Category: data analysis

Posted on

The Cloud for Your Firm: 3 Initial Considerations for Cloud Enabling Accounting and Bookkeeping Firms Working With Small Businesses

The Cloud for Your Firm

3 Initial Considerations for Cloud Enabling Accounting and Bookkeeping Firms Working With Small Businesses

dscn0903.jpgThe potential benefits of a real-time, lean collaborative working model are too great to argue with.  Accounting professionals, bookkeepers and their small business clients are all hearing about the value of working together in the cloud, and how cloud technologies and solutions can reduce cost and improve efficiency.  There is a great deal of truth in these statements, just as there was a truth in the value of implementing computers, networks and other technologies in business.  What is not clear is exactly what businesses need “in the cloud”, and how they should approach this shift from local IT to outsourced managed service.  Initially, there are 3 issues which warrant consideration, if not deep discussion, prior to making any significant move to relocate internal IT and shift business applications to the cloud: internal use systems, client interaction, and operational support for both.

With all the discussion about cloud computing and remote access, it would seem that all the applications and solutions businesses need are now available online and paid for in low monthly subscription fees.  Anyone working with small businesses, however, comes to understand that the vast majority of these businesses are still using more traditional modes of information management and computing.   For the most part, these businesses are using PCs and local networks, possibly with a little hosted email thrown in.  Almost certainly they have a website and maybe even a fairly sophisticated e-commerce system that allows them to sell products online.  But when it comes to general office functions, and particularly back-office functions like bookkeeping and accounting, the software and the data generally reside on the office PC and server.

Accounting and bookkeeping professionals who work with small businesses are often in the same position as their business clients when it comes to information technology.  Since so much of the work involved requires the same programs and data formats as those used by the client, service providers find that they spend as much in management of software licensing and systems to support working with client data as they do on systems intended for internal use only – sometimes more.  Many of these service providers are also small businesses, and it becomes challenging to find a way to handle internal IT needs while at the same time trying to address those of the client. Where e-commerce solutions are readily available to handle operational aspects of product based businesses, the best tool set for a professional accounting firm or bookkeeping business working with small business clients may not be so easily defined.

The solution for many providers has been revealed through cloud computing and hosted application models.  With Cloud Servers, Remote Desktops, and Virtual Desktop Infrastructure now widely available as affordable alternatives to capital-intensive implementations of locally installed products, businesses are finding new abilities to manage applications and data, provide mobility and enhance collaboration.  The additional benefit is in how accounting service providers may engage with their clients in more efficient and effective ways, without the burdens of replicating data or trying to share access to a single machine or application resource.

There are a number of elements to consider before taking the file server to the parking lot and running it over with a truck.  Moving to the cloud is not a one-step process, and it is important to do a little research and collect some important information before making the final decision on how to proceed.

Internal Use Systems

Among the first of the questions to ask when considering a change in IT management approaches is “which software do we need”?  Implementing an outsourced IT arrangement, which is really what “cloud” is about”, does not necessarily mean throwing away all the existing software and starting with new.  The software in use within the firm may be exactly what it needs right now and adding full IT management, fault tolerance, and remote or mobile access could be the main scope of the requirement.  Moving from locally installed solutions to hosted solutions provides quite a number of benefits while removing many of the direct costs and frustrations of IT management and administration. The greatest benefit of this type of approach is the ability to preserve the “body of knowledge” existing in the business, knowledge invested in the people and processes already developed.

On the other hand, there may be new tools or services only available as “cloud” service, and it makes sense to explore how they may benefit the business more than the in-use applications.  The important element is to remember that the solution must address real business problems, and whether it runs in the cloud or not isn’t the first or most important thing to ask.  For example, a discussion about whether QuickBooks Online might be a better choice than QuickBooks Pro, Premier or Enterprise should be focused on the functionality provided by the applications and not which servers they are running on.  With application hosting for QuickBooks now being an available option, there is a managed IT and remote access capability for both solutions, rendering the fact that QBO is a SaaS solution almost irrelevant in terms of being a differentiator.

Client Interaction

An important aspect of adopting new technologies or working models is the consideration of how the firm and the client businesses will work together, and whether or not there is (or could be) a standardized approach that might work for most clients.  Certainly, it makes sense to standardize as much as possible.  Treating every issue or engagement as a singular event – a one-off – is the least efficient way to do business.  The key to profitability is in the firm’s ability to produce high quality work consistently and in a timely fashion.  This requires that the business be well-structured in terms of the standard processes and methods which will be used to work with client information.  When the firm and the client can work seamlessly together as and when required, and when each is responsible for their own systems and data, it is a best-case scenario. The questions relating to client interactions focus on how the firm works with clients and which tools or solutions are required to improve that situation.

It is likely that the firm will need to be able to address working relationships with various client and engagement types – where clients do some of the work, where the bookkeeper does the work, or where the participants work collaboratively together in the same systems.  While it may seem that the best way to create a dependency on your services with the client is to keep them out of the systems, empowering the client is really the key to a close and long-standing engagement.  This means that the client needs to have their own solutions and approach to cloud-enabled IT, and the accounting or bookkeeping service provider should be able to access and work within that environment.

It is rare that a small business can effectively operate without computers and software to manage information and support operations, so it makes sense that the business should have its own accounting and financial systems, too.  For the accounting service provider, it is essential that a level of understanding be gained around the use of today’s available remote and mobile access technologies, as it is with these solutions and tools that participation in client systems will be enabled.  When the client accounting solution sits on their office PC, there are limited options for working together in any real collaborative form.  Connecting to their PC via remote control is a widely recognized means of gaining access to client systems, but if the bookkeeper is on the system when there is a problem of some sort, all eyes go directly to that remote user as the likely cause of the problem.

The considerations relating to remote access to client systems focus not just on enabling a collaborative working environment, but also on mitigating risk and improving client perception.  The risk issue comes in when the accounting service provider is exposed to systems and information not relevant to their task, and the perception issue becomes material when the accounting professional becomes the software or IT service provider.  It makes sense for the accounting professional to make recommendations or suggestions about software and IT service which might benefit the business, but not to necessarily be the reseller or direct provider of the product or service.  The moment the accounting professional attempts to sell the client a software product or IT service, the relationship is changed and the client is more likely to view their accounting pro as another vendor rather than a trusted advisor.  It’s also not necessarily a great move to start a new client engagement by telling the client they have to switch accounting products to allow the accountant to work closer.  Rather, professionals need to help their clients position those products for more efficient use, which may include enabling remote or mobile access granted via deployment in the cloud.

Operational Support

When businesses outsource their IT management and administration, there is often an initial belief that all responsibilities in these areas will be handled by the IT service provider.  What is often overlooked is the reality that the firm still needs to have people attending to IT related tasks, just doing different levels of work with the technology. It is important to recognize that someone in the firm will end up dealing with various IT and process support issues, and it still makes sense to have personnel dedicated to these tasks (*Note: here’s where I suggest that the cloud changes the focus of internal IT personnel, but it doesn’t eliminate the need for them).  The service provider and solution evaluation and selection process, as well as the actual deployment and administration of services, will take valuable time away from actually performing client accounting or bookkeeping work, and there should be people attending to these issues while the business continues operating.

Where an internal IT department or contract technicians may once have supported internal systems, an operational role within the business is still required to manage outsourced IT activities, including and particularly those where clients are involved with the firm systems.  Delivering new benefits with a minimum of business disruption is the goal, and can be achieved through proper planning and coordination with team members and clients alike.

Closing Thoughts

“The Cloud” is just another way to run software and implement computing resources.  It still takes servers and software, it uses processors and storage and networking, just like more “traditional” computing models.  The difference is in how these resources are purchased and provisioned, and the impact is a change in how businesses of all types can benefit from technologies which enable collaboration, lean process, and mobility.  The Cloud for Your Firm addresses your internal business requirements, lends itself to client collaboration, and has internal operational support to ensure the firm is fully leveraging the available benefits to improve business performance and profitability.

Make sense?

J

Read more about Accountants and Bookkeepers Working With QuickBooks Clients: App Hosting Approaches That Work

technorati-top-100-small-business-blog

Posted on

Predicting Outcomes and Providing Guidance | Being Nostradamus| Proformative.com

I have a gripe with the accounting profession.  My gripe is with the fact that accounting information delivered to most business owners is old news.  Stuff happened, the professional properly recorded it and reported on it,  you paid your taxes, and that’s that.  Game over.

Once upon a time, accountants had to work with book ledgers, pen and pencil (mostly pen, putting that single line through incorrect entries), and stacks upon stacks of paper documents.  Just keeping up with the process of recording transaction information, adding it all up (and making sure the footing totals jibe), and then summarizing the information into usable form took all the time available, and the focus was on the accuracy of the work – not necessarily the timeliness of it.  With the advent of computers and computerized accounting systems, the process of creating and storing the data became easier, but the volume and nature of information increased and thus the complexity and time to process increased (the “everlasting gobstopper” problem.. it never really goes away).There isn’t any argument over the critical value and importance of that work.  Every business owner understands that not properly accounting for business activities can mean increases in tax burdens, penalties and interest, and more.  It’s good work… but what do you do with it?  My intent is not to try to diminish the value of today’s approach to accounting.  Rather, I’m trying to point out how the accounting profession could make a huge impact in today’s pathetic economy, help businesses get financially healthier, and help put the small/medium business market on a path to growth and success.  It involves seeing into the future.

These days, technologies exist which facilitate acquiring the information (even in paper form), converting that information into digital data, and then actually interpreting the data to arrive at a transaction.  Traditional software and cloud service providers alike are recognizing that mechanical data entry is passé, and do-it-yourself solutions for accounting and bookkeeping will rely upon “smart” engines which can read and properly understand what each scanned document means.

So – once the accurate data entry problem is solved… what’s the next logical step?  Analytics!  It’s only really possible now that online solutions have brought the business information to the accounting professional in real-time, and have allowed the accounting professional and the business owner to collaborate and share data faster than ever before.  If information is power, we have a lot of power in our hands… but do we really know it?  This is where BI (business intelligence) and analytics come in, and where the opportunity exists for the accounting profession to become a guiding force in rebuilding our economy.

What if an accountant could not only tell his client that the business lost money last year or last month, but that they’re going to lose money through this month and year if they don’t change their behavior?  And, what if the accountant could run a variety of scenarios which would help forecast the most positive business outcome based on certain choices which could be made, or certain activities which could be handled in different ways?  What if the accountant could help his client peer into the future, and get an inkling of what the business could look like if certain economic or business conditions continued… changed… ?

Maybe I’m a little overzealous when it comes to believing that the accounting profession could have recognized the economic trauma which was coming, or that they could have prepared their business clients for it.  But I don’t believe I’m very far off the mark in believing that not nearly enough “analysis” occurs in the typical public accounting engagement, and even when it does… is the suggested path the right one?  I would submit that BI is new enough to so many people that it may not be.  Learning what the numbers are telling you is one thing… staving off disaster is quite another.

I would encourage all BI and Data Analytics fanatics to check out an article on CFO.com on this subject:  That New Big Data Magic  http://www3.cfo.com/article/2011/8/analytics_that-new-big-data-magic

A few memorable takeaways from the article:

“you may be spot-on about a problem, but the solution doesn’t magically appear out of the data.”

“what you do with [data] is a people-based activity, a skill base you have to mature.  And it doesn’t come quickly.”

“CFOs have a gut sense that there’s money out there in all that data… The challenge is how to turn that data into new opportunities.” The good news.. is that new technologies are making it more economical to make sense of Big Data… The caveat is that those technologies will not provide those opportunities. That’s still up to the people who make business decisions.”

jmbunnyfeetMake Sense?

J

reblogged from Proformative.com  Being Nostradamus – Predicting Outcomes and Providing Guidance

Posted on

Financial Literacy and Small Business Success

Businesses and individuals alike must make complicated financial decisions throughout their lives.  Sadly, the volumes of research which explore aspects of financial and debt “literacy” among individuals and small business owners reflects that a growing portion of the population lacks the understanding to make these decisions.  Questions surrounding this issue often focus on the educational aspects, and the positive impacts which might be created through greater levels of understanding of accounting fundamentals and the basics of financial management.  Particularly in smaller businesses, where there is a much closer relationship between business and personal finances, understanding even basic financial concepts is likely to lead to “better financial decisions and household well-being”.

a strong relationship between debt literacy and both financial experiences and debt loads[1]

Because many educational offerings tie to specific training approaches and methodologies, it becomes very difficult to measure the usefulness of the skills developed separately from the effectiveness of the training methodology.   Trainers may employ specific devices or tools which facilitate their delivery, and often times these tools become more of a focus than the actual educational content.  On the other hand, a program might provide a great deal of information in a fairly raw form, yet this information is unlikely to deliver a useful result if the participants do not understand it or cannot grasp the concepts introduced. The challenge is not only with providing the education, but finding a balance with the information and the outcomes; understanding how basic the training might be and still provide a measurable, beneficial impact.

In the study Keeping it Simple: Financial Literacy and Rules of Thumb, the authors discuss the benefits of teaching small business owners a series of fundamental “rules of thumb” for management of the business, rather than delving into the complexities of comprehensive business accounting and finance.  Teaching participants about the basics of double entry bookkeeping, cash management and investing, and then coupling that information with instruction on essential processes to follow resulted in significant improvements in financial management and improved the accuracy and consistency of reported data.

the rule-of-thumb training changes actual business management practices[2]

 

Outcomes show consistently positive when a simpler approach to developing “financial literacy” is provided to small business owners, and particularly when the training and content is oriented towards the characteristics of the participants.   The highest level of result was achieved with business owners with a low level of financial “sophistication”, with a limited interest in financial or accounting training, and with limited baseline business practice structure.  These were the participants who were found to be most likely to implement what they learned in the “rule of thumb” training.

The conclusion drawn from these discussions is that financial education and basic accounting training can become a key factor in helping business owners not only account and report better for their businesses, but provides an essential foundation for understanding how to grow the business and create profitability.   Accounting professionals working with small business clients should recognize that an effort to provide a level of education to clients is likely to not only help those clients make better business (and personal) financial decisions, it will also increase the chances that the client will keep better books and provide the accounting professional with more consistently useful information to work from.

After all, the goal of the accounting professional working with small business clients is to help those small businesses become successful businesses, isn’t it?

Joanie Mann Bunny FeetMake Sense?

J

[1] http://www.nber.org/papers/w14808.pdf

Debt Literacy, Financial Experiences, and Overindebtedness | Annamaria Lusardi and Peter Tufano| NBER Working Paper No. 14808|March 2009

[2] https://www.poverty-action.org/sites/default/files/kis-dfs-march2013_0.pdf | Keeping it Simple: Financial Literacy and Rules of Thumb | By ALEJANDRO DREXLER, GREG FISCHER, AND ANTOINETTE SCHOAR

Posted on

The Language of Accounting: Disconnect between Accountants and Bookkeepers

The Language of Accounting: Disconnect between Accountants and Bookkeepers

There are a tremendous number of bookkeeper training programs developed over the years which propose to deliver the essential bookkeeping knowledge (e.g., double entry accounting) required in order to properly service business bookkeeping requirements.  Particularly as the CPA profession stepped away from traditional bookkeeping in favor of performing “higher level” and more profitable work, there was and continues to be a great need for skilled and experienced bookkeepers.  While it seems that accountants and bookkeepers would be a natural fit for partnering to serve small business client needs, there is often a disconnect between the two which causes the working relationship to not always prove as beneficial as it could.  What is the cause of this disconnect?  In many cases, it is due to the fact that the bookkeeper training educated the operator on the use of a software product, and not on the fundamentals of accounting and bookkeeping.

Over the past few years, I have had the opportunity to look through a lot of bookkeeper training programs, and the thing that stands out is that many of these programs aren’t really training bookkeepers on accounting principles.  More frequently, the training is focused on teaching users how to use software (usually QuickBooks).  With the number of users of the QuickBooks product, it is obvious that there is a need to educate users on the solution because people need to know how to use their software properly.  But it happened at some point in time that a majority of the industry came to believe that learning QuickBooks (or Xero or Freshbooks or Kashoo or whatever) was somehow synonymous with learning bookkeeping.

When I first started working with my father in his accounting practice, I had to use a manual general ledger, check register, etc.  It was all manual – computers didn’t come along for a while (yes, I am that old).  It was time-consuming, but it taught me the fundamentals.  I know what a subledger is.  In consumer-friendly software like QuickBooks, you don’t work in the AR subledger; you push the button that says “customers” or maybe “invoices”.   QuickBooks, in many ways, doesn’t speak accounting.  It speaks record keeping.  And this is where the disconnect begins.

An old school accountant will recall the green eye shade days and working with book ledgers and 13-column pads, but even “new” school accounting professionals know that the fundamentals of accounting aren’t available for re-invention.  A debit is still a debit and a credit is a credit.  Yes, there are intimacies involved which speak to specific treatment of items for reporting and tax purposes, etc., but the essentials of double entry and other basic accounting principles are consistent and unchanging.

The “language of accounting” includes certain precise terms with specific meaning, and this precision in the use of terms simply doesn’t exist in many bookkeeper training programs. Rather than focusing on the fundamental accounting training bookkeepers truly need in order to be of maximum value to the business, these programs focus on helping users become experts in using the software product, or even to become experts at teaching others how to use the solution.  While this software expertise may be beneficial in terms of helping accountants work with their clients who use the software, it doesn’t add enough value to the relationship to warrant partnering.  What accounting professionals need are bookkeepers who understand bookkeeping and who can apply basic accounting principles to the task.  Which software they operate is secondary to that purpose.

Professional bookkeepers, accountants, and the business client are all in a position to benefit tremendously when the service providers team up to provide comprehensive service.  The key to making these connections lies with the professional bookkeeper who must not only understand basic accounting principles, but must also be able to speak to the accounting professional in their native language.

Make Sense?

J

read more…

Opinion:   I think that every QuickBooks training program should include taking the sample data file in QuickBooks, and translating that to a manual accounting system of book ledgers and reports.  Then, have the student process a years’ worth of transactions manually and from paper-based source materials (and also make them create and use a manual paper filing system for all that information, and come up with a means to travel to obtain all the documents necessary which aren’t mailed via USPS).  The requirement would include generating the bank reconciliations from printed bank statements and cancelled check copies, creating a trial balance from the general ledger and then creating the P&L and Balance Sheet.  I’ll bet you end up with a group of bookkeepers who better understand the fundamentals of the accounting process.  The other benefit is that these folks will have a much better understanding of the problems in the outsourced accounting model which can be directly addressed and solved by today’s cloud and connected solutions.

 

Posted on

Bookkeeping Needs Better Reporting Tools

There are many articles and papers available which discuss the rapidly increasing “volume and velocity” of electronic information moving through businesses these days. The focus of the discussion in most cases is on how businesses need to adopt tools and solutions to help them with the management of this electronic data flow. What isn’t being discussed at length is the visceral business intelligence which is lost due to less direct interaction with the raw data.

By manually working through each item, the person regularly processing the information would often develop somewhat of a picture of the business simply through a level of intuition, a gut reaction to the information. This is a rapidly declining model, thanks to intelligent technologies and direct system integrations.

With the plethora of electronic information sources, data collection tools, and transaction download facilities, many bookkeepers and business owners are finding that their gut instinct and business intuition is being lost in the shuffle of managing and matching up all this electronic data.

Focusing on small business bookkeeping, the processes are now being oriented more towards matching up electronic transaction data points than on entering the information from the raw source. Where bookkeepers were once perceived as “mechanics” in terms of performing the bookkeeping data entry, the activities of these professionals is becoming even more mechanical in nature as the primary requirement shifts from entering the information to importing it and then matching it to source documentation.

Even decisions regarding categorization of the transaction are often made by software solutions, eliminating more involvement by the bookkeeping or accounting pro. At the same time that bookkeepers and accountants find themselves having difficulties communicating the value of the service they deliver, technology trends in the industry are weighing even more heavily on that value proposition by providing users with do-it-yourself tools and self-service solutions.

The answer to the challenge of demonstrating value in the bookkeeping and accounting processes is for accountants, bookkeepers and business owners is to focus on the result of the work rather than focusing on the work directly.

Small business owners will challenge their accountants and bookkeepers to explain why processing a limited number of transactions per period would cost much, and the professional ends up fighting a battle which cannot be won; there is far more value in the work they perform than simply entering the data. It’s this explanation of WHY bookkeeping and accounting takes skill and has value which become arguable to the business owner, and is a discussion which the accountant or bookkeeper is more likely to win if they were to in a position to provide their client with proof of this value.

Too often, accounting and bookkeeping service providers attempt to prove their worth to the client by espousing the quality, accuracy, and timeliness of their services and say too little about the value of the result they will deliver. Additionally, many professionals introduce their clients directly to the accounting software and try to engage the client to work cooperatively with the bookkeeping, as there is a perception that the client may see more value in the work if they can a) see it being done in real time and b) see how complicated it could really be.

Unfortunately the accounting and bookkeeping solutions often implemented by small businesses actually look pretty easy to use and are intuitive, which serves to even further diminish the value proposition as the client perceives that they could likely operate the software just as well as the bookkeeper.

In order to deliver the proof to the client that the bookkeeping work has value, the result becomes the focus of the effort. Rather than providing balance sheets, profit and loss statements and bank reconciliations, those involved in the bookkeeping and accounting process for the small business should also focus on reports which demonstrate the value of PROPER bookkeeping and accurately reflecting business activities.

Would the client know the real difference between cost of goods sold and a regular business expense? Reflection of that single transaction with two different treatments could be the trigger to get the light bulb to light up. How best to demonstrate the variation? Not in pure written report form, that’s for sure. Numbers alone don’t generally trigger real understanding, but painting a picture might.

Today’s dashboard and reporting tools – solutions which use information from the accounting system to reflect visual trends and representations of business performance – can deliver far more meaning and easier understanding than a columnar report with numbers and percentages. Further, these tools can address the task of revealing critical insight into business value, demonstrating (for example) the difference between cash flow and profitability, or identifying trends which indicate patterns in how the business is causing or reacting to change.

As small business owners feel continued pressure to improve performance and profitability, and as lending sources for business credit remain difficult and costly to engage, the necessity for quality bookkeeping and accounting services does not diminish, it increases. The challenge is in finding ways to read the data and discover the insight and meaning it reveals.

The value of bookkeeping and processing accounting data for businesses is ever-increasing in these days of global markets and global competition, and the forward-thinking professional will recognize that deeper insight into the business – insight enabled through the use of realtime reporting and analysis tools – delivers an ongoing opportunity to work closer with the client in addressing challenges identified and presented, and allows the accounting professional, bookkeeper and business owner to be guided by real information rather than emotion or intuition.

jmbunnyfeetMake Sense?

J

 

read the original posting at  The Progressive Accountant.

Posted on

IT Security and Engaging Users to Reduce Vulnerability

IT Security and Engaging Users to Reduce Vulnerability

There is a lot of discussion going on about security in the cloud.  With numerous advancements in technologies of various sorts intended to secure our information and identities on the Web, how is it that security continues to be a growing problem?  The answer is in the Big Data the Web collects (read about the Internet of Things – IoT), the large silos of data now handily available in the cloud, and users who continue to provide access for all sorts of bad guys and malicious attackers simply due to not understanding that they – the users – remain as the biggest vulnerability of all.  It is educating this user and finding a way to get them to recognize their potential as a critical element in enhancing system security and reducing vulnerability that has become the larger challenge.

People are nothing more than another operating system, says Lance Spitzner, training director for the Securing The Human Program at SANS Institute.  “Computers store, process and transfer information, and people store, process and transfer information,”  How Hackers Fool Your Employees

Social engineering and finding ways to earn user trust has become a widely recognized means for gaining access to systems and information.  Any experienced computer security consultant recognizes that Microsoft Outlook is among the best applications to place in front of users to test system security, as emails with malicious attachments (spearphishing) represent a majority of targeted attacks.  And hackers aren’t resting on their laurels while users figure out that opening email from unfamiliar sources isn’t a good idea.  Nope, not for a minute.  Today’s flavor is “conversational” phishing, where it is made to appear as though a real person is at the other end of the conversation.  Hackers are patient, and they are willing to take the time to find a way in.  Users, on the other hand, still tend to be somewhat complacent when it comes to security, and often operate under the belief that the IT security products and the IT department have it all under control.   And no matter how many times they’re told to not click on strange email attachments, to change passwords frequently, not to reuse passwords, and to make passwords hard to guess… getting users to comply continues to challenge system administrators.

most-valuable-security-practices

Communicating with users about the importance of adhering to password management and other security standards often falls on deaf ears for two reasons:  users believe that system security is the job of the IT department, and users are made to feel stupid by being chastised and punished by the IT department that’s supposed to be helping them.   Rather than helping to educate users and find innovative ways to get users to participate in helping to improve system security, IT administrators and security teams generally view users as part of the problem rather than part of the system of solving it.

It’s a heated debate that can upset people on opposing sides.  For instance, one RSA conference presenter conducted a class on “how to patch stupidity,” Spitzner says.  “He explained why people are stupid, how they’re stupid and how to fix stupid.  It was a very emotional talk for me, because how can you sit there and insult the very people who can end up helping us?…  How Hackers Fool Your Employees

In order to build strong security which is better-suited to protect businesses from today’s variety of threats, IT security professionals and system administrators should engage in positive internal marketing for better system security, deliver improved education to build awareness with users, and actually engage users in the process of threat identification and detection.  These users don’t have to be geeks or IT people; they can be average users who simply keep their eyes open to things that just don’t seem right.  “People can become a detection system to improve organizational resilience.”

jmbunnyfeetMake Sense?

J