practices.

The report states the following,

“A lack of attention to one or more aspects of basic security hygiene has been found to be at the root cause of many of the most damaging attacks we’ve investigated.”

Well-trained employees significantly reduce a company’s risk. They reduce the chance of falling victim to any number of different online attacks. To be well-trained doesn’t mean you have to conduct a long day of cybersecurity training. It’s better to mix up the delivery methods.

Here are some examples of engaging ways to train employees on cybersecurity. You can include these in your training plan:

• Self-service videos that get emailed once per month
• Team-based roundtable discussions
• Security “Tip of the Week” in company newsletters or messaging channels
• Training session given by an IT professional
• Simulated phishing tests
• Cybersecurity posters
• Celebrate Cybersecurity Awareness Month in October

When conducting training, phishing is a big topic to cover, but it’s not the only one. Here are some important topics that you want to include in your mix of awareness training.

Phishing by Email, Text & Social Media

Email phishing is still the most prevalent form. But SMS phishing (“smishing”) and phishing over social media are both growing. Employees must know what these look like, so they can avoid falling for these sinister scams.

Credential & Password Security

Many businesses have moved most of their data and processes to cloud-based platforms. This has led to a steep increase in credential theft because it’s the easiest way to breach SaaS cloud tools.

Credential theft is now the #1 cause of data breaches globally. This makes it a topic that is critical to address with your team. Discuss the need to keep passwords secure and the use of strong passwords. Also, help them learn tools like a business password manager.

Mobile Device Security

Mobile devices are now used for a large part of the workload in a typical office. They’re handy for reading and replying to an email from anywhere. Most companies will not even consider using software these days if it doesn’t have a great mobile app.

Review security needs for employee devices that access business data and apps. Such as securing the phone with a passcode and keeping it properly updated.

Data Security

Data privacy regulations are something else that has been rising over the years. Most companies have more than one data privacy regulation requiring compliance.

Train employees on proper data handling and security procedures. This reduces the risk you’ll fall victim to a data leak or breach that can end up in a costly compliance penalty.

Need Help Keeping Your Team Trained on Cybersecurity?

Take training off your plate and train your team with cybersecurity professionals. We can help you with an engaging training program. One that helps your team change their behaviors to improve cyber hygiene. Give us a call!

Article used with permission from The Technology Press.

Data security is a common concern when migrating to the cloud. When data is on-premises, the business secures the sensitive data, and that feels safer. But that isn’t always the case. In fact, data can be safer in the cloud than on-site at your business.

When you put together your business infrastructure, you have many business priorities. Securely storing data is only one of your objectives and could even be one that you added on later.

A cloud services provider builds from the ground up with the goal of securing data online. Thus, cloud companies typically offer far more robust cybersecurity measures. After all, the success of Dropbox or Amazon Web Services depends on securing cloud data.

A hacker can use malware or phishing emails to target the data on your business devices. With ransomware, they make it impossible to reach your data unless you pay a ransom (or have a good data backup). Yet these cyberattacks don’t work in the cloud. Bad actors might access what’s stored on an individual user’s device, but they can’t get to the larger trove of data online.

Cloud servers are also safer because they’re in data warehouses most workers can’t physically access. Plus, the service providers will usually set up redundancies. So, for example, if a natural disaster hits one server site, they will offer continued access from another site.

Some cloud service vendors will also invest in third-party testing. To keep data safe, they hire external companies to test for vulnerabilities.

More reasons cloud data is safe

Cloud data is encrypted not only in storage but usually also in transit to and from the servers. This means your information is scrambled, and a bad actor getting between your business and its cloud data can’t understand it.

Cloud service providers also regularly monitor and maintain security. They spend more resources ensuring systems are up to date. They’re also more likely to use data analytics to identify trends or threats to their security. You might do the same, but you are unlikely to do so on the same scale.

Another advantage of keeping your data in the cloud? When you move to the cloud, you no longer have to store all that data on your own hardware. You still have access to your documents, media, or reports, but the third-party provider will likely have more storage space and processing speed. So, your on-site technology may function better, too.

You’re also cutting out common cybersecurity risks. You don’t have to risk storing data on laptops, which can get lost or stolen. You also end the need for thumb drives (or USB drives), which can also be stolen or lost. Plugging in these external devices can also expose you to viruses or other risks.

How to secure data in the cloud

First off, encrypt your data. Make sure you contract with a provider who will encrypt data in transit. This makes it more difficult for hackers to get at your information.

Enabling multi-factor authentication can also help secure data by adding layers of rigor. It moves your data security beyond just asking for a username and password. We know all too well that those are often compromised or guessed.

When you move your data to the cloud, you will need to pay attention to compliance regulations. Depending on your industry, there may be particular standards for data storage. Encryption is a common compliance expectation.

It’s also a good idea to train your employees on the importance of securing data. Engaging in ongoing security awareness training can help protect your endpoints. This is particularly important with people working remotely and connecting from off-site locations.

Help with securing your cloud

Migrating to the cloud has its benefits. Still, that doesn’t make it a straightforward process. Work with our IT experts to move your data to the cloud with minimal disruption. We can help you find the right cloud service provider and assist with data backup processes. Contact us today at 317-497-5500.

No one wants to work harder than they have to. Digital transformation is one way businesses can make employees’ lives easier. Yet simply increasing the amount of technology isn’t the answer. Digital friction can actually make the workday more challenging. Read on to learn more about digital friction, its demotivating force, and how to avoid it.

Digital friction describes added challenges employees face trying to work with business technology. As businesses add more digital tools, teams must adapt to a more complex ecosystem, but problems can arise:

• Technology isn’t integrated, so there are now more steps to follow.
• Workflows grow more complicated, as there are several digital solutions to navigate.
• Employees are overwhelmed with notifications tracking, managing, and monitoring digital workflows.
• New approaches create or duplicate manual processes.
• Employees become overloaded with information thanks to the many new collaborative, digital tools.

Any of these issues is counterproductive to digital transformation. The idea behind adding new digital solutions is to streamline and simplify, but if you’re complicating the work environment, you’ll undermine productivity. You aren’t helping employee engagement and morale either. Your people grow frustrated with your fresh expectations.

Sources of digital friction

When you install new tech, you intend to save time, reduce effort, and improve productivity, but the best intentions don’t avoid digital friction. If you’re going to install digital technologies be wary of these problems:

• Poor understanding of workflow. If you don’t understand what is happening now, you can’t effectively install digital processes.
• Inconsistent workflows. When employees approach processes differently, there will be friction on new, digital solutions.
• Poor-quality data. Digital technology relies on data. A major source of digital friction is low-quality data. Employees spend too much time locating, validating, and formatting data to see benefits.
• Lack of understanding of a solution’s impact. Investing in tech for the sake of “going digital” is not setting employees up for success. You need to know what the technology can do and how it will impact employees’ daily work.

What to do about digital friction

Before even adding technology, consult with your employees. Learn their pain points and what they want from a digital solution. Find out how they are doing their jobs today. Then, you can work with an IT consultant to determine which digital offerings will add value.

Look for opportunities to integrate your digital technology. Help employees avoid information overload and being constantly pinged and notified. Take stock of all the apps and software you’re using. Identify where you are duplicating processes, especially manual ones. Ferret out the places where your people are having to work harder to do their jobs. Know that data quality is a prime culprit.

Make decisions about new digital technology based on outcomes. What do you want the software to do? How will it be used and managed? Be sure you know how this new tool you’re offering is going to help people if you want them to embrace the change.

Simplify access by ensuring employees have a positive user experience. With more employees working remotely or hybrid, they need to do their jobs on a wider range of devices.

Need help cutting digital friction? Our technology-agnostic IT experts can identify problems and increase productivity. We can also consult on legacy tech and data migration to support digital transformation success. Contact us today at 317-497-5500.