Learn

Cyber Security is a multi-step process in a small business. Doberman utilizes the NIST cyber security framework, which consists of 5 major pillars – First we work as a team to IDENTIFY what is important in your business, what needs to be protected? Next we use technology, systems, and processes to PROTECT those valuable data. We then set alerts and monitoring to DETECT if something goes amiss with our protection. Our team will RESPOND to the alerts that are detected. Last, but not least, we utilize our Data Guardian service to allow for guaranteed RECOVERY should all other safety measures fail.

An antivirus, or any security software for that matter, is only as good as the process used to install, configure, and maintain it. Without a plan, the software becomes a false sense of security.

Ransomware is a type of malicious software used by a bad actor to disrupt your ability to use your computer network. The ransomware “encrypts” your data, making it unable to be used for business activity. Typically this is followed by a “ransom” to give you access back to your data.

Similar to antivirus, the systems and processes AROUND your multifactor software are much more important than the software itself. It is worth noting that having your multifactor send a text message (Or SMS) to your cell phone has well documented security holes, and should NOT be counted as a secure method.

People have the tendency to use the same username (their primary work email) for every system they access. Out of the gate, if a bad actor gets your email, they have ½ of the equation to gain access to sensitive systems. If you happen to use the same password, or similar passwords, for multiple websites, and if any of those websites is compromised via a security breach, you can have a big problem. In addition – multifactor, by needing a device or smart phone to “accept” the request to access the website in question, means a bad actor not only would need your password, but your mobile device as well.

Passwords are the primary way of proving your identity to a third party, like your bank or supplier. If you use the same password for multiple websites, a bad actor only needs to find the website with the weakest security to gain access to multiple systems as you. Its not terrible if someone breaks into the florist website and orders a few bouquets of flowers, but if they gain access to your primary line of business software, email, or bank the damage can stack up quickly. A password manager makes it easy to use long, randomized strings of alphanumeric and special characters for passwords, while you remember one strong passphrase to access the manager itself. You can make it extra secure by securing both the password manager, and the third party websites, with a well configured MFA system.

It depends. Cloud systems shift the risk and capital expense of “infrastructure” (mainly processing power and storage of data) to a third party datacenter. You’re changing a capital expense into an operating expense, which can have financial and tax benefits. The cloud doesn’t save any “hard dollars” – but it does change the equation of risk and cash outlays. Depending on your business goals and strategy, cloud can be a smart move for your business.

Yes! The best way to think about the cloud is that it is someone else’s server, in someone else’s building. It’s still YOUR data, and it can still be deleted, corrupted, lost, or stolen. It’s like storing your car in a public parking garage. It can still be broken into, damaged, or stolen – so you still want to carry insurance to protect that asset. Your data needs protection, just like your car.