Hollywood would have us believe that cyberattacks are elaborately planned and use expensive, sophisticated tools developed by James Bond’s tech guru, Q. Yet in real life, most hacks are nothing like that. The cybercriminals often simply fool a human to gain access. [Read more…]
The risk of a cyberattack is still growing globally, and no business is too small to hack or breach. It’s important to plan for business continuity and disaster recovery and to do so in advance so you’re prepared for the worst. But first, you’ll need to understand the difference between the two. [Read more…]
There are many acronyms in the IT world. Two common ones are SaaS and MSP, which stand for software-as-a-service and managed service provider, respectively. The bigger question is what the differences are between these two and why you would need one or the other. Here’s help. [Read more…]
What to Do If You’re a Ransomware VictimYou’ll know if you’re a victim of ransomware. Often you’re met with a red screen telling you your business files are encrypted. You won’t be able to do anything on the computer, although the cybercriminals will provide helpful instructions for how to pay up. How nice. Here’s what to do instead if you’re the victim of a ransomware attack. [Read more…]
Your business may not be supplying oil to the United States, and you may not even be in the critical infrastructure business, but don’t think that means ransomware can’t happen to you, too. This article shares lessons learned from a headline-grabbing event, and they’re applicable to businesses of all sizes in all industries. [Read more…]
There’s an app for that! Even for business purposes, you can bet this is the case. Yet a small business may be using online applications without understanding the risks. Here’s help. [Read more…]
An old-time radio show used to start with the promise “The Shadow knows!” Yet when it comes to shadow IT, the problem is the exact opposite. Shadow IT is the stuff employees download onto a business system that IT doesn’t know about, and it can be a big problem.
You may have an IT policy telling employees not to download unsanctioned applications, but they want to boost their productivity, or perhaps they prefer to work with an app they already know and love. So, they get a tool or service that meets their needs without telling IT.
The employee may have the best of intentions. They want to work better for your business. They don’t see the harm in adding that convenient app to their computer. Or they don’t think it’s a big deal to use their own device to complete their work (even if unsanctioned). Maybe they want to be efficient, so they use a personal email account to conduct your business.
Any of these examples are part of Shadow IT, and it’s running rampant. In Frost & Sullivan research, 80% of employees admitted they had used non-approved software. Even 83% of IT workers were using non-vetted Software as a Service (SaaS) applications. So, what’s the big deal? We’ll cover that next.
First, if your business is in a regulated industry, Shadow IT could put you at risk of noncompliance. That unsanctioned device may not be encrypted. Sharing business data over a personal email would be a big no-no in a healthcare or banking space. Shadow IT certainly undermines audit accountability.
It can also drive up IT costs. Say accounting doesn’t know that the business has already paid to use certain software. So, they pay for it again out of their own budget.
If IT is unaware of the Shadow applications or devices, they can’t manage the vulnerabilities. The business doesn’t know customer data or personal identification information about employees is at risk.
And there is a greater threat of a data breach or ransomware attack. Employees downloading a third-party app could inadvertently give a hacker access to your network.
Additionally, the business risks losing productivity. The work someone does on a shadow app, for example, could be lost to the company if that employee moves on. IT wouldn’t have access to that account to retrieve the information or files. They don’t even know it is out there on that unknown app or device.
Because this IT lingers in the shadows, it can be challenging to coral. Still, there are several steps you can take.
Create and communicate acceptable use guidelines, and make sure your workers know what your policies are regarding:
Establish clear information classifications distinguishing between public, private, and confidential data. This can help employees recognize they are putting important data at risk when they disregard use policies.
IT needs to get to know what technology is in use at the business (both on- and off-site). This is more challenging now with people working from home due to COVID-19. Still, a survey of employees and their devices can help gather information about unknowns.
Don’t overreact. You don’t want to necessarily ban all Shadow IT that you discover. Some of the services could have value. Vet the applications or devices found or reported. Review their connection to private or confidential data or essential network systems. If several employees use an unsanctioned app, you may want to invest in it. With a professional version, your IT team can safely manage the app.
Why are people circumventing your IT policies? Are they are under pressure? Are they are looking to meet an unmet need? Are they are more comfortable with a familiar app or device? It’s important to understand what the employee is aiming to accomplish or why they’ve turned to shadow IT. This can help you identify IT needs and areas where you need to improve.
Shadow IT is data or applications that are outside your business protection. IT can only watch what it knows about. Shadow IT is unsafe and unpredictable. Book an appointment to have the professionals at Y-Not Tech Services help you shine a light on Shadow IT.
When doing business online, you have many options for available software and systems. You might turn to one solution to handle online meetings, another to drive collaboration, and yet another to manage your content and workflow. It can get confusing. Plus, when you are duplicating tools, IT spend can mushroom unnecessarily. Microsoft 365 aims to offer a single, all-in-one solution. This article highlights the benefits of streamlining your software needs. [Read more…]
Many business tools are moving to the cloud. One popular option is Microsoft 365, formerly known as Office 365. This unified platform consolidates Excel, Word, and PowerPoint with collaboration and communication tools. Added apps and services help streamline operations, too. Simplifying your IT infrastructure can also cut costs and reduce duplication of effort. Still, when you’re leveraging the convenience of Microsoft 365, data backup is your job. [Read more…]
What to Do If Your Data Is Included in a LeakData breaches are now daily occurrences and can happen to any business. The April 2021 leak of 533 million Facebook records was one of the largest known data leaks, but even if you weren’t affected by that one, you may still be at risk. [Read more…]
