Prey or Empowered? Small Businesses and IT Security

Now more than ever, small businesses need to be vigilant with their information technology security. Small businesses may not be the big fish in the sea, but there are plenty of them out there to catch. Small businesses tend to make the best targets because they often fail to perform security audits, they may not be willing to invest in the resources needed to protect themselves, and they frequently don’t even carry the right insurance coverages. To hackers, small businesses are easy prey.

“Don’t think you are too small to be affected,” says Erik Knight, the founder and CEO of SimpleWAN. “Every place you have an employee or office is a potential entry point. Take it seriously; if you have something worth taking, a hacker will try to take it.”

https://www.forbes.com/…

There are a few things every business can do to improve the security and privacy of their data. It isn’t an option any longer; these are essential elements in an overall security strategy that can make the difference between staying in business and not.

Use strong passwords, not easy-to-guess words, phrases or sequences (1234 is not a strong password). Passwords should be unique, more than 8 characters in length, and have a mix of numbers, letters, and special characters.

Keep software updated. Whether it is the operating system on your computer or the software you use to write letters, having up-to-date software matters. Developers don’t just upgrade software to fix bugs or introduce new features; software often gets updated because of security issues or vulnerabilities.

Keep networks and connected devices secure to make sure that the computers and connections aren’t introducing weaknesses into your system. Not only are password controls and software updates needed, but firewall security and good anti-virus/anti-malware solutions are also a must. Keeping an eye on the server matters, but the connecting points and end points are where many vulnerabilities exist.

Set up two-factor or multi-factor authentication to further secure logins. 2FA and MFA is like having ID besides just your driver’s license to prove you are who you say you are. Your password, like your DL, is just one factor; you need one more thing to prove your identity for 2FA, like a code from your phone or maybe your fingerprint. The point is that there should be more than just a username and password to access important data.

Restrict use of personal email or social media on work devices. This gets a little trickier with smaller businesses, as many don’t or can’t support providing users with all company-owned devices. There are tradeoffs to allowing users to bring their own devices (byod) versus using company-owned devices. When mobile devices are part of the mix along with desktop and portable computers, it becomes even more complicated and the risk potential increases.

Use encryption for data in transit and data at rest. Encryption is like scrambling the data and then unscrambling it when you access it. In transit, data may be encrypted by a VPN so that it is protected over the wire (in motion) as it is sent and received on the network. RDP is also encrypted, but this remote access method’s main purpose is to keep the data from leaving the server in the first place. At rest, like when it is sitting on a hard drive or other storage location, data can also be encrypted. To open the file or file system, you need a key to decrypt it.

Keep all data backed up and create a way to rapidly recover your server and systems in the event of failure or compromise. Backups are great right up until you find they are as damaged or unrecoverable as your main system, so make sure to have a policy of testing your backups periodically. There are many ways to back up and protect your data, including external drives and cloud storage. If data gets lost or corrupted, you want to be able to restore it from a backup. Regularly audit your backup and data security practices to help identify weaknesses that make the business vulnerable.

Educating employees on the importance of cyber security is among the most important steps a business can take to protect itself. Keeping passwords secure and secret, knowing how to spot a phishing email and what to do and not do with it, not clicking on suspicious links in emails, not sharing personal or confidential information online, and what to do in the event of a breach are all things that should be regularly discussed with workers and supported by written policies.

Managed Azure cloud servers from Noobeh help you keep your business information more secure. Our services demand high levels of security and privacy, and we help our customers keep their data and systems safer and more secure by handling some of the requirements for them.

  1. Strong password policies and MFA is our standard setup, and software updates and patching are part of the service.
  2. Working on the cloud server keeps data on the server and not traversing the network or downloading to individual PCs, so information stays secure and separate from whatever a user runs on their local devices.
  3. Data on the Azure virtual machines is encrypted at rest, and additional encryption is available to add more layers of protection. Data in motion is encrypted, but very little data actually traverses the wire.
  4. Servers and data are backed up regularly with snapshots and file level backups, allowing for simple file restores as well as comprehensive system recovery.

For small businesses, Noobeh has the solution for creating a more secure and better protected IT environment where applications and data can be available to those who need them without compromising the investments already made in training and process development. Moving software and data to a private cloud server allows companies to continue using the software they rely on, just in a better way. Instead of being easy prey to hackers, our customers benefit from higher levels of IT administration, management and protection that empowers them to work the way they need to – any time, anywhere.

jm bunny feetMake Sense?

J

Controlling SaaS Inflation

The cost of everything is going up, and that is as true for businesses as it is anywhere else. From office space and salaries to vendors and suppliers, everything is hitting the bottom line harder than before. For businesses invested in online application services and Software-as-a-Service solutions, the rising cost of usage is outpacing other expense categories at a fairly high rate.

Consider that many small businesses start with whatever is cheapest and easiest to use, which usually means a web-based solution. From there, the business cobbles together it’s IT by using a variety of applications and services and eventually ends up with a tangled web that can be difficult to straighten out.

Even larger enterprises find that shadow IT implementations and web-based application services make their way into the mix, costing companies greatly through unmanaged subscriptions, lack of vendor management, and missed opportunities for consolidation of resources.

Covid and remote work requirements fueled a lot of the growth in SaaS adoption as businesses implemented solutions and services to support a distributed workforce. Leaving millions of square feet of office space unused while at the same time investing in remote and mobile work, businesses have had a hard time of it.

According to an article on CFODive, “Software inflation has remained “stubbornly high” this year at a rate of 8.7% — more than double the inflation rate as measured by the consumer price index in the U.S., according to research conducted by London-based Vertice, a software-as-a-service and cloud spending management company.”

In 2023, SaaS inflation increased by 8.7%, meaning the same unchanged set of SaaS products will cost businesses significantly more than it did a year ago.

Vertice.one SaaS Inflation Index report


The Vertice report indicates that sales software, finance software and productivity tools represent categories of software that saw inflation rates of over 10% as compared with 2022. Another uncomfortable reveal from the report is that most software companies simply hiked their prices, and in some cases, they hiked them up a lot (23% increases, for example). The rising cost of Software-as-a-Service, referred to as SaaS Inflation, is a lot higher than with other products.

Part of the problem may be the global nature of online application services and SaaS companies. Costs of operations and the pricing of the product may be consistent across geographies, yet different regions will experience inflation in costs of other goods and services based more on regional factors. The result is a SaaS inflation rate higher than the consumer inflation rate. Yet even in areas where the SaaS inflation rate seems to be more in line with consumer inflation, it’s still a lot higher than many other categories of products and services. Only food and beverages compete at similar levels of price inflation.

Another part of the equation is the value for the dollar. Everyone knows that a dollar today buys less than it did last year. At the grocery store, this shrinkflation is obvious when an item is now more expensive, and you get less for the same price. With SaaS, the shrinkflation may not be quite as obvious. License packages change, features are introduced (or removed), and the value to the customer can change dramatically over time while the rates simply increase.

There are some important steps a business can take to minimize the impact of SaaS inflation, and it all starts with knowing what you have and how you use it. Reducing or eliminating shadow IT and implementations outside of general governance, consolidating vendors and licensing, and reducing redundancy in functionality and process support are key areas to focus on to control the spend.

Mendelson Consulting has experienced consultants that can work with your business to understand your needs and evaluate your options, helping to find the right solution for the problem while minimizing sprawl and spending.

Whether you rely on Software as a Service, Infrastructure as a Service, or any other -as a service solution, the Mendelson Consulting and Noobeh cloud services teams can help you do more with your investment.

jm bunny feetMake Sense?

J

Business Data Loss is a Growing Problem

The portable computer was the secret business weapon of yesterday and is today’s essential business tool. The processing power, portability, storage, and connectivity available with laptops, tablets and smartphones has created a seamless extension to the office. Business users can work with their applications and data from just about anywhere. While mobile devices are valuable when it comes to conducting business, they also pose additional security risks. Increased efficiency, mobility, and accessibility can also mean an increased potential for a data breach or business data loss.

The workforce of today is mobile enabled. Business users, owners and managers, accounting advisors and business consultants can access all the information and analytical capability they need to perform their jobs and make informed business decisions, capturing and collecting important information while keeping productivity at the highest levels no matter where they are.

“87% of businesses rely on their employees to use their personal mobile devices to access company apps”, according to a post by Perillon. Some studies have estimated that as much as 80% of the data a company has (like customer files, contracts, financial data, product specifications) might be stored on portable devices. This means that mobility comes with risk, which is why Mendelson Consulting and Noobeh cloud services utilize cloud-based platforms and services to keep data safe and secure.

According to business data loss statistics compiled by Businessdit.com, the two most common causes of data loss are hardware failure (40%) and human error (29%). Overall, malware causes 35% of all data loss, taking advantage of the 21% of files that businesses are not protecting at all.

The stats show that it takes approximately 206 days on average to even detect a data breach, the costs of downtime and losses average around $1,410 per minute for small businesses, and 22% of SMBs close after a ransomware attack.

Data loss or theft can create big business and legal problems, too. Customer or client privacy may be compromised, sensitive information may be exposed, and confidential plans may be made public if a business doesn’t take steps to secure mobile data.

“The average cost of a data breach in 2021 was $4.24 million. That’s a huge increase from the $3.86 million cost in 2020. And it’s only going to get more expensive in the future. Companies need to be prepared to deal with the fallout from a data breach, which can include everything from legal costs to damage to their reputation.”

Businessdit.com

There’s an old saying that there are only two types of businesses: those who have lost their data and those who will. Imagine the potential chaos, risk exposure, reputation damage and the expense of losing your valuable business data or having it exposed to unauthorized parties.

While computing mobility delivers a host of advantages to the business and the user, care must be taken to ensure security, privacy, and confidentiality of the business information and protecting against business data loss.

Increased exposure to liability is a reality for any mobile business, and the risk is only multiplied by the number of systems a company has in the field. Smart businesses reduce risk by deploying secure yet versatile platforms for their workers that allow data to be stored and protected in centralized environments rather than on individual computing devices.

Via the cloud, businesses of all kinds are reaping the benefits of new and innovative service delivery, achieving the freedom and functionality a mobile working model demands. Mendelson Consulting and Noobeh cloud services have the cloud solutions and managed IT services that provide the mobile capability businesses need, but with the additional protection, additional security, and ongoing management that the value of the data demands.

jm bunny feetMake sense?

J

Upgrade from Small Business to Enterprise-Class IT on Azure

It can be a challenge to forecast when a small business will outgrow their current information technology or platform. Many businesses have complex needs which require enterprise approaches and don’t fit squarely into the SMB box.  Yet every business might need to consider upgrading their technology or platform when they experience certain signs or reach specific milestones that indicate their existing technology infrastructure and tools are no longer meeting their needs. The business’s growth trajectory, operational needs, industry requirements, and budget considerations will all play heavily in the decision to upgrade to Azure platform and enterprise-class information technology.

As a business expands and diversifies its operations, it will require more complex IT solutions to handle various processes, departments, and locations. Expansion generally comes with added complexity in operations, processes, and data management, so growing businesses need platforms with advanced features and integrations that can handle the increased complexity.

When a small business experiences significant growth in terms of customers, employees, or revenue, the existing technology might struggle to keep up with the increased demand. When the current technology causes performance bottlenecks, slow response times, or downtime that impacts business operations and customer experience, it’s a sign that the business might need more robust and scalable software or platforms. Virtualized platforms (Noobeh prefers Microsoft Azure) can provide the scalability and resources needed to accommodate growth and can provide the necessary security features and tools to meet compliance requirements.

If business operations are mission-critical and any downtime would result in substantial losses, upgrading to the Azure platform and implementing the available redundancy and high availability features can ensure business continuity.

If the business is expanding its operations to multiple locations or serving a global customer base, it might need technology solutions that can support distributed teams, communication, and data access from various locations. By its nature, the Azure platform is cloud and not tied to a location, enabling users to collaborate, communicate and work from virtually anywhere.

If the business needs to analyze large volumes of data for strategic decision-making, Azure’s enterprise-level platform supports advanced analytics and reporting. Microsoft Azure database as a service, Power BI and other solutions provide businesses with the robust and powerful tools they need to develop the data warehouses and reporting systems that create a competitive advantage.

It is important to carefully assess the business’s current state, future goals, budget constraints, and technology requirements before deciding to upgrade technology. There may be several suitable upgrade paths that could be followed, the best path for the business is the one that allows for future change. While moving to a cloud platform might come with upfront costs, a more agile and capable system can offer long-term cost efficiency by reducing the need for frequent technology upgrades while providing the affordable scalability the business needs.

Connecting with Noobeh’s cloud services team is the best next step for small businesses looking to improve their IT platforms and operations. Migrating beyond local networks and servers, Noobeh helps businesses upgrade to enterprise-class infrastructure, applications and services which support expanding and changing operations.

jm bunny feetMake Sense?

J

QBonAzure: QuickBooks on Microsoft Azure Delivers Great Success for Small Business


For any business, the resilience and agility of IT systems can mean the difference between performing adequately and performing with great success. When a business elects to run their QuickBooks applications and data on the Microsoft Azure cloud via QuickBooks on Azure (QBonAzure) from Noobeh, they gain numerous advantages not available with locally installed IT.

Microsoft Azure is a highly available platform, meaning that it has built-in redundancy to ensure that applications and data are always accessible, even in the event of a hardware failure. Businesses running on the platform never have to worry about whether or not their server is aging and may fail due to hardware issues.

The platform also allows Noobeh to easily scale each client’s system up or down as needed, without the need for additional installation work. This allows each client business to quickly respond to changes in demand and grow their operations as needed.

With Microsoft Azure, Noobeh can provide from a broad range of security features that are built-in as well as enhancing protection with advanced features and services from Azure, Microsoft 365 and more. This all goes to help protect against data breaches and unauthorized access to sensitive information.

Azure has a global footprint, with data centers in multiple regions around the world. Noobeh provides services from all US-based Microsoft Azure regions, allowing businesses to host their QuickBooks in the location closest to their users, reducing latency and improving performance.

Azure also offers a wide range of services that may be integrated with QuickBooks or other business data, such as analytics, artificial intelligence, and machine learning. This allows businesses to gain deeper insights into their financial data and make more informed decisions.

For businesses focused on compliance, Azure meets a wide range of industry standards and regulations, such as HIPAA, SOC 2, and PCI DSS. This can help businesses meet their compliance requirements and avoid penalties.

Overall, hosting QuickBooks on the Microsoft Azure platform can provide businesses with high availability, scalability, security, global reach, integration, and compliance advantages that can help them run their operations more efficiently and effectively.

Noobeh cloud services and QuickBooks on Azure utilize only the Microsoft cloud for their client deployments so that each business client has the benefits of big enterprise technology without the big enterprise price.

jm bunny feetMake Sense?
J

Cloud Platforms for Client Data Help Reduce Workload Compression in Accounting and Finance

Accounting professionals have always viewed much of their work as being seasonal, waxing and waning with the turn of the months. From monthlies and quarterlies to the annual tax return, accountants’ work is focused as much on when as it is how much work must be completed. This regularity in the timing of the work has created somewhat of a false barrier to efficiency, largely because many professionals wait for the workload to appear, and it always appears at the last minute. Instead, we suggest leveraging technology to create new working models with clients to alleviate workload compression and deliver improved service and insight in real time, when it really matters.

Accounting is no longer considered to be a final resting place for financial and performance information. Accounting isn’t passive; it is an active participant in developing and managing data as it flows through a business. Professionals who continue to perform write-up and other time-consuming “re-accounting” tasks will often find that their approach removes them from the truly interesting part of the job. Instead, when the professional participates with their clients’ businesses and information on a regular basis, the accounting data can be adjusted so it is treated properly from the start. Better data provides for more informed decision making, and this is the real benefit the accountant can deliver.

The key for every accounting professional is the technology and how it might be applied to decompress the workload and even things out. Structuring standard processes for client intake, implementing workflow tools to closely manage data and deliverables, and improving the speed and quality of internal communications are all areas where tech can make the work more consistent and manageable. Much focus can be placed on the technologies a modern accounting firm would apply to its own workflows and data handling processes, yet there is often little consideration for how the accounting professional might maximize efficiency as well as effectiveness in working with the client data at the source.

Most fundamentally, accountants typically work in places where the client or data is not. Business is done at the business location, and that’s usually not where the public accountant is. Even in large enterprise, the work gets done and data created by others than those in finance, so it is up to finance to find the way to gain access to the data and ensure its proper treatment throughout the system. This is among the reasons for the emergence of remote access solutions and services. Through remote access the professional can access the information of the client businesses, performing data entry or adjustments directly into the client’s accounting system and avoid lengthy reviews and write-ups later.

While remote access solutions may work for some, the time-sharing approach that leaves the client waiting while the accountant does the work does little to maximize the efficiency of either party. Instead, an online working model that allows the client and the accounting professional to work independently yet collaboratively addresses the needs of both.

Online working models in no way require web-based or online applications as the sole foundation. For many operations, online or web-based versions of accounting and line-of-business applications lack the cohesion and functionality that more robust desktop and network applications can provide. Where some businesses have limited functional requirements that a simpler online app may meet, others continue to rely on the maturity and proven functionality of desktop solutions. For these businesses, the adoption of virtual IT platforms brings the “online” working model, system agility and managed service potential that are at the center of web-app popularity.

Once the accounting professional has access to the clients’ systems as well as the data they produce, the accountant can take a more proactive approach to correction and adjustment, as well as gaining a basis for providing insight and advice. The after-the-fact approach to accounting is the essential flaw in attempting to decompress the workload of an accounting practice. As long as the tabulation and treatment of business data remains a job to be completed at the end of the period, there will always be urgency in completing the task and the value of the work product is unlikely to increase.

However, through the intelligent application of technology – online application services and virtual computing platforms – accounting professionals can not only help their clients embrace transformative efforts to improve business and performance, but the accountant can relieve workload compression while delivering even greater value on a continuous basis.

jm bunny feetMake Sense?

J