Archive for September, 2011

Your Data and The Businesses and Organizations You Entrust With It

Wednesday, September 28th, 2011

It always amazes me how willing people are to give out confidential information.  And I’m not talking about the younger generation who have grown up with computers.  Your data is yours; and the businesses and organizations you entrust with it may not really care for it as much as you do.

While some states have very strict guidelines, such as Massachusetts; imposing additional regulations only serves to increase the cost of doing business which typically gets passed on to consumers.  While regulations have their place, they are not a panacea.

Case in point: yesterday I visited a business establishment which falls under several federal laws regarding data security.  Their security measures consisted of one paper sign taped on a wall and a plastic sign on a door, they both read “Secure Room Authorized Personnel Only”.  If this works as well as the no gun signs on bank doors and drug free zone signs, the data must be secure!  The door was next to a sliding glass window and the lock on the door was cheap and had a twist button to unlock it.  A person reaching an arm through the window could unlock the door, but that would be unnecessary as the door was wide open and only one person in the building.

Earlier this month one of our lead application developers and I had a meeting with a fairly large business organization.  The organization kept very confidential records regarding its membership, which if it fell into the wrong hands could cost the business member thousands or tens of thousands of dollars, or perhaps even worse.  We drew up a proposal for the organization based upon the criteria we received from their staff.  During a phone call with the director of the organization, I was told that security really wasn’t that important to them; driving home my point.

Before giving control of your information to another person, company, or organization, you just might want to have them show you how they protect your information.  As with almost everything, it is our responsibility to take the proper precautions with our information, as we will be the ones cleaning up the mess.

This article was written by The Boss of HITman Services, a computer and IT company, based in Clifton Park and serving the Albany, Troy, Schenectady and Saratoga Counties of New York.

Preparing for Disaster

Wednesday, September 14th, 2011

There is an old saying, “Plan for the worst and expect the best”.  That is a good mantra to live by.  Many though never prepare for disasters thinking it will never happen to them or their company.  And many that do, don’t test their plans to make sure they will really work when needed.

How many different types of events do you plan for?  Are they for business or family? Between the time I started this article and the time I got back to writing it, we experienced a 5.8 earthquake on the east coast, hurricane and tropical storm rain and wind, flooding, tornado like wind and flash floods.  It was interesting to see how many people reacted with almost panic and waited until the last moment to get food and prepare.

For businesses; what would happen if you our your employees were unable to get to work?  Flooding, fire, trees down, snow and ice are some of the naturally occurring weather related events which could cause this to happen.  How about power outages?  This happens at our office several times a year.  Business must go on!

File deletion and damage to data is potential crisis for almost every every business, whether unintentional or not.  Not long ago we received a call from a client stating a senior staff member had accidentally overwritten critical files.  Fortunately we had a plan in place and were able to resolve the issue within a very short time span.

At home we could lose power or become home-bound.  Fire could break out in the middle of the night while at home or a hotel.  A gas leak could force you out of your home for an undetermined amount of time.  The possibilities are numerous and it is foolish to take the attitude “that can’t happen here or to me.”

While you may or may not have developed a specific plan to handle disasters such as an earthquake, it is possible to put one together quickly in the event of an emergency.  When the planes hit the buildings on 9/11, Mayor Giuliani didn’t have a specific plan for such a disaster, but he did have many other plans from which he and Police Commissioner Kerik pieced together to handle the terrorist attack.

Now is a good time for all of us to sit down with our families and co-workers to review possible events and what we can do to mitigate the issue. Make sure everyone knows the plans and review them on a periodic basis.  Most importantly test them before you need them.  As you find holes, make the proper adjustments.

Our personal safety, the safety of our family, and the continuity of our businesses is our responsibility, not the governments!

This article was written by The Boss of HITman Services, a computer and IT company, based in Clifton Park and serving the Albany, Troy, Schenectady and Saratoga Counties of New York.



Email Safety and Security

Thursday, September 1st, 2011

Many people don’t think twice about what they send in an email.  Some of the issues can be chalked up to blind ignorance and others to just not caring.  But email safety and security should be taken seriously.

Last year a hacker was prosecuted for breaking into Sarah Palin’s email box.  Recently officials from the U.S. Government had their email accounts hacked.  Additionally there have been numerous accounts of women who had their email accounts hacked.  The perpetrator was looking for nude and erotic photos the woman may have sent to their spouses and boyfriends.   In a similar case earlier this year over three thousand woman’s email accounts were broken into for the same purposes.

There are many methods hackers or others with ill-intent use to break into email accounts.  If the person is know, they can watch over the shoulder as the email password is being typed in.  Keystroke loggers can be used.  Brute force and dictionary attacks can be attempted.  There are many methods which can be used to access a person’s email account.

So what can be done to make email safer?  The first rule of thumb should be to not send any pictures in compromising situations.  Imagine applying for a teaching position and a nude photo gets sent to the board of education.  This also holds true of making any statements which could come back and bite you.  The second precaution is to not use the same password for email as ones which are used for website accounts.  The password should also be fairly long and complex and changed regularly.

Email is here to stay, at least in the foreseeable future.  Hackers and others who look to financial gain or retaliation for something they perceive as done to them, are not going away.  Therefore is up to us to try and keep our information safe.  I say try because if there’s a will, there’s a way.

This article was written by The Boss of HITman Services, a computer and IT company, based in Clifton Park and serving the Albany, Troy, Schenectady and Saratoga Counties of New York.

Enhanced by Zemanta