Strong Passwords and MFA : It’s All About the Bots

Robbie the Robot from movie Forbidden Planet

You may have noticed that more online services are requiring strong passwords – cryptic phrases or letter combinations along with symbols and numbers – and Multi-Factor Authentication (MFA). The goal is to keep services more secure than a simple password allows.

These service providers have recognized that their services are far more secure when the user has to prove they are who they are, and prove it in more than one way. A password plus a special code texted to your phone, or maybe an email to your backup email account are examples of MFA. This means that the password alone isn’t good enough to gain access; the user must satisfy an additional challenge to confirm their identity.

Why is this additional level of account security a good idea? BOTS, that’s why.

A bot is a software application that is programmed to do certain tasks. Bots are automated, which means they run according to their instructions without a human user needing to start them up. Bots often imitate or replace a human user’s behavior. https://www.cloudflare.com/learning/bots/what-is-a-bot/

Bot (like roBOT) does what you tell it. Give it instructions and it runs. Give it some rules to follow and actions to perform when certain conditions are met and off it goes.

The problem with bots is that not just the good guys use them. Bad guys use them… a lot.

Bots can send emails, engage in chats and help you reset your password. They can also carry out cyberattacks at a pace that no human could match. Bots will search for public IP addresses, they’ll pummel an address with intrusion attempts and logins and may keep trying until they’re either successful or they give up. Bots are very good at brute force, because they have all the patience they need. It’s software, so it doesn’t get tired or bored and it can be programmed to not give up.

This is among the reasons for Noobeh’s strict password policy and why we strongly recommend our clients don’t store their passwords to make connecting to the service faster and simpler. Fast and simple is good but not where security is concerned. Our goal is to not only keep your applications and data available for anytime/anywhere access, we want to keep your cloud environment secure and as safe as possible.

Contact us today to get the cloud hosting platform your business needs, along with the privacy and security features the Microsoft Azure platform can provide. Keeping your systems secure isn’t just about keeping your secret password a secret. It’s about putting in place the best methods possible to ensure that your account doesn’t get compromised because a bot guessed your pet’s name.

Make Sense?

J

For Accounting Professionals: Private Hosted Solutions and Helping Clients Cope with the New Normal

Accounting professionals have an opportunity right now to help their business clients through the difficulties presented by the COVID-19 pandemic. With work-from-home mandates and increasingly fluid reporting requirements to support grants, loans and loan forgiveness, business owners need all the support and good advice they can get.

The global pandemic is changing the landscape of business worldwide. Many small businesses in the US have either closed or are on the brink, looking for ways to keep the doors open and employees paid. Supply chains are strained, distribution has slowed, and workers are being asked to work from home if possible.

These are challenging times, but the guidance and support you can provide to your business clients can be just what they need to help keep the doors open and workers producing. Remote access, cloud hosted applications and data, and real-time accounting support and management reporting are the weapons you and your clients will use to fight the conditions that are currently working against you both.

Help your clients deploy cloud hosting services for their entire business.

Running applications and storing data on an in-house network increases the cost and complexity of supporting a remote or mobile workforce, for you and for your clients.

Remote access and supporting work from home requires that users have the means to communicate with each other and to collaborate on the work. Tools to support communication and collaboration are critical when the workforce is distributed, operating from a variety of locations and with whatever device is available. Yet business owners, operators and managers may find that collaboration apps and other online tools don’t provide access to the applications and data required to do all their work.

To address the problem of working on client data, some accountants may install the client software and copy the data to their own in-house networks. This creates a situation where the accountant is paying for computing resources, space and management of client applications and data in addition to their own. This increases the cost of internal operations for the accounting firm and can impact internal system performance while also reducing overall productivity.

More to the point, this model only supports doing after-the-fact work for the client, which results in the data and reporting being outdated and far less useful to the client in supporting daily decision-making. This model also does nothing to help the firm with their own possible work-from-home needs even as IT support and on-site service becomes more limited.

Accounting professionals wanting to provide services to clients proactively rather than reactively must have real time access to the same applications and data that the client uses. The old fallback to remote control solutions is one approach, yet it is not really an optimum solution to the problem.

Remote control, like PCAnywhere, GoToMyPC or LogMeIn expose the professional to more of the client computing environment than is necessary, introducing risk and the potential for blame if something goes wrong. And remote-control solutions are single user, reducing productivity because the client can’t use their system while the accountant controls the computer. RC solutions also rely on the availability and function of the on-premises systems. If the on-prem systems aren’t turned on, up and running and accessible, then the remote user can’t connect.

It may be that online or web-based applications are an option, but for many businesses they aren’t really a viable solution. QuickBooks Online is simplified software and is not appropriate or usable for many businesses. The QBO subscription model is per-company, limiting options and reducing cost-efficiency for businesses with multiple entities. And QBO doesn’t address other business needs, such as working with documents and reports, and it can’t provide any access or support for other business applications. Even the ability to backup and preserve data is very limited without specialized services and tools.

Shared hosting service might be closer to the right answer, yet shared hosting is generally only useful for very small organizations and supports only core QuickBooks functions, so it can be as restrictive QBO. Shared infrastructure used by the shared hosting platforms can also introduce significant risk to every business on the platform because ransomware and malware can easily move through connected file systems and servers.

Compare shared services to a public pool where it is very easy to transmit from one person to another; in these networks an intrusion can end up spreading malware to the entire network and platform, resulting in days or even weeks of outages. Unfortunately, disaster recovery is often limited to recovery of the provider hosting platform and does not always include recovery of all customer data.

The best solution for business is private, managed cloud hosting service delivered on a trusted and proven platform like Microsoft Azure.

Hosting service that takes advantage of the Microsoft Azure cloud  platform allows the business to centralize access to all their important applications and data, making it possible to provide complete application functionality for all users no matter where they are located.

Using the Azure platforms means that security, fault tolerance, scalability and agility are designed into the solution rather than being extras from the hosting provider. Microsoft-managed datacenters and Microsoft-managed hardware means the experts in systems and security are handling the big stuff while the service provider focuses on what the client needs.

The virtualization technology enables the agility to meet changing business needs, scaling systems up or down if necessary. Massively scalable platform allows services to be right sized now without concern for future resource requirements (no buying ahead based on possible future needs). There are no arbitrary limitations placed on the applications or services the business needs to run on the cloud platform, and no fees for running more apps.

Making all the applications and data available to workers, when and where they need them, is the key to promoting higher levels of productivity while delivering the data management needs to support daily decision-making.

Now that you have access, provide pro-active support and help business owners and managers make the right decisions.

Better data and reporting to support business and finance management is more important than ever, especially when having the right information can mean the difference between keeping the doors open and closing shop for good. Whether the goal is to shore up finances to keep employees on staff or to create a cushion to help weather supply chain disruptions, businesses owners need quality financial and performance data in order to make the right decisions for the company.

Once the accounting professional has real-time access to client systems, they can work cooperatively in the data to ensure that the right information is available when it is needed. As business owners seek to take advantage of grants and loan programs available due to the pandemic, the financial and other performance data becomes even more essential in terms of developing qualification and eventually forgivability of the loan.

With timely access, proper reporting tools and regular support and oversight, business owners benefit from a closer working relationship with their accounting professionals. The additional support and proactive service is more necessary now than ever. For the accounting pro, an elevated relationship with client is being developed, where the services provided become more meaningful and the value of those services more evident.

Make sense?

J

The New Not-So Normal

Millions of people are out of work. Restaurants and shops are shuttered… some permanently. Manufacturing production is largely halted, and the US economy comes to a screeching stop. “Essential” services are available and medical and service workers continue to perform their jobs, but things are anything but normal even for those who remain at work.

The global pandemic has impacted nearly every aspect of daily life and it feels like uncertainty is all we can expect for the time being.

Change is a normal part of daily life – adjusting to varying conditions and forces in and out of our control. But the current climate of not knowing is something none of us has ever faced before.

We take certainty for granted. Our society assumes that things will continue to go pretty much the way they have. We’re used to operating within a standard set of boundaries, and we are just beginning to understand what happens when those boundaries which define “business as usual” go away on a global basis.

We understand that things can happen to disrupt daily life, but there is always somebody or something there that remains… something there to prop up the impacted. You think about global relief efforts where people from all over the world gather to help those in need wherever that need occurs. What happens when the need becomes global? That’s where we are now.

Never in my lifetime did I believe we would see the northern and southern borders of the US closed to regular travel. I wouldn’t have believed that we would see all travel to other countries restricted in some manner, not to mention the locking down of cities, districts, counties and townships worldwide. Essential businesses and their employees continue to operate in increasingly difficult conditions, and hoarders are pillaging the available supply of goods, making things unnecessarily difficult on everyone.

It is kind of like a bad horror movie with all the stuff to freak you out…

  • Global pandemic.
  • Researchers working feverishly toward a treatment or cure.
  • Borders closed and travel restricted.
  • Shortages in medical and other supplies.
  • Field hospitals being setup and morgues being overloaded.
  • Gun and ammo sales skyrocket along with unemployment.
  • Limits on goods available due to hoarding.
  • National Guard deployed to cities.
  • Politicians trying to appear sincere while they take advantage of the situation.
  • Fake news and fear mongering.

The real kicker is that we don’t know when it will end. Maybe things will be better tomorrow… or in a few weeks, which is more likely. But still things won’t be as they were before. Not for a long time.

But there are a few things we have learned already. One of them is that we need to better-prepare businesses to operate with some agility… to be able to find ways to continue doing business even when the workforce isn’t able to go to the office. There are always some jobs that must be done on-site, like grocery, restaurant, factory or warehouse work. But there are also typically administrative and support staff that don’t necessarily need to be present in the building in order to be productive.

Supporting the work-from-home or anytime/anywhere access models aren’t just luxury items any longer. It isn’t just a matter of offering options to make the job more attractive. Having a means to continue the operation and allowing workers to do their jobs while away from the office has become a business imperative. Schools are forced into distance learning models, and physicians have instituted virtual doctor visits.

Via remote is the way most things are getting done right now.

And it isn’t really just about having that option to work from anywhere or keeping social distancing in mind. Consider also the resilience of the IT infrastructure. With travel restricted and people operating under stay-at-home orders, getting on-site IT repair or replacement service may not be an option. On-premises systems are completely dependent on the facilities and if something goes wrong there may not be a way to address it.

There are a great many reasons why moving your systems off-premises and into a cloud hosting situation is a good idea. Creating predictability in IT costs is a big one. Increasing the fault-tolerance of the systems is also important, as is improving performance while not over-purchasing for possible future needs.

But right now, today, it is all about having the access your workers need while building a level of agility in the system to meet changing requirements. And I think we can all agree that things are changing, so adapting your business IT strategy to address change is no longer an option. That is one thing that is certain and it is our new normal.

Make Sense?
J

Working from Home: Remote Access Capability to Address Coronavirus Concerns

Scanning electron microscope image of the  coronavirus SARS-CoV-2 (blue) emerging from the surface of cells cultured in the lab. Image credit: NIAID-RML

COVID-19, as the new human coronavirus is now known, is spreading around the world and that means that individuals and families – and businesses – should prepare.

The Centers for Disease Control has said that it fully expects community transmission in the United States and is asking families to be ready for the possibility of significant disruption to our lives. This shouldn’t be a call to incite panic and doomsday scenarios, but it also isn’t something to be taken lightly.

Business need to consider how they will help keep their workforce working as symptomatic individuals quarantine themselves and others look to reduce their exposure in public.

Being at risk personally isn’t the only reason to prepare. Many will feel that the risk to them is small, recognizing that the disease is quite mild in most of those that become infected. But the primary reason to prepare is to help lessen the risk for everyone. Taking preventative steps to limit the spread of the disease is essential for everyone.

Prevention means doing more of what you should already be doing to help prevent the spread of any communicable disease…

  • Wash your hands
  • Cover your mouth when coughing
  • See a doctor if you’re sick
  • Avoid other people if you are infected or showing symptoms

This means staying home from work if you are even a little bit sick.

Look at what’s happening in Japan, a country known to promote spending long hours in the office as a crucial element to success. Authorities there are urging companies to break with that long-standing belief system. They are encouraging businesses to have their employees work from home to help limit the spread of the virus, yet most businesses aren’t prepared at all to handle a remote workforce.

Panasonic, NEC, and Mitsubishi are among the growing number of firms that have mandated or recommended remote work for tens of thousands of staff. The change is testing the ability of the nation’s companies to embrace a more flexible work style—overturning a workplace culture that dates back decades and values physical presence and endurance of long hours over productivity or efficiency. https://fortune.com/2020/03/01/coronavirus-japan-government-remote-work/

This is where cloud hosting services can be a big benefit for the business. Migrating the desktop and networked applications to a cloud-hosted platform allows the business to continue using the software and systems already working in the business, but to run them from a cloud platform that enables workers to access from anywhere… including from home.

Rather than trying to convert to web-based applications, requiring retraining of employees and conversions of data, businesses find great success in simply moving their in-house systems to an agile, scalable cloud platform that can be accessed via the Internet. Particularly when it comes to enabling remote offices and at-home workers, a cloud hosting approach is the way to rapidly move critical IT infrastructure out of the office, providing a means to support remote workers almost immediately.

Businesses find great benefits from hosting their applications and data in the cloud every day and without the pressures of global disaster and pandemic facing them. When the need to support remote and mobile workers becomes a work-from-home mandate, the business is already poised to meet the demand and still get the work done. It’s just another form of prevention for the business.

Make Sense?
J

Using a Remote/Cloud Server is Like the Green Screen Days – Only Better

Remote access and “dumb” terminals have been around for many years, allowing users to connect to computing resources located elsewhere… whether in another room or another state. Using hardware or software called an “emulator”, one computer system is able to behave like another computer system. In the case of the dumb terminals and green-screen devices, the emulator allowed the terminal device to mimic the keyboard layout and screen display properties so they would be recognized and used properly by the remote computer.

Consider that you might want to use your Macbook to connect to a remote Windows server. Microsoft Remote Desktop is an emulator of sorts which allows a local device (PC, Mac or mobile) to emulate the properties of a Windows remote computer so that screen, keyboard and other input devices function.

A cloud hosting environment operates similarly to the timeshare or service bureau systems of the past. You use a terminal – in this case a device or computer connected to the Internet – to operate your applications on the host computer.

The connection used to be over phone or fax lines, with modems making that squealing and squelching noise to let you know the digital handshake was being made. These days, remote access is much quieter, using the Internet as the network rather than making individual phone calls to reach the remote host.

Once your device – the PC, Mac or mobile device you are connecting with – establishes its connection to the cloud server, the computing resources and applications in the cloud environment become available.

Since the cloud server is a Windows environment, we are able to run most Windows-based applications and other network services you would typically find in a business. We manage the environment so your users can focus on running the applications that help them get their work done.

What’s different from the old green-screen terminals of the past is that you can use your modern devices – Windows PCs, Apple computers and iOS or Android mobile devices – and take advantage of the audio, video and other capabilities they support both on and off the cloud platform.

This environment provides you with the best of both worlds – the applications and familiar working environment you need, as well as the flexibility of accessing from any location and using any device.

When your business operates from the hosted cloud server there are no different versions of the software to worry about. All users work on exactly the same system in real-time so there is no more concern about software updates for individual computers, or licensing applications for use in multiple locations.

Files do not need to be moved or converted in order to work with the cloud platform. File are accessed centrally and in real-time so all users are working in the same database at the same time.

No sophisticated technology or training is required to take advantage of our hosting solutions since your users already know how to use Windows and QuickBooks. It’s a simple transition from operating on the local computers to working on the cloud platform.

Once you migrate your systems to your private cloud environment, you’ll wonder how you got along without it.

Make Sense?

J

More Than Expenses: Manage the Purchase Process

For many business owners, just hearing the term “expense management” brings about visions of traveling employees with piles of receipts and vouchers to be organized, accounted and reimbursed for. The images are often fleeting, however – gone out of mind with no lingering thought because these business owners don’t have personnel who travel frequently, and they don’t have to deal with volumes of expense reports from employees. Expense management solutions aren’t anything these business owners are looking for.

Yet, what does happen every day is that equipment, materials, supplies and services are purchased to keep the business operation going. Calls are made to vendors; price quotes are developed, and purchase requests are typed up in Excel spreadsheets and piled on the owner’s desk for approval. The business owner rifles through the various requests and brings in the bookkeeper to help work through the decision of which items to authorize based on current cash availability.

Because the availability of working capital changes frequently with billings being sent out and receipts being deposited daily, the owner and the bookkeeper spend much of their time together figuring out which purchases to make and when. It is a continual and ongoing process, taking a lot of time and attention away from other important business matters.

Too often, thoughts of managing these efforts with more structure addresses only half of the issue – the purchase. Perhaps there are systems for planning for materials requirements and predicting when parts or supplies will be needed, but that is still just one side of the problem. The other side is paying for it. Factoring those purchasing plans into the cash requirements of the business and having a meaningful and effective way to monitor current cash and expected receipts as well as purchase requirements is essential. Resource and materials planning takes purchase planning, and purchase planning takes visibility into receivables, cash flow and cash availability.

Expense and purchase management processes generally involve three main steps: planning, tracking, and reporting.

As the process involves planning, it suggests a proactive rather than a reactive approach to cash management and purchasing activities. By bringing together all the critical data which describes inflows and outflows, the business owner can have the information necessary to not only forecast (plan) cash requirements but to also understand the availability of working capital.

Knowing ahead of time that traditionally slow paying contracts aren’t factored into immediately available cash is important and being able to adjust purchase schedules based on availability of funds is essential.

Where expense management may not be a big part of the business, managing cash flow and purchasing goods and services is, even in the smallest of enterprises. Make sure the business has the tools in place to help bring an additional level of intelligence to purchasing activities, and that those tools deliver the benefits of a structured (but not time consuming) purchasing approvals and proactive cash flow management process.

This aspect of business – expense management and purchasing processes – is an area where accounting professionals can be of great service to their business clients.  Providing high-value solutions that increase cash efficiency and facilitate cash and purchase planning helps the business function even as conditions change.

Make Sense?

J