information security – Page 10 – Cooper Mann Consulting

February 11, 2014

Migrating Business Data to the Cloud

When businesses elect to have their desktop applications hosted in the cloud with a hosting service provider, they are also electing to have their data hosted with the provider. This point is not always obvious to non-technical users and those unfamiliar with the hosted application concept. Many business owners have adopted an online or hosted application solution and then realized after-the-fact that their data was no longer present on their computer. At least, no current data was present, and it was quite a surprise the day they wanted some information but could not get it because they were not connected to the Internet at the time. An important thing to remember, and the essential factor in measuring risk associated with use of cloud services and hosted solutions, is that adopting online applications in almost any form means that the data associated with (and possibly even data remotely associated with) the application will also migrate to the cloud.

Migrating on-premises servers – and the applications and data residing on them – to the cloud makes sense for many businesses. Particularly as network and internet threats increase in number and as system vulnerabilities are more frequently introduced with remote and mobile access technologies, cloud solutions can significantly assist a business in mitigating the risks of being connected. Yet business owners and IT managers must be diligent in terms of understanding the measures their service providers take to protect and preserve as confidential the customer’s business data. And it becomes more than essential that any and all tools or services implemented be part of a strictly controlled information management and data protection plan.

Where applications are simply interfaces and logic; the value for a business is in the data used by the applications – data containing information about the company, how and with whom it does business, and how it makes money. It is critical that the business consider how and where users need access to applications and data, so that any cloud deployment does not wind up hindering productivity rather than facilitating it to a greater level. It is when the user becomes disenfranchised, unable to perform their work due to lack of access to information or tools, that “shadow IT” deployments appear, and data sharing solutions are introduced outside of the governance of management or IT.

The vast number of offerings for hosting applications and managing business data in the cloud makes finding and implementing the right business solutions a complicated and often frustrating process. Even large providers that specialize in delivering from a menu of business cloud solutions often forget that their target customers may not be particularly tech-savvy, and will fail to recognize the nuances in service delivery or protection that could make big differences to the business down the line – like in the case of a system failure or outage.

Among the keys to a successful cloud solution deployment, particularly when critical and frequently used applications and data are to be migrated off-premises, is a thorough understanding of how users currently work with the tools provided, ensuring that processes and utilization can be fully adapted to the new IT model.

As long as users are able to retain their productivity and efficiency, and when improvements in workflows and information access become additional benefits, the security and protection of the business data is more likely, as users will feel less compelled to find alternative and less secure means for making the business data available from the cloud. You may want to migrate your business data to the cloud, but you don’t want your data to migrate further than you can reach.

Joanie Mann Bunny Feet Make Sense?

February 4, 2014

A Higher Level of Customer Relationship Management: Building Closer Customer Relationships

Most businesses recognize the importance of creating a quality experience for customers doing business with them. The thing that many business owners overlook is how their internal workflows and information management systems serve to either support or impede the delivery of a well-rounded positive customer experience. Growing businesses must adjust their processes and improve their tools in order to have the necessary information available to workers at various levels of the organization, providing a centralized means for collaboration, data sharing and analysis. With the right information systems and process support, even small businesses are able to function at exceptionally high levels and provide the consistently high-quality service and customer experience that establishes long-term value in each and every customer relationship.

Businesses which excel at providing very high levels of customer service tend to have a few common characteristics – features of the business that identify it as an organization geared towards growth and success in driving the customer engagement and business value. Among these characteristics is the recognition of the need to use technology better – leveraging automation to a greater degree to create consistency in work performance, and improving information collection and integration to provide more context and depth to the data. Added efficiency which affords employees time to focus on customer oriented tasks and elevating the customer experience even more is the payback.

Many CRM solutions describe the benefits of a “360 degree” view of the customer, yet these solutions often orient themselves to supporting only sales and Contact Management and do not address product and/ or service delivery (fulfillment of what was sold/ordered) or project management, contracts and agreements tracking or other aspects of doing business with the customer.

Granted, customer interaction occurs most frequently with sales and service teams, but there are potentially vast number of processes and tasks performed within the business which operate with the same information as sales and services, and which would benefit by integration within the same information and workflow framework.

By selecting a solution that addresses the wider variety of business and information management requirements rather than focusing solely on sales and support, business owners and managers find that they are better able to address internal workflows with streamlined process automation.

The result is significant improvement in the quality and completeness of the information available to users throughout the organization, ultimately improving the quality and nature of customer engagement and interaction. Perhaps even more impactful is the ability for the business to better understand the context of and motivations for customer interactions, and (most importantly!) having the capability to take immediate action based on that knowledge.

With the right customer relationship and business management solution in place, and with a focus on systematic approaches to enabling process and workflow automation, businesses can become more flexible and responsive to changing customer needs and expectations. Creating the complete view of the customer relationship and capturing the data which helps users understand the dynamics of the entire relationship serves to build closer customer relationships that will strengthen and grow over time.

When a business needs to implement a Customer Relationship Management solution to address sales and support needs, it makes sense to also review information management requirements for:

Delivery of products and/or services – i.e. fulfillment of what was promised by sales
Scheduling of Work/Service Orders and integrated billing based on completed work
Time and personnel activity management as well as time reporting and billing
Project or job resource and time management and reporting
Documents, contracts, before & after pictures, and agreements of all types
Products and services, proposals and quotes, price books and channels

Additionally, since the processes are so closely related in terms of the information collected or used, it makes sense that the CRM solution would also work with:

Marketing campaigns and activities, lead generation systems and e-newsletter solutions
Accounting solutions which also utilize customer, product, job, time, cost and other data
Expense spending management, approvals and reporting

To be truly useful, the solution must also support remote and mobile workers since field service personnel and other workers are often not in the office when they need to get something done. Whether the access is via hosted solutions providing full remote desktop functionality, or via web-based application extensions allowing device independent access (or both!), the solution should be designed to allow users to access the system and perform their work from wherever it is required.

Even more, a comprehensive approach to managing business activities and information, particularly with a focus on providing all departments with all the information and capability they need to get their jobs done properly, requires that everyone in the company be on board. There really isn’t a great way to centralize and manage critical business data when the approach is to give a few people some information and functionality, leaving it up to human beings and individual initiative to connect the dots (and the data). The result is almost always a series of gaping holes in various processes where information and requests get lost.

Among the best solutions I have found which delivers the foundation for all of this functionality is Results CRM. Thousands of users have successfully migrated from ACT!, Goldmine, Telemagic, Salesforce.com and other SFA and CRM solutions to the Results CRM platform, and have benefitted from better workflow automation, more logical company and contacts associations, and a broader range of functionality supporting everything from sophisticated quote and proposal development to comprehensive project, time and expense management.

At the end of the day, it’s the reporting that wins. If the data isn’t in the database, you can’t report on it. If you can’t report on it, you can’t measure it. If you can’t measure it, you can’t make good business decisions and grow the business.

Make sense?

January 6, 2014

Security and Users: Change is the Only Constant

Managing user accounts and access to business IT assets is challenging, particularly as cloud and social computing models introduce new wrinkles in security and identity management. Information has become “mobile” along with the users accessing it, yet management of user behavior is even more complicated that trying to manage a digital resource.

If you look at the history of security breaches, you’ll find that many of them started with a user making a mistake – like losing a laptop or clicking on a phishing email, downloading bad software, or forgetting to report an employee termination to the IT dept – something which inadvertently created a vulnerability that could be exploited. It’s tough to stop breaches because there are so many possible ways for them to happen.

If most security breaches start with a user mistake, then IT departments have their hands full because users aren’t static, unchanging objects to monitor and manage. Users change, sometimes a lot. It is this constant change which undermines the ability for some IT departments to meet the demand to adequately secure company information systems and data. Now is the time to take control of user security and identity management, creating automation and controls to protect business assets in a constantly evolving environment.

It is not simply employee turnover that challenges security management. Certainly, IT departments have been dealing with user account creation and termination for a long time. And sure, users have sometimes been promoted and demoted, resulting in the requirement for IT to increase or perhaps decrease access to information and applications. These are normal and expected activities for a business IT department. Unfortunately, IT often doesn’t hear about the user’s change in status. An account isn’t disabled, access isn’t restricted, and the system is left vulnerable.

Just to pile on, think about what happens when a user is more than just a single system user. It may be manageable when where a single identity and set of credentials governs their access to applications and information. But the proliferation of web-based services and SaaS solutions has made it commonplace for users to have multiple applications and services available to them, each with their own approaches to identity management.

For even a small business IT department, the security of all of these access points and applications must be managed and monitored – no small task when the department may not even be aware that the solution is in use. It is not unusual for file sharing, data sync, or other applications to be implemented in businesses without the knowledge or participation of the IT department. Actually, many services attract users due to their simplicity and ease of use, leveraging the fact that they can be deployed without the “assistance” of IT.

Users are becoming increasingly mobile, accessing information and applications from public and private locations while using any number of possible mobile devices. Vulnerabilities which may exist in public networks and the increased potential for device loss or theft are high on the list of concerns of IT departments managing remote and mobile user access. Mobility is driving many changes in how information technology and access to systems is provided to users, and it is changing user demands for what they should be able to easily accomplish while being mobile.

Businesses need to recognize that their continued existence may rely on keeping their information systems and assets safe and secure. Disaster recovery and business continuity applies not only to loss of physical systems, but also to losses of various forms due to data breach. The disaster recovery and continuity plan (you have one, right?) should not only address situations after they happen; planning by definition is proactive. It is not enough to have a plan to recover from loss or failure; the business must actively engage in activities which will prevent loss and reduce vulnerability.

Part of this plan necessarily centers on managing users and user identities, ensuring that the company knows about all access or user accounts involved and employs strict processes and guidelines for making sure they are constantly up to date and have the authority to do what they’re trying to do. In short, the plan must also be a plan for change, providing change management processes to guide the business as the evolution of information technology and the dynamics of user interaction continue to change.

jmbunnyfeet Make Sense?

December 24, 2013

Happy Holidays from CooperMann

Ninjabread cookies in the kitchen, an appearance by the Christmas Elk, and Minty Fresh (fresh cat, not canned) looking for Frangos all clearly indicate that the holiday season is here. 2013 has been an eventful year – some would say it was “fraught with peril” while others see opportunity in change. It’s all a matter of perspective – pursuing goals and taking action rather than resting on ones’ laurels and trying to wait it out. This cloud stuff isn’t going away.

With technology and social computing adoption increasing at almost alarming rates, I can’t wait to see how 2014 goes! This certainly isn’t a time for the tech-timid, as it appears as though the nerds and geeks do rule the world (aren’t we all a little nerdly, really?).

I hope you and yours have a wonderful season.

Cheers

Read the Best of CooperMann.com from 2013

December 20, 2013

Accounting, Technology and Small Business – The Best of 2013 from CooperMann

It has been an eventful year, hasn’t it? With the NSA lurking about collecting data, innovative new approaches to information and identity theft emerging almost daily, and complete turmoil in the IT services industry challenging trusted sales and distribution models, most of us have simply become numb to the noise. Information technology is evolving at an increasingly rapid pace and the way people and businesses interact with and use technology is being forced to change along with it. It’s starting to become almost, weirdly, natural.

Much of this change can be attributed to “The Cloud”, which is not a thing or a place. Cloud has become the term which applies to just about anything having anything to do with the Internet. For technology “purists”, cloud means something fairly specific, but for normal people (no offense to the nerds and geeks, but you know what I mean), cloud applies to pretty much anything accessible via the Internet. Photos back up to “the cloud”; music gets stored in “the cloud”, websites are hosted in “the cloud”; businesses run their applications in “the cloud”, and you can do darned near anything you need (or want) to with a phone. The cloud could be some guy’s server in his basement, or it could be a sophisticated network of systems housed in secure facilities around the globe. They both qualify, sort of. The point is that mobility, Internet services, subscription access to technology, and social computing are changing how people view technology – resulting with changes not simply in how IT is purchased, but in how IT is used and applied to daily life.

There are, however, some things that do not change even if the working environment does. The accounting profession, for example, is undergoing a great deal of change, and much of it fueled by the advancements in technology and social computing. But accounting fundamentals – the “truth of debits and credits” and the good old accounting equation – remain. The basics of running a business are also unchanged, even as methods of doing business evolve and globalization of markets continues. Business fundamentals – fiscal responsibility, cash and growth management, and focus on value and sustainability – are as necessary now as every before.

With all this change and IT “advancement”, there have certainly been impacts to how and where we work. But the more things change, the more they remain the same. Good business generates goodwill and more business – that doesn’t change – and bad news still tends to spread faster than good news (much faster, given social platforms that are designed to spread the word far and wide). And when it comes down to the fundamentals – the basic and essential foundations supporting building, operating, and accounting for business – we generally find that they remain constant even as the environment in which they exist experiences change.

Make Sense?

Here are the top 20 ranked posts for 2013 from CooperMann.com

Posts by category – with Accounting Professionals, QuickBooks Hosting, QuickBooks Software, and Small Business being the top categories with ranking articles.

ACCOUNTING PROFESSIONALS

Small Business Owner to Accountant: Make Accounting Valuable to ME

Accounting Professionals, You’re right – your clients don’t care about the numbers.

The Language of Accounting: Disconnect between Accountants and Bookkeepers

Why Accountants and Bookkeepers Use the Cloud

Bookkeeping and Benchmarks – Getting the Numbers Right

In Bookkeeping, Accounting, and Information Technology: The Value of Outsourcing

Re-defining the role of the accountant, or going back to the good old days?

The Collaborative Online Model for Small Business Accounting Professionals

Remote access to client bookkeeping comes in many forms because clients come in many forms

QUICKBOOKS AND BUSINESS APPLICATION HOSTING

What Small Businesses Need To Know about QuickBooks and the Cloud

Intuit Introduces Changes to Authorized Commercial Host for QuickBooks Program, Introduces QuickBooks Enterprise Rental Licensing

Hosting All My Applications in the Cloud

Intuit Hosting Program for QuickBooks Website Goes Live

Cloud Computing for Small Business: It’s All About 3 Apps

QuickBooks Hosting: New Program Tier Announced for QuickBooks Hosting Providers

Managed Applications, Cloudpaging, and a New Flavor of Hosted QuickBooks

QUICKBOOKS SOFTWARE

Changing How We See Software: QuickBooks 2013 interface frustrates power users

SMALL BUSINESS

4 Rules of Thumb for Business Success

4 Rules for Building Service Customer Loyalty

December 9, 2013

Servicing Fundamentals: Are Vertical Software Products Becoming Obsolete?

As mobility and the Internet continue to drive changes in how people interact with technology and each other, businesses are finding that the compelling arguments presented by many cloud service providers are tough to ignore. Anytime/anywhere/anymode access to business applications and data, focusing on core business issues and outsourcing non-core processes, streamlining and connecting processes to create efficiency and predictability in operations – these are the benefits which “connected” and cloud technology models are delivering. Cost efficiencies in supporting business operations are also being experienced, as the outsource IT solution often provides fault tolerance, scalability and performance at cost and service levels difficult to achieve with in-house systems and personnel. The scale economies of the cloud cannot be argued with, and it is this cost-efficient and effective provisioning of fundamental business services to users that is increasingly pressuring vertical software makers to either address the market with more fundamentally useful tools incorporated into their products or risk losing users to generalized and commonly used solutions.

Consider that many accounting solutions today have introduced the ability to connect document files to transactions. It makes sense, and provides a basic capability for accounting/bookkeeping which is necessary. On the other hand, what happens to the rest of the documents used in the business – the ones that aren’t associated with a financial transaction? And, if there isn’t mobile access to the accounting system, how are those attached documents made available to remote users and mobile devices? Another thing to think about is the fact that users now have the ability to interact with various files and applications natively on mobile devices, as opposed to having specialized applications to access limited data sets. File sharing applications and productivity tools are widely used by these mobile users, as they provide the flexibility to seamlessly access files regardless of device or location. This fundamental benefit of simple and affordable information access, storage and sharing is proving the value of a generalized approach to enabling users and helps to explain why the operating and file systems were the previous “killer apps” in computing technology. The question for vertical software developers now is whether or not they can effectively incorporate these popular services into their solution, or if the solution must limit its focus on addressing only the truly unique elements of the business rather than the general or fundamental ones.

A great discussion on the subject is an article on PrismLegal.com where author Ron Friedmann describes his similar question in the context of Box.com increasing use in law office environments and how this impacts the legal software market.

More generally, it should cause us to question the future of legal market specific software. I understand the need for customized software; for example, I am currently involved with developing and deploying legal project management software (Cael LPM™ by Elevate Services). But the market – both customers and vendors – must balance the need to meet legal specific requirements with economics and scale.

Box and other cloud providers can potentially sell millions of seats to thousands of organizations. Contrast that enormous reach, which spreads development cost over so many users, with legal market scale. The large law firm market has no more than 400 organizations and 500,000 seats. The development and service cost per user is much higher. Nonetheless, many companies have prospered creating highly customized software for the legal market. In the age of cloud and economies of scale, however, will those economics still be so favorable?

There will always be a place for vertical and industry-specific solutions of certain types, but there is an increasingly large population of businesses which have adopted generalized solutions to address fundamental business requirements, and users (and solution providers) are recognizing that these essential solutions are meeting the majority of the business requirement without specialization (and additional cost) required.

jmbunnyfeet Make Sense?

Read about why Lawyer Immunity from Delivering Customer Value is No More

Read about The Line in the Sand: Your RPO (Recovery Point Objective)