risk management – Page 7 – Cooper Mann Consulting

January 2, 2018

The nasty surprises hackers have in store for us in 2018

“Hackers are constantly finding new targets and refining the tools they use to break through cyberdefenses. The following are some significant threats to look out for this year.

More huge data breaches

The cyberattack on the Equifax credit reporting agency in 2017, which led to the theft of Social Security numbers, birth dates, and other data on almost half the U.S. population, was a stark reminder that hackers are thinking big when it comes to targets. ..

Ransomware in the cloud

… The biggest cloud operators, like Google, Amazon, and IBM, have hired some of the brightest minds in digital security, so they won’t be easy to crack. But smaller companies are likely to be more vulnerable, and even a modest breach could lead to a big payday for the hackers involved.

The weaponization of AI

This year will see the emergence of an AI-driven arms race. Security firms and researchers have been using machine-learning models, neural networks, and other AI technologies for a while to better anticipate attacks, and to spot ones already under way. It’s highly likely that hackers are adopting the same technology to strike back…”

Source: The nasty surprises hackers have in store for us in 2018

November 13, 2017November 13, 2017

Business Data Storage in the Cloud – Accountex Report

The term “cloud” has been applied to all sorts of online or Internet-based application models, and there are a great many approaches to developing cloud-based services and solutions. What this translates to is a volume of options and possibilities for information storage, management, and access in the cloud.Understanding where information is stored, how it may be accessed, and how it might be transmitted to others becomes essential knowledge that business owners should have when they engage with any information technology (IT) solution or service. Yet the plethora of “simple, affordable, and instantly gratifying” services currently available on the web all but ensure that businesses will engage with one or more solutions that provide them with little or no information (much less control) over the placement and management of their data.

Source: Business Data Storage in the Cloud – Accountex Report

August 14, 2017August 14, 2017

Cloud and Digital are Driving Change in Professional Practice

Accounting and Finance Professionals: Cloud and Digital are Driving Change in Professional Practice

Accountants and financial consultants working in public practice are experiencing a revolutionary change, evolving from documents and paper-based processes with after-the-fact reporting to real-time business management and providing services which support daily decision-making. The underlying cause for this evolution in business accounting is the technology: cloud and collaborative computing models are enabling much closer and regular interaction between accounting professionals and the businesses they serve. Even more, technology is taking its proper place in automating once tedious activities, allowing professionals to focus on causes and results rather than on transactions.

What is the real impact this is having on the accounting profession? It’s forcing a new focus and attention on change management within the practice, and is causing professionals to recognize the requirement for standardization of processes and development of controls which are the foundations for creating sustainability in a business. The goal now is placing reliance on process rather than people, which establishes the basis for intelligent automation. Standardization of processes does not require that the firm lose its personality. Rather, the mission at hand is to imbue the organization with its unique flavor and approach and to use process automation to develop and support consistency in the functions performed.

While cloud computing models allow accounting and finance professionals to work closer with their business clients, it is important that the practice look at those client interactions and develop standards for processes supporting frequently performed functions. These operations generally represent the activities within the firm which generate the highest levels of profitability due to the consistency in approach and repetition of tasks, and are the activities to apply intelligent automation to first. Those activities or engagements which represent the “one-offs” are often the most costly for the firm to perform, and therefore may not be the most profitable of activities and are certainly the most challenging to support with any significant level of automation. It is in this area where AI will find useful value in the practice, where a more informed answer than simple process automation is required.

The surprising finding when looking at many professional practices with more than one partner/professional involved is that these firms often fail to develop even the most basic of standard processes which apply throughout the firm. Rather, each partner or professional has “their way” of handling things, which challenges the supporting personnel as they try to deal with multiple working methods. The result is a lack of consistency in the service delivery to the clientele and reduced productivity and profitability for the firm.

The thing that these firms are failing to recognize – the light bulb over their heads that just isn’t lighting up – is that cloud computing and collaborative working models aren’t designed just to enable and facilitate a closer working relationship with clients. They’re also able to be applied inside the professional practice, enabling a more productive and efficient workflow which addresses the strengths and capabilities of the entire organization. And it doesn’t stop there. Businesses are relying upon their accounting professionals to provide guidance and develop controls and standards to support the client transformation from paper-based to digital operations, and embracing the entire realm of data and interactions associating with the business. Digital transformation in a client business demands transformation in those firms who serve it.

As professionals learn to go deeper in client operations they would do well to look internally, too, exploring how increased attention to process automation and consideration for the firm’s own “digital transformation” might lead to great profitability through market differentiation and improved performance.

Make Sense?

August 1, 2017

Centralize and Secure Business Applications and Data

laptop drawing The portable computer is an essential business tool for day’s mobile workforce, having the power and portability to meet the demands of executives and professionals working away from the office. While executives and mobile professionals get the applications and data they need to keep productivity high, carrying business data on devices outside the network introduces significant business risk.

There are studies which estimate that as much as 80% of the data a small business owns (data like customer files, contracts, product information and financial data) is copied to or stored on portable computers. When valuable business data is lost or stolen, the business can be exposed to a variety of problems – loss of revenue being just one. Losing track of business data can create legal issues, too. Customer privacy may be compromised, sensitive information could be exposed, or confidential plans might be made public if a business doesn’t take the right steps to secure its data.

It isn’t just the possibility of loss or theft which increases risk when data is copied to portable computers – the increased vulnerability of the information sits with the likelihood that the user will access unsecured networks, launch non-corporate applications, access private email accounts and perform other non-business related tasks with the computer because they have more access than with a fully secured corporate in-office desktop. User behavior is often what puts corporate data and assets at risk, regardless of the policies that might define correct and acceptable procedures. It is very easy for workers to unknowingly lose and leak data, and when the data is present on the portable computer it gets even easier.

A 2014 study commissioned by Cisco Systems found that employees around the world continue to engage in “risky” behaviors that put business and personal information at risk:

The majority (70%) of surveyed IT pros believe that as many as half of their data loss incidents are due to authorized program installations
44% of employees share work devices with others without supervision
39% of IT professionals have dealt with employees trying to access unauthorized parts of the company’s network
Almost half of the employees admitted to copying data between work and personal computers when working from home
18% (up to 25% in some regions) of employees shared passwords with their co-workers

Companies must not only protect their data for their financial well-being, but must recognize their legal obligation to protect much of the information, as well. The risk extends beyond the walls of the enterprise, to vendors and customers and consumers whose information may be stored in the company data. Additionally, portable computers exposed to malware and virus attacks are likely to pass the bad code to other systems they come in contact with, introducing not just risk for the recipient but liability for the infected laptop owner.

Where mobile computing brings huge advantages to today’s business, owners would do well to consider the benefits of enabling mobility through the use of server-based and hosted computing models. Rather than installing software and copying data to PCs and mobile devices, workers should be able to access a central system where the applications actually run. IT management is more efficient and security is easier to enforce when applications and resources are contained exclusively within the corporate boundary, even if they are accessible from without.

Virtual desktop and remote application solutions offer features that address a variety of potential risk factors as well as enabling improved management and security of IT assets. Centralizing and securing applications and data resources at the server allows businesses to deliver the mobility and functionality users need while enabling the information security and management the business demands. This is a foundation upon which remote desktop and remote application technologies were built, allowing users to have the real-time access to applications and data with full functionality and desktop modality, but without the requirement to install, manage and secure applications and data on the individual devices.

Make Sense?

June 21, 2017June 21, 2017

Improving the Business of Art: Making Beautiful Business Decisions

There is a lot more to managing and maintaining an art collection than simply collecting. In the art business, knowing where something came from, how it got to where it is now (and what it cost to get there), and keeping track of it thereafter requires software and systems to store and manage the information. A professional art collection management solution will do much more than simply keep an inventory list of items. This solution must store all the relevant information about the work as well as gather information while facilitating the various business processes relating to activities around the work. The first step to improvement is ensuring all the processes are being facilitated.

Acquiring the item, transporting the item, preparing the item, showing the item, maintaining the item, selling the item… all of these business activities performed must not just be accounted for, they must relate back to the work of art and become part of its historical record. Art tends to move around. Traveling from collector to collector or to different galleries, works of art may change location and ownership or custodial care frequently. The origin of a work and the tracked purchase history, as well as the history of placements is among the critical information to be stored with each item. This most valuable data is part of the legacy of the work that any professional system should address. If information is power, then better retention and management of information regarding a work makes the entire collection stronger.

The location or exhibition of a work, its purchase history, the related museum and contact records – all this and more must be maintained and managed with each and every item in a collection. Essential data such as provenance, condition and value is certainly kept for each work, but the key to making a truly useful system for collectors and artists both is the ability to get all the needed data in a single view or report.

Having the inventory information available for invoicing and reporting is one thing, but also being able to connect or identify individual works and collections with relevant contacts is surprisingly valuable. Tracking other information items like costs associated with shipping or framing, or storing both an appraised value as well as an insured value, provides for a comprehensive record of the work and its properties and makes forms and documents preparation not only more accurate but more efficient and useful, too.

Art businesses are like many other “product”-based businesses in that they have e-commerce needs, they build websites to show off their catalogue, they use mobile applications to display items, and they find much higher efficiency and agility when the websites and mobile applications work with the same real-time inventory data that the rest of the system works with. The goal is to achieve measurable results through improved efficiencies, and that comes from improved information management and integrated systems. Centralized computing models and connected cloud services establish the foundation.

Cloud hosting, remote access and mobile technologies, and location-based solutions are all part of the package for businesses involved in the business of art these days. Implementing a hosting solution which enable anytime/anywhere access to business applications and information is often the first key to unlocking the better and more efficient art business.

Whether it is collecting, selling or showing, users involved in the business of art need secure access to all their information whether they’re in the office or not so they have the data needed to support making beautifully intelligent business decisions when it matters most. The rest is just pretty pictures.

Make Sense?

April 19, 2017

Channel Partners: Selling Telephony With a Side of Remote Access and Cloud Hosted Applications

Channel agents and telephony resellers are facing stiff competition these days. Line access or voice service isn’t as easy to sell as it once was, and the convergence of digital voice and data has made things even less simple. Business customers demand comprehensive solutions that can address a variety of business problems, and they tend to seek out those solutions from the advisors they trust. The “advisor” could be a software reseller, an accounting professional, the local IT guy, or the professional that delivered great telco, voice or network access.

Convergence isn’t only for voice and data solutions; convergence is the combining and compressing of channels delivering those solutions. MSPs and “pure” IT resellers are also feeling the squeeze, finding telecom agents and channels among those challenging the VARs and MSPs operating today. Marketing budgets are increasing, but differentiation is not. Reselling is a crowded space and everyone has become a service provider. Having the right messages to win new customers and retain existing ones is essential not just for success, but for survival.

Once a channel partner or provider has established a solid customer relationship, it is important to capitalize on that goodwill (and develop even more) by delivering the other value-added services the customer needs. Access, connectivity and voice solutions are just a start when it comes to servicing small and growing business customers. Having come from an application hosting background, I am very aware of the demand for mobility and “always-on, always-available” computing services among businesses small and large. When the partner is working with the customer and is solving connectivity and telephony problems, the likelihood of successfully selling additional IT solutions to address mobility is quite high. The challenge has often been with the investment required for training and certification; development of new competencies which are viewed as diversions from the core business. Evolution of technology, markets and demand suggests that offering a broader base of solutions isn’t a diversion any longer, it has become a core requirement.

Secure remote access to on-premises systems, managed hosting on cloud servers delivering always-on service or disaster recovery, and collaboration tools that keep everyone on the same page – these are the solutions that savvy businesses are looking for, and which represent the additional value channel partners and service providers could be delivering to their valued customers. After all, if the customer can’t get what they need from their trusted reseller/advisor, they will find somewhere else to buy, removing their “advisor” from the mix. Most business owners would agree that it takes less to nurture and maintain existing customers than it takes to find new ones, so the investment in offering and delivering value-added solutions is well worth it.

The best way for channel partners to retain their customer relationships is to offer a full range of solutions and value-added services to meet the variety of needs of their business clientele. MyQuickCloud, for example, is a highly successful partner solution and add-on for resellers of IP telephony services and line access. MyQuickCloud offers very flexible and affordable secure remote access and cloud hosting solutions that do not require investments in training or certification to resell, giving channel partners and telecomm agents the right stuff to beat out the competition and keep small business and growing enterprise customers happy and coming back for more. Partners leverage their expertise and creativity in developing solutions with MyQuickCloud, resulting in cost-effective and powerful network, application and continuity services not previously available.

MyQuickCloud secure remote access creates a secure business cloud from on-premises systems, with hosted or co-located cloud servers, or any combination of on-prem or offsite hosts. The on-premises capability leverages investments in existing infrastructure and adds value and capability to locally installed systems, a benefit which is not available with traditional hosting models. Able to be positioned as simple remote access, managed hosting or complete disaster recovery, MyQuickCloud gives channel partners a simple yet comprehensive approach to meeting customer computing needs regardless of the applications in use or mobile devices to support. MyQuickCloud is also used by installers and support technicians, enabling remote access to client on-prem systems, turning service and support into a more streamlined and efficient effort and improving customer service and retention.

I wrote an article a while back about how it all comes down to 3 applications for small businesses… applications to address fundamental business requirements. Among those requirements is the need to communicate. Whether it be via voice or electronic mail or other means, every business communicates and every business needs communication tools. Chief among the communication tools is the voice service (telephone), whether it be on-premises or hosted, digital voice or IP (not much analog out there anymore) or some combination of all of the above. Extending telephone systems to service a remote and mobile workforce or to connect multiple business locations is a high demand business and has proven to be very lucrative for many partners. Adding value to these solutions by delivering remote access or hosting service simply increases the overall value of the system and allows business customers to take full advantage of mobile, connected and integrated working models.

Make Sense?