Online Covid scams

The Online Covid scams that steal your data

There have been some shocking online Covid scams in the last 6 months. As cyber-criminals have taken advantage of businesses during the global pandemic. It is important to make sure your business is not caught out. Our new video shows you the scams you should watch out for.

Business owners targeted in Covid-19 VAT deferral scam

HMRC have uncovered a new email scam produced by hackers. The latest of many recent scamming attempts by criminals is using the topic of coronavirus alongside the subject of VAT deferrals to trick you into giving away sensitive data.

A recent article published on the TechRader website, explains how hackers continue to exploit business vulnerabilities.

Aimed at small business owners, the fake HMRC email attempts to purloin confidential information from ventures struggling to cope with the ongoing effects of the pandemic. Between March and June 2020 HMRC allowed VAT payments to be deferred. The email scam pretending to be from the Revenue tries to dupe companies affected into revealing private information including account names, passwords and payment details.

Helpful tips to avoid online Covid scams

Know how scammers may reach you. Scammers are taking advantage of the increase in COVID‑19 communications by disguising their scams as legitimate messages about the virus. Alongside emails, scammers may also use text messages, automated calls and malicious websites to reach you.

Be cautious of requests for personal or financial information. If you receive an unsolicited request for information, take extra time to evaluate the message. Scammers will often ask you to input login information, or share bank details and addresses with them. They may also request payment via bank transfer or virtual currency.

Double check links and email addresses before clicking. Fake links often imitate established websites by adding extra words or letters. If it says something like “click here,” hover over the link or long press the text to check the URL for mistakes ─ being careful not to click it. Misspelled words or random letters and numbers in the URL or email address may also indicate a scam.

Search to see if it’s been reported. If somebody has sent you a fraudulent message, it’s likely they’ve sent it to other people as well. Copy and paste the email address or phone number. Alternatively, copy the most suspicious portion of the message into a search engine to check if it’s been reported.

Not Sure What IT Security You Need?

Security is one of the most important considerations when building any network. It doesn’t matter whether you are a small business or a multi national corporation, security should be your top priority. Recently office, home and mobile networks have been targeted more by cyber criminals across the globe. As with all forms of crime, the first victims are the low hanging fruit. But the criminals are getting more sophisticated. So businesses need to keep one step ahead.

At LIS, we can conduct an IT security audit to help you identify the right level of protection for your network. Contact the LIS Help Desk for your free consultation and find out how to protect your IT network against data breaches, viruses and more.

LIS – SECURING YOUR DIGITAL WORLD

#Covid19Scams #Top10Scams #DontFallForIt

Keeping your business data safe

Keeping your business data safe: The GuideThis is the ultimate secret to keeping your business data safe. Whenever you hear of the term cyber-crime, you probably associate it with big businesses and corporations. After all, why would anyone target your small enterprise? Thinking like this could prove to be damaging and possibly catastrophic.

Small businesses are increasingly becoming the victims of cyber-attacks. In fact, Symantec reported that out of all the cyber-attacks perpetrated in 2015, , 43% targeted small businesses. Their report also indicated that the attack on small businesses has been on the rise with 2011 having 18%, 2012 having 31%, 2013 having 30%, and 2014 having 34%. That’s why we’ve written a brand new guide. To tell you about the ultimate secret to keeping your business data safe. You won’t believe how simple it is. Download your copy now.

The trend indicated above is worrying. But, remember, the reason for the increased attacks is because hackers have realized that small businesses apply little to no effort in the securing of their data. So, what is data security and how does it protect your business from potential threats?

How to keep your small business data safe?

Data security or protection, put simply, is the procedure employed to ensure that your data cannot be corrupted or accessed illegally.

The idea behind securing your data is to protect your business’s data while ensuring that it stays private. Data includes all personal and business files that are stored in the database. The process of securing data generally follows these three steps:

  • Encryption. For any data to be of any use, it has to be understandable on a human level. Encryption counters this by using a set of algorithms and mathematical schemes to scramble the information into an unreadable format. This encrypted text can only be decoded by someone who has the decryption key.
    To take it up a notch, end-point full encryption is employed. It encrypts every last bit of data in your hard disk thus giving you a very high form of protection.
  • Strong user Authentication. We encounter user authentication on a daily basis. Every time you try to login into your computer or social media account, you are required to go through a one-step verification process. One-step verification is weak and is easily hacked. A strong user authentication process will often involve multiple stages of verification making it very difficult to hack.
  • Data Backup. You have to be prepared for when the worst happens. Securing your data will never give you 100% assurance. There is always the chance that there might be a loophole in the system which may include an inside job. That is why the process of securing data also includes a backup plan. The backup will ensure that although the information may be stolen, you can always restore it.

Keeping your business data safe

Now that we know why it is important to secure your data, here are seven data security tips for small business:

  1. Adopting EMV

EMV initials stand for Europay, MasterCard, and Visa. EMV is an encrypted payment system that uses microchips in the credit card to process transactions. In addition, it also protects the information in the card. This ensures that both parties are free from fraud. Upgrade the payment system in your business to accept EMV cards. Not only will this protect your business, but it will also absolve you from liability in the event that fraud does happen.

  1. Securing your wireless network

Wireless networks attract more hackers than a moth to a light bulb. While your standard network encryption key might keep your next door neighbours from accessing your network, hackers could log into it in their sleep. This is why you need to use the strongest encryption setting in your router to protect your business. Additionally, disable the broadcasting function in order to make your network invisible. After all, they cannot hack what they can’t see.

  1. Perform background checks

At times, we might get caught up in securing our businesses against outside intrusions and fail to protect it from what is happening right in front of us. Inside jobs are the biggest threats to a business apart from cyber-crime. Price Water Coopers reported that employees orchestrated over 70% of frauds committed to small businesses.

This is why you need to be extra vigilant when it comes to selecting the right employees for your business. Check their backgrounds as these will often give a clue on what kind of person they are. In addition, be observant of what is going on with your employees. Changes in character should be duly noted as changes in their performance will often accompany these.

  1. Decentralize password access to sensitive data

Never allow one person to have access to all the passwords. The levels of entry should be distributed to different employees to minimize the risk of the data being breached. Maintain the central access key yourself.

  1. Shred business documents

Physical documents need to be safeguarded. Access to the documents should require authorization from the necessary source. This should ensure that in case a document goes missing, you can easily trail the theft process, or at least there will be someone to be held accountable.

Additionally, old records that have their information in the database should follow the correct process of discarding. The best way to achieve this is through shredding by a particular person.

  1. Upgrade your software

Buy the necessary software that will help you in this quest. These include encryption software and excellent anti-virus programs.

Good corporate anti-virus programs come in handy because hackers nowadays have automated their hacking systems. These means that bots will try to infiltrate your system, a good antivirus should take care of this. Plus don’t forget your smartphone. You should also look into protecting your mobile from viruses and this is even more important if you do work on a phone and that includes just answering emails.

  1. Data backup of your business data

Like we previously discussed, backing up your data is preparing yourself for the worst. It will save you a lot of hassle in case something does happen.

A partner you can trust

Unfortunately, these security threats against your data information are unlikely to end anytime soon. This is because the world has all but embraced the Internet. Failing to have a website for your business is just bad business practice. The caveat is that this puts your business at risk of hacking. It is therefore imperative to secure your business in all ways that you can.

Contact the LIS Help Desk today to arrange your IT Audit. We will investigate your existing systems and advise the best way forward to make sure your keeping you business data safe.

LIS – SECURING YOUR DIGITAL WORLD

#FreeGuide #CyberSecurityTraining #KeepYourBusinessProtected

Best tech for the home office

It looks like working from home is still going to be big in the future, with many of us staying at home indefinitely. So, we need all the right tech, don’t we? The Financial Times have suggested some of the best tech for the home office.

Best tech for the home office

Transforming your bedroom, living room or spare room into a home office space until further notice?
These are the top best tech for the home office picks worth investing in now

Working from home brings its own set of challenges but having the right tools on hand can help you stay productive. One of the biggest challenges of working from home is setting up a home office with the right tools. However, once you have got everything in place, it’s easier to get your work done.  

Even if you do not have a ton of space or a dedicated room to turn into a home office, you can still have a comfortable and productive work-from-home setup. All you need is a table, chair, and a few key pieces of tech.

Best tech for the home office: The essentials

We have compiled this handy list of the best work-from-home tech to help you increase your productivity. The main tech essentials everyone needs to work remotely are reliable internet and a laptop, but we also recommend getting a monitor, so you have a bigger screen to work from as well as a decent keyboard and mouse. With these gadgets, you will feel much more comfortable working than you would if you had to squint over your small laptop screen all day.

Beyond those main tech gadgets, you may also want to get a few more accessories, so we have added others that are enjoyable to have, including everything from headphones and speakers to webcams and smart lights.

Wireless mouse Wireless mouse

Logitech’s MX Master Wireless Mouse is our top pick for the best computer mouse for good reason. With an ergonomic design that is comfortable to use for hours on end and you can customize the functions of its buttons and the speed of the scroll wheel. It helps limit the amount of wrist and hand fatigue at the end of a day. It’s also wireless, so it’s an excellent mouse to have in your home office

Bluetooth keyboard Bluetooth keyboard

Logitech’s K380 Multi-Device Bluetooth Keyboard has a compact design and the keys are responsive for typing. It does not have a number pad as this is a no-frills option. It is wireless, too, so for the small home office setup doesn’t look cluttered by a bunch of cables.

Gel wrist rest for your mouse Gel wrist rest

To limit wrist fatigue use Kensington’s ErgoSoft Wrist Rest. It is essentially a small gel-filled wrist pad that you can position exactly where you need it. The sticky underside keeps it from shifting around on the table. Ideal to have the option to angle it or remove it as needed throughout the workday.

A conference speaker phone conference speaker phone

Unless it is a quick call, using headsets or a phone against your ear is not ideal. Terrible sounding speakers on a phone or laptop is also not great. Use the PowerConf Bluetooth Speakerphone from Anker. Designed for group conferences and is portable. Due to the sound quality it produces and that has six microphones, it can pick up voices clearly regardless of where in the room.

A comfy office chair to plant your bottom office chair

Are you dealing with back pain? Long sitting hours in your office chair could be a killer. Why don’t you think about something else?.

It’s entirely too easy to spend a fortune on an office chair. An affordable option is the Space Seating Professional AirGrid.

A mid-back managers chair is upholstered with an AirGrid mesh-back with black eco-leather seat. Features built-in lumbar support, pneumatic seat height adjustment, and 2-to-1 synchro tilt control with adjustable tilt tension.

Advice from the experts

Some of the best tech for the home office you need to work effectively from home is obvious. Powerful laptop: check. Reliable printer: check. Fast broadband: check. But there are other gadgets that, while you can get the job done without them, will make a difference to how effortlessly you breeze through your to-do list.

However, how do you choose the best option to suit your needs? What do you do when your tech stops working? Have you got the right solutions in your office to keep you work effectively and securely? Contact the LIS Help Desk to discus the best options for your business. With 25 years’ experience, we are here to help, advice and listen to our clients. Le us be part of your team and help you run your business.

LIS – SECURING YOUR DIGITAL WORLD

#WFH #AnywhereOffice #TopTech

Successful security audit

Successful security audit for business

How can your business manage a successful security audit? IT audits—no one enjoys them, but they are a critical part of today’s IT security solutions. Audits are necessary to keep your company’s network and assets safe and secure.

Whilst it is true a successful security audit is necessary, dealing with outside auditors can be a less than pleasant experience. What happens if they make a mistake? What if they don’t do their work properly? Then as the leader of the IT department, you’ll bear the responsibility, especially if an intruder subsequently makes their way into your systems.

Is there a way to have a successful security audit, even when bringing in outside auditors? The answer is yes, when the audit is done in the right way and with the right auditor.  In a recent article by Mark Weir from from Techrader, he asks how much security is enough?

Successful security audit

Cybersecurity is a major concern for businesses, especially since hackers are getting smarter and bolder. To protect your company, a robust cybersecurity strategy is vital.

Establish security through annual audits

While security audits are important, many companies fail to conduct annual audits on their networks. The reasons for this are many. Some view this as unnecessary—if they’ve not suffered an incident, then they must have strong enough security. Another reason could be the expense of having an audit each year.

While these reasons may seem understandable, the fact is that businesses are facing more security breeches than ever before. This is true for businesses of all sizes—from corporations down to small businesses. Now is the right time to ensure your network is secure, rather than waiting to be hacked.

If your company has never conducted a security audit, then it’s time to implement annual audits. You might think of an annual security audit as being similar to having a physical each year. The doctor does a first physical exam and uses this as a comparison for future physicals. When something is different in a subsequent physical exam, then it must be investigated.

Spell Out Your Objectives

When it comes to finding the right auditor, it’s a good idea to develop your audit objectives in advance. These may include:

  1. Writing down a list of all company assets (including data, computer equipment, and more)
  2. Define the security perimeter: things that will be included and those that will not be included in the audit.
  3. Define threats
  4. Prioritise Risks
  5. Make a list of security improvements and best practices to eliminate threats

Now you have a list of objectives for the audit, meaning these are the areas that the auditor needs to focus on.

Choose auditors with experience

What you’re looking for is an auditor (or a team) that has real-world experience with security technology. This way they’ll have the ability to even the most elusive and serious security issues. You might also ask to see any published works they’ve written. This is another way to see if the auditor has the experience and the knowledge to conduct a proper security audit.

Instead, contact business connections and see if they can recommend some experienced security audit firms. In addition, ask each audit firm for a list of references to past clients, and then contact these firms and ask about their own experience with the audit firm. Once you’ve created a list of auditing firms, ask them for details on how they conduct an audit.

Prepare for a successful security audit

Now that you’ve found the right auditing firm, you’ll need to make sure they’re onboard with your objectives and the type of data they’ll have access to. This is where many companies and auditors have their first problem. Everyone assumes the other side knows what data will be accessed during the audit. The auditor may have their own ideas on the subject, and your company may have its own view on the matter. Never make the assumption that you and your auditor are on the same page about access to data. This is something that should be agreed to by you and your auditor before the audit begins.

In addition, it’s necessary to keep those people and departments involved in the process. You’ll want to involve the department managers who will be affected by the audit. This way, they won’t face sudden, unpleasant surprises in the course of the audit.

Successful security audit rules

  1. Managers will need to determine any specifics to limit impact on their systems. They may specify the day and time when testing will be optimal for their processes.
  2. Auditors will need an “indemnification statement” that gives them authorisation to conduct the audit. This should also be sent over to your ISP, so they aren’t alarmed by the large volume of port scans on their address space.
  3. Auditors generally expect access to certain data and documentation to analyse your network. These may include:
    • Copies of all policies and procedures (may include passwords, virus scanning, acceptable use info for employees), privacy guaranteed (to keep company users and client data secure), privileged access and incident handling.
    • Information about your network, and specification of target IP ranges
    • List of security devices (firewall, IDS)
    • List of software used on the network
  4. Ensure the auditor has a plan, and that they provide you with the details.
  5. When the audit’s completed, you can review the results to plan your future strategy. The audit report should cover:
    • Threat sources (internal and/or external)
    • Probability of an attack on the network
    • Impact of the attack (should outline how much money the company could use, would this affect the company’s reputation, and more)
    • Recommend actions to fix any problems

In conclusion

Whilst a successful security audit is not fun, they are essential. Especially when you see trends that change overtime. The audit provides essential information on the health of your network. As well as vulnerabilities that could put your company in danger.

Contact the LIS Help Desk to conduct a security audit with confidence, knowing your network will be more secure as a result. Our experienced team are always on hand to answer your questions and keep your business secure.

LIS – SECURING YOUR DIGITAL WORLD

#Security #Audit #ITSupport

Apple update threat

Unexpected Apple update threat

In a recent BBC article, James Clayton and Leo Kelion investigates the Apple update threat. Are you an ipad or iphone user? Owners of iPhones and iPads are being warned that some apps may experience glitches, due to an unexpected update. Apple only gave a day’s notice of the release of a major update to its mobile operating systems.

Chief executive Tim Cook revealed on Tuesday that iOS 14 and iPadOS 14 would launch on Wednesday. Last year, Apple announced the release date more than a week in advance.

Apple update threat

Apple only gave a day’s notice of the release of a major update to its mobile operating systems. This did not allow enough time for developers to combat the Apple update threat

Developers complain

The Apple update threat has caused havoc with developers. They have complained they do not have enough time to check for bugs and submit their products to the App Store. They include big names such as Nintendo, which has warned gamers that its Animal Crossing: Pocket Camp app will not launch after the update.

Pocket Camp commented on Twitter “We have confirmed that you cannot start the application after updating the iOS device to iOS 14. We are planning to fix this issue in an upcoming update within this month. We do not recommend you to update your device to iOS 14 until we have fixed this issue”.

How to prevent the Apple update threat

Some people’s devices are set to auto-install Apple’s mobile updates. In general, this can be a good idea to ensure that the latest cyber-security protection. In addition, features are automatically added when a device is plugged in overnight and connected to wi-fi.

However, this facility is limited to “point releases” and not the major “round-numbered” updates, like the move from iOS 13.7 to iOS 14. In this case, the new code will still be downloaded in the background on devices running versions 13.6 and above, but will not install without first seeking the user’s express permission, which can be declined.

Taking the pain out of IT

You are busy, so leave the worrying about your IT to us. At LIS we pride ourselves on keeping your IT systems running as smoothly and effectively as possible. This means you are free to focus on other things.

Contact the LIS Help Desk to discuss your aches and pains of your IT system. Consider us your IT doctor. We will diagnose your problems and prescribe solutions. Think of us as a part of your team – we might not be onsite; but we are always there for you.

LIS – SECURING YOUR DIGITAL WORLD

#Apple #iPhone #iPad #ITSupport