Why Do You Need Multi-Factor Authentication?

by ontech | Jan 13, 2020 | Cyber Security

For years, a strong password has been the most basic form of protection for your online accounts, but today, it is no longer enough. In the age of security breaches, chances are good your credentials are among them.

If you truly want to protect yourself and your accounts, you need another layer of authentication. If you are not already using multi-factor authentication to verify your online identity, you may be on borrowed time with a false sense of security. By now, you may be wondering…

What is Multi-Factor Authentication (MFA) and Why Do I Need It?

Although you may not know it by name, you may already be familiar with multi-factor authentication. Many banks and financial institutions have been using MFA for years, favoring its inherent security advantages over the simpler user ID and password combination.

What Are Some Examples of Multi-Factor Authentication?

When multi-factor authentication is turned on, users must enter both their password and a second form of authentication. Depending on the business or institution, this additional authentication measure may be a phone call, an email or a text containing a code. But no matter what the process, access is not granted until that one-time code has been entered.

There are plenty of reasons to use multi-factor authentication, but among the most important is the additional protection it provides. With MFA, if a hacker obtains your login credentials or an identity thief purchases your information on the dark web, that data is useless without a special code.

The good news is multi-factor authentication is now available in a number of formats and platforms, including social media accounts, email and more. Many more organizations are now offering multi-factor authentication to their clients and customers, and in the age of rampant cyber breaches, that number is only expected to grow.

Microsoft and MFA

Software giant Microsoft is fully onboard with multi-factor authentication. The company now enforces MFA on all partner and administrator accounts.

Now that companies like Microsoft have adopted multi-factor authentication, this enhanced security verification has hit the mainstream. MFA is no longer confined to banks and brokerage firms; users are just as likely to encounter it on insurance accounts, email accounts and even social media profiles.

Single vs. Multi-Factor Authentication

Single-factor authentication requires only a username and a password, and while some sites require complicated passwords, others still allow simple credentials that are easy to guess and even easier to crack.

Multi-factor authentication adds an additional layer of security to online accounts, reducing the impact of stolen credentials and making the website far more secure. Even if a hacker has access to both your username and password, that individual will not be able to log on without the one-time MFA code.

With MFA turned on, the hacker would need physical access to the targeted individual’s smartphone or email account. It is this additional verification that makes multi-factor authentication so important, and that is why so many organizations have adopted the technology. If you have questions about securing your online accounts or your business security in general, contact Ontech’s support team online or by phone at 262-522-8560.

Cyber Crime Statistics in 2019: 10 Facts that Might Surprise You

by ontech | Dec 3, 2019 | Cyber Security

Each year, cyber crime continues to grow, infiltrating business through methods like phishing, ransomware and social engineering. Cyber criminals have found the path of least resistance and they are running with it. Cyber crime statistics in 2019 indicate that cyber crime has grown in leaps and bounds over the previous year.

According to zdnet.com, the average cost of cyber crime for an organization increased $1.4 million over the past year, to $13.0 million, and the average number of security breaches in the last year rose by 11 percent from 130 to 145. What does this mean?

• Cyber crime taking more time to resolve
• It is becoming more expensive to fix
• Everyone is a target

For now anyway, this is our new normal and hackers have evolved, adapted and they realize the most effective method is to target humans, the weakest link in cyber security.

2019 Cyber Crime Statistics

Check out these startling statistics that paint a very clear picture of cyber crime today – and learn what to do to stop it from happening to you!

1) Ransomware Remains the Biggest Threat to Small Businesses

In 2019, 85% of MSPs report ransomware as the most common malware threat to SMBs. (Source: Datto)

2) Small Businesses Are the Primary Target

On average, 1 in 5 small businesses report that they’ve fallen victim to a ransomware attack. Small businesses who don’t outsource their IT services are more at risk. (Source: Strategy Analytics’ proprietary research of the North American SMB market.)

3) 91% of Cyber Attacks Begin with a Phishing Email

Cyber criminals have zeroed in on the #1 most effective type of cyber-attack: phishing emails. As the leading cause of cyber threats, spear phishing involves targeting an individual or group of users by masking the email as a legitimate source like a banking institution or software company like Microsoft.

Hackers use tactics like urgency to get you to open the email without thinking twice and before you know it, you’ve clicked on a cleverly disguised malicious attachment or a link to malware.

Ontech has gone into length to educate users about how to avoid a phishing attack. There are multiple methods of phishing attack prevention that can be very helpful in keeping these attacks at bay. (Source: PhishMe research)

4) In 2019, Hackers Increased the Ransom by 37%

The average ransom requested by hackers is increasing. MSPs report the average requested ransom for SMBs is ~$5,900, up 37%, year-over-year.

Tip: If your business has become victim of a ransomware attack, DO NOT pay the ransom. There is no guarantee you will get your data back and you could be out thousands of dollars for nothing. The best defense against ransomware includes a multi-layered security approach. (Source: Datto)

5) In 2019, the Average Cost of Downtime is WAY Up

($141,000 in 2019 vs. $46,800 in 2018) Yep, you read that right.

Downtime costs are up by 200% year-over-year, and the cost of downtime is 23X greater than the average ransom requested in 2019. (Source: Datto)

6) Ransomware Attacks Occur Every 14 Seconds

Every 14 seconds is the frequency in which a business will fall victim to a ransomware attack this year. Estimates show that this number will INCREASE to every 11 seconds by 2021.

At the very least, it is critical that you have a reliable, regularly tested data backup solution in place so that if you do lose access to your data, a backup can quickly be restored, minimizing downtime and saving you a significant amount of time and money. (Source: Cybersecurity Ventures – 2019 Official Annual Cyber crime Report (ACR))

7) USA is the #1 Target

It’s great to be #1, but not so much when it comes to being the primary target of cyber security attacks. The United States is ranked #1 across all other countries targeted by cyber criminals. (Source: Norton Security)

8) Ransomware Attacks Predicted to Increase 5X by 2021

It is predicted that ransomware attacks against healthcare organizations will increase by 5X between 2017 and 2021.

And consider this – healthcare ranks 15th out of 18 industries when it comes to cybersecurity and research shows hospital employees fall victim to 1 out of every 7 phishing emails.

This creates a tremendous opportunity for security awareness training for healthcare organizations in order to close the gaps and strengthen security from within. (Source: The Cybersecurity Almanac 2019 from Cybersecurity Ventures)

9) Cyber Crime is More Profitable than the Global Illegal Drug Industry

So why do they do it? It’s simple. Although it sounds crazy, cyber crime is now more lucrative than dealing drugs. The illegal drug industry totals around $400 billion/year. In 2018, cyber criminals earned a total of around $600 billion.  (Source: Cybersecurity Ventures)

10) You Can Purchase a Consumer Account for $1 on the Dark Market

With billions of personal records stolen over the years, this creates an excessive amount of credentials for sale on the dark web. This in turn has lowered the cost of consumer accounts. Bank accounts run hackers anywhere between $3-25 each.  (Source: RSA)

The Best Defense is a Good Offense

A solid data backup and disaster recovery plan. A good plan includes a multi-layered security approach.

• Set up a data backup and disaster recovery plan. Also mention security assessment and also security awareness training.
• Set up a data backup and disaster recovery plan. Not only do you need a solid data backup solution in place, you also need to confirm your backup can be restored.
• A security assessment is a good step in determining how and where to close security gaps in your network.
• Security awareness training addresses the biggest threat to cyber security – humans.

Contact our support team today to strengthen the security of your network so you don’t become the next statistic.

Take the first step by giving us a call at 262-522-8560 for a quick 10-minute chat to see if we’re a good fit or submit a request online and let us know how we can help.

October is National Cyber security Month: Is Your Business Protected?

by ontech | Oct 31, 2019 | Cyber Security

It’s only fitting that October is also National Cyber security month, a time to reflect on cyber threats and seek protection from security risks. So what is cyber security, and why is it so critical?

The Meaning of Cyber security

Cyber security can take many forms, from user training and ongoing employee education to assessment of potential vulnerabilities within a business network infrastructure. Technology and user education are complementary halves of a cyber security whole, and one is not effective without the other. A prominent part of network security is assessing network access and evaluating which areas are most deserving of your time and effort.

The Benefit of Security Assessments

At Ontech, we can provide your business with a thorough assessment of your cyber security, including an analysis of your network infrastructure, a deep dive into your security protocols, and a look at your vulnerability to both insider attacks and external threats.

Until you establish a baseline, it’s impossible to know where you are going and what you could be doing better. By having an assessment conducted, you can build on your previous efforts to create an even more robust online and physical infrastructure. If you have already had a vulnerability assessment completed in the past, we can provide a second opinion, so you know you are protected.

How Can You Be Cyber Secure?

One way to think of online security is like a pendulum, with security on one side and convenience on the other. Convenience is important, but easy access could also make it less secure. On the other hand, enhancing security can come at the cost of convenience, triggering complaints from employees and customers. Getting that balancing act right can be difficult, but it is essential if you want to keep your network and data safe.

Who Should Be Responsible for Cyber security?

There is an ongoing debate over cyber security and who is ultimately responsible. Should IT departments challenge upper management to enhance security? Should software companies and internet service providers take a larger role in security and data protection?

These are difficult questions with serious implications in the real world. In the wake of a recent ransomware attack, a governmental agency fired their IT technician, but the IT staffer fought back. He filed a lawsuit, and he is likely to prevail in that action.

In this particular case, the IT tech had an extensive paper trail, one that showed the lack of cyber security was largely the fault of management, and the agency shunned its responsibility for cyber security. As ransomware attacks grow more frequent, this situation is likely to recur, and businesses everywhere need to be ready.

Online Practices to Avoid

In the online world, it is critically important that you know and understand who you are giving information to and why. Hackers often target social media to influence buying habits, steal personal information, and compromise security. Understanding these tactics is the first line of defense when it comes to protection your data – both business and personal.

Knowing when to ask for help when you’re out of your element can save you a lot of heartache. For example, if your computer was infected with ransomware, it might be tempting to pay the ransom, but before you do anything, get professional help. Ontech is ready to be your partner.

Just contact us at 262-522-8560 for a thorough security assessment and additional tips on how to secure your network.

An Introduction to BitLocker

by ontech | Oct 18, 2019 | Cyber Security

Data protection has never been more important for businesses of all sizes. Hardly a day goes by without word of yet another data breach, another stolen laptop and yet another PR nightmare for the business involved.

If you want to protect yourself, your data and your business, you need to take security seriously, and that starts with enterprise-level encryption. Solid encryption is a must for mobile devices, including the laptops your sales staff uses while on the road. That’s where BitLocker comes in.

What is BitLocker?

This proprietary encryption program is designed for business use, and it is an essential tool in your IT security arsenal.

Designed to be used seamlessly with Windows-based computers, BitLocker can encrypt the entire hard drive, rendering the files on it useless to a thief while allowing legitimate users to fully access the data they need.

That protection is certainly vital in today’s dangerous cyber world, but BitLocker can do more than just encrypt files – this powerful program also provides protection against unauthorized changes to the operating system, including firmware changes. This is particularly valuable, since many recent malware infections work by surreptitiously updating the firmware on targeted devices.

A Versatile (and Free) Tool

BitLocker comes free with Windows 10, so business users will not incur any additional expenses when using it. And while the BitLocker tool is free, it is also extremely valuable and versatile.

With BitLocker, users can encrypt the hard drives on their desktops, laptops and servers. This device-level encryption is a powerful security tool, but it is arguably most useful for mobile devices, especially laptops.

If a thief steals one of your company laptops, they will no doubt try to access the files it contains. They may even remove the hard drive and try to read it on a third-party device, but with BitLocker in place that access will be blocked.

HIPAA and Banking Compliant

Certain businesses, including firms subject to HIPAA regulations and companies doing business in the banking sector, are required by law to encrypt their data. When used as part of an overall security strategy, BitLocker allows those businesses to stay compliant and avoid possible penalties.

BitLocker can also provide additional protection from ransomware, but businesses should not rely on this one program alone. Some strains of ransomware can work their way around BitLocker, so use it as a small part of a larger data protection strategy. Other parts of that strategy should include a robust backup plan, ongoing employee training and executive awareness.

BitLocker works by using a 200-digit key. That key is associated with a user on the network, and once it is enabled, the user does not have to worry about it again. The network administrator can track the keys and keep all relevant information. If a user needs to recover a particular key, they can do so through the administrator.

How to Manage BitLocker

BitLocker is a powerful tool for data protection and encryption, but it is only as effective as the processes you put in place. In order for BitLocker to do its job, all vulnerable devices, including mobile computers, must be fully encrypted.

Running ongoing scans for unencrypted mobile devices can help you manage BitLocker more effectively, so nothing slips through the cracks and no proprietary data leaks from your organization. If you need help developing a sound plan for hard drive encryption and mobile device protection, Ontech Systems is always just a phone call away at 262-522-8560.

Does BitLocker Affect Performance?

When used as intended, BitLocker should not negatively impact the performance of your laptops and other computers. It does take time for the BitLocker process to run, so it is important to schedule the installation accordingly.

If you do notice issues with performance on devices running BitLocker encryption, it is important to find the root cause. Preexisting malware infections, undetected problems with the operating system, and other issues could cause performance to deteriorate.

If you need help installing, maintaining or working with BitLocker, you do not have to go it alone. BitLocker is a powerful tool, but making the most of it is not always easy.

For help with all your BitLocker related issues, just give Ontech Systems a call or send us an email. We are happy to assist you, so you can enjoy secure hard drive encryption and the peace of mind that comes with it.

Remote Management and Monitoring (RMM) vs. Hourly

by ontech | Oct 3, 2019 | Cyber Security

With the rapid technological advances in the last 20+ years, automation is becoming commonplace in business. Today, repetitive business tasks are often replaced with automated software solutions in an effort to streamline costs and focus man hours on tasks that require critical thinking.

One such example of automation in the IT industry is remote management and monitoring (RMM).

What is RMM?

Remote management and monitoring is a type of automation that uses the latest technological tools to keep computer systems up to date and business networks protected.

RMM makes it possible to automate the process of applying patches and updates, reducing the risk of human error. In the days before RMM, these tasks were handled manually. With the introduction of RMM, automated tools now handle these tasks more effectively, freeing up IT staff to focus on other projects.

One of the biggest benefits of remote management and monitoring is the ability to flag certain items. Servers are constantly producing logs, and those logs can provide valuable information for IT staff. In the past, server logs were reviewed manually and it was easy to miss even the most obvious red flags.  RMM software searches for red flags, passing the most critical onto the IT team or service provider.

Remote Management and Monitoring – and Compliance

When all systems are connected to a central ticketing system, reporting is even easier and more effective. RMM provides a detailed audit trail, showing exactly what steps were taken to resolve an issue.

HIPAA, for example, requires proof that patches and updates are regularly completed. This audit trail can help you confirm your business is in compliance, and that you have taken steps to prevent a recurrence.

RMM vs. Hourly

Businesses require data to operate and that data needs to be protected. There are a variety of ways to do this, but one service isn’t necessarily ‘better’ than the other. It is more a matter of finding the best way to identify and apply fixes in a consistent manner.

The Benefits of RMM?

RMM has a number of advantages over the hourly model, including its proactive nature. With RMM, services are proactive, offering real-time alerts and ongoing monitoring. This allows for faster response times and reduces the risk of serious damage to the network or its data.

With the hourly model, a user will report that something is wrong, or IT will find the issue. Action is only taken once the issue is identified, which results in a reactive process that is susceptible to human error. If an issue is missed, it could remain unresolved for days, weeks or even months. In this way, resolution speed is more efficient through RMM compared to hourly.

Cost Comparison

Remote management and monitoring provides a more consistent, predictable cost, making budgeting easier, eliminating expensive surprises. With RMM, you have a set cost based on the number of computers, firewalls, servers and other equipment you have in place.

With the hourly model, costs fluctuate, sometimes in unpredictable ways. Windows updates for example may take more time one month over another, resulting in sometimes drastic cost fluctuations.

A Hybrid Approach

A popular approach and growing trend is to use RMM for critical network infrastructure and hourly IT support on projects. RMM can handle basic maintenance and monitoring tasks while IT staff tackles projects like server migrations, application setup or user training. This approach offers the best of both worlds, combining the predictability of RMM with the custom aspect of project work.

Remote Monitoring and Maintenance Trends

The biggest shift in RMM is the number of tasks these automated tools can tackle. Modern RMM tools include sophisticated scripting models, i.e. if this happens, do that.

You can take alerts that are already in place and automate that process response over time. And while it takes time to build out the automation, once it is in place, you can enjoy lower and more consistent IT costs.

If you want to streamline your IT costs through RMM, contact Ontech Systems at 262-522-8560. We can help you develop a RMM plan so you can protect your business, stay compliant with all applicable regulations and build a better and more robust network.

Ready to get started?

Call us at 262-522-8560 for a quick 10-minute chat to see if we’re a good fit or submit a request online and let us know how we can help.

10 Easy Ways to Secure Your Online Accounts and Identity

by ontech | Sep 5, 2019 | Cyber Security

From ransomware attacks to spear phishing designed to target decision makers and compromise intellectual property, security threats are multiplying faster than many businesses can adapt to.

If you want to avoid becoming the next cautionary tale, it’s important to understand the risks and know how to protect yourself. The more you know about these established threats, the easier it will be to prevent them. Here are some steps you can take to enhance your security and protect your business in an increasingly unsafe online world.

1) Enable Two-Factor Authentication

If you’re relying on passwords alone to secure your network and protect sensitive data, you are one step away from truly securing that information. With so many widely known data breaches, there’s a good chance some of the passwords you use are already in the wild.

This is why two-factor authentication is such a vital part of any comprehensive security program. With two-factor authentication, you can create an extra layer of security that builds redundancy and offers peace of mind.

It is important to note that most, if not all online and business accounts use two-factor authentication, and implementing this strategy is not as complicated as you might think. Since most systems already have two-factor authentication built in, adding extra security is simply a matter of turning it on.

2) Close Any Accounts You’re Not Using

From the secondary email account you thought you needed to the app that looked great but wasn’t, you probably have a lot of extraneous programs running on your personal devices and business network. Each one of those unused accounts is a security risk, and closing them can lower this risk.

Start by taking inventory of all programs and accounts on your network. With this list, you can close accounts you no longer need. By removing this unnecessary data, you can reduce the risk posed by those old and frequently unsecured accounts.

3) Have Strong (and Unique) Passwords

A solid password strategy is key to online security and identity protection, but long and complicated credentials are not enough. If you want to protect yourself and your data, you need to make sure your passwords are unique as well as complex.

Repeating passwords across multiple accounts and websites is a dangerous practice that is all too common in the business world. You can start by setting a good example, then implement policies that require employees to establish unique passwords for every account they create and every password-protected website they visit.

4) Password Protect Your Phone

The smartphone in your pocket is much more than a communication device – it is a tiny computer vulnerable to attack. As such, your phone deserves its own protection, starting with a strong password.

If you are not protecting your mobile devices with strong passwords, you could be handing hackers the keys to the kingdom. If just one of your mobile devices is compromised, cyber criminals could use that access to roam the rest of your network, taking control of the system, stealing proprietary information and even implementing a ransomware attack.

If your organization is bring your own device (BYOD) friendly, it is critical to have a solid mobile device management plan in place. Allowing employees to use their personal devices makes sense from a business and cost standpoint, but only if those workers understand their responsibilities and take security risks seriously.

5) Be Mindful of What You Publish About Yourself and Your Business

It’s great to have a presence on social media, but sharing too much information could put your security at risk. Be mindful about what you publish online.

Hackers view social media as a rich source of information, and they routinely harvest that data. An resourceful hacker could use the digital clues you leave behind to guess your passwords, and if they guess correctly they could soon be roaming through your network undetected.

6) Watch What Others Are Saying

It is not just what you say about yourself that puts your security at risk. Information shared by others, including customers and your own employees, could also give hackers a back door into the company network.

It often starts innocently enough. A business, proud of an employee’s achievement, might post about it online, but that proud moment could have negative consequences depending on who is watching.

The threat posed by third-party information is all too real. This very thing happened to one of Ontech’s clients, and within a week hackers were already spoofing the individual who was promoted by the business.

7) Integrate AI Defense for Mailboxes

Artificial intelligence can be used to protect company email accounts. Once that AI defense is fully integrated, it can monitor company email for unusual activity and suspiciously heavy traffic. If a problem is detected, the AI can notify an administrator, allowing them to take action and head off an attack. Want to implement AI into your email defense? Contact us online or call 262-522-8560 for more information.

8) Be Mindful of Your Internet Connection

Not all internet connections are the same – some are riskier than others. Never log into accounts containing sensitive information via public Wi-Fi, and pay close attention to the type of connection you are using.

9) Do Not Use Free Emails for Business

Free email may be fine for personal use, but these accounts are inappropriate and dangerous for businesses. It may be tempting to use a free email address as a secondary address but this creates a major risk for the business, so stick to business accounts while at work.

10) Watch Out for Phishing Emails

Phishing attacks take many forms, and they have become increasingly sophisticated in recent years. You can never be too careful. At Ontech Systems, we’ve recently seen an uptick in phishing emails targeting QuickBooks and other accounting software.

Ultimately, the greater the level of adoption, the more likely hackers will target users of the software program. Pay close attention to the software you use, and always be suspicious when you receive an email requesting personal or proprietary information.

If you have questions about how to secure your online identity or protect your business, just contact Ontech Systems. We can help you develop a comprehensive security plan for your business to lock down your systems and reduce the risks posed by hackers and cyber criminals.

Ready to get started?

Call us at 262-522-8560 for a quick 10-minute chat to see if we’re a good fit or submit a request online and let us know how we can help.