Delegate and Dominate: Key IT Tasks for Business Owners to Outsource

Delegate and Dominate: Key IT Tasks for Business Owners to Outsource

When you run your own business, it feels like there are never enough hours in the day. Even when you start early and end late, there’s always something else, another e-mail or task, nagging for your attention. If you want to be productive, and ultimately successful, it’s important to prioritize what tasks you’ll allow to fill your schedule. Not everything needs to be or should be done by you.

Easier said than done. One of the issues we frequently see business owners struggle with is to delegate the tasks they don’t need to be doing. “It’s faster if I just do it” and “They won’t do it like I do” are two statements we often hear. For some tasks, that’s probably true, and those should stay on your plate, but when it comes to IT and technology, there are always several tasks business owners are doing themselves that they could and should hand off to someone else.

Some are obvious, like security. Quality cyber security requires 24/7 monitoring, and it’s unrealistic for busy business owners to be able to handle that effectively. They simply have too much to do! Another mistake is when they hand it off to an employee, family member or friend to do for them. These people are typically not qualified to protect you correctly.

However, there are dozens of other to-dos that you might not realize you can hand off to your IT team Here are 10 tasks you can delegate to your IT team so you can focus on running your business.

  1. Fix or Optimize Wi-Fi – Whether your Wi-Fi is down, you need to extend coverage area or something else, you don’t have to crawl around unplugging and plugging your router. Your IT team can handle it.
  2. Install and Set Up Microsoft Teams – If you’re using tools like Zoom, Slack and project management software, moving to Microsoft Teams can enhance productivity. It facilitates direct communication, project management and collaboration and has over 1,900 applications you can use. IT professionals can set all this up for you and train your team how to use it properly.
  3. Manage User Access Permissions and Credentials – Your IT team can handle getting new employees their correct user access, immediately revoking access for fired employees or those who quit and everything in between.
  4. Procuring and Provisioning Devices – If you need laptops, desktops, tablets, mobile devices, etc., sourced for the best price and configured for use, that’s a tech team task.
  5. Providing Tech Support To Employees – No more troubleshooting questions for you! Your team can submit tech tickets for a quick, efficient response from support.
  6. Set Up Dual Monitors – Want to increase productivity and efficiency? IT can set up dual monitors, correctly hooking everything up, so your team can come in and start working instead of trying to DIY it.
  7. Speed Up Computers To Run Efficiently – If your computer is running slow, don’t go to Google looking for tips. Call your IT team. They can help you improve your computer speed.
  8. Install E-mail/Spam Protection – No more filtering out dangerous or annoying spam e-mails; IT will do it for you.
  9. Configure Office Equipment – New printer? No problem. IT can help set it up.
  10. Employee Screen Monitoring – Are your employees working when they say they are? We can help you find out by setting up software to track activity.

And the list goes on. IT providers can also aid with HIPAA, CMMC and PCI compliance, file sharing for external/remote access users, data loss recovery plans, office relocation, cabling and so much more. Most business owners we consult with are surprised by the number of responsibilities a tech team can take on beyond cyber security.

The best thing to do is book a FREE Network Assessment. During this assessment, our team will look at your entire system for areas of opportunity and improvement. We’ll conduct a full audit, provide you with a plan of action to optimize your business for productivity, efficiency and security, and answer any questions you have. Click here to book your Assessment now.

How to Navigate the Chaos of Being Business Leader

How to Navigate the Chaos of Being Business Leader


It’s a special kind of relentless attack all business owners and managers face: the persistent, crazy, chaotic assault on your time and attention. Seems like business productivity is never what it can be? No one is immune, and every business deals with it. 

Some leaders handle the constant pressure on their attention brilliantly, keeping the team organized and highly productive. But most people struggle with this and feel crushed and overwhelmed by all the things they have to keep track of and do. This goes double if your business is in growth mode and not “standing still” or casually strolling through its existence.

Add to this a remote workforce, and it can be intensely difficult to wrap your head around all the projects, to-dos, deadlines and client deliverables you and your leadership team must manage.

While we as an IT and Managed Services company cannot tell you what projects are most important, we can absolutely help you and your team stay far more organized and allow you to know if the people on your team are properly aligned, prioritizing the right work and focused on the things you want them to focus on. We can also help you organize communication to lessen the chances of a dropped ball or a communication failure, which is by far the #1 reason why problems happen in business.

One of the tools we recommend to clients wanting to get more operational control and clearer communication is Microsoft Teams. There are a lot of reasons why this is a “super tool” for productivity and organizational alignment, but as a bonus, it typically ends up saving our clients quite a bit of money on technology, because it replaces other applications, like Slack, Zoom and dozens of popular project management software, putting all of it into one lower-cost, more secure and more tightly integrated system.

Let me share just a few of the cool features you’ll love in Teams. Keep in mind that this list is far from complete. Microsoft Teams has over 1,900 applications you can pick from to integrate into a Teams Channel to organize information, workflow, tasks, deadlines and documents.

Posts: The “post” feature works a lot like Slack in that it will allow you to post questions, reminders and status updates to everyone on that Team regarding that project. This not only keeps ALL communication for a project in one place, but it creates a history and alerts everyone on the team to what’s going on. This feature saves a lot of money for companies using Slack since it’s native and included in Microsoft Teams.

Tasks By Planner And To-Do: This section of Teams is one of our favorites because it allows you to create “complex” to-do lists where you can assign each item to one or more people; have a progress status, priority and due date; add documents and files; and create a checklist of all the things that need to be done. Better yet, team members who are responsible for the project can provide status updates and check off items that are completed so you know where you are with any particular project.

Video Conferencing: While Teams is not as slick as Zoom, it does have some features that make it better for team collaboration and projects. The biggest advantage over Zoom is that you can hold a video conference, and the recording of the meeting – along with all of the notes, files and links – will remain in that Team for easy reference later on. This can be extremely helpful for people who might not have been able to attend a meeting, making it easy for them to find and watch the recording, and it also retains a record of critical conversations. Plus, it eliminates expensive Zoom licenses for all employees because it’s included in Microsoft 365.

File Sharing and Collaboration: Each team or channel in Teams has its own Files tab where team members can upload, store, and access files related to specific projects or discussions. This centralization reduces the need to email files back and forth and ensures that everyone has access to the latest version of a document. Users can share files and documents directly within Teams, making it simple to collaborate on projects without switching between different applications. Multiple team members can work on the same document simultaneously, whether it’s a Word document, Excel spreadsheet, PowerPoint presentation, or other Microsoft 365 file. Changes made by one user are instantly visible to others, fostering seamless teamwork.

Security and Compliance: Teams prioritizes security and compliance. Files shared within Teams are protected using Microsoft’s robust security measures and can be subject to retention policies and data loss prevention rules to ensure regulatory compliance. This means you, as a business owner, can sleep a little easier knowing your files are protected. 

If you want to see a demo of Teams or do a cost analysis to see how implementing this can save your organization/money on Slack, Zoom and other project management software by combining it into one application, click here to schedule a brief call. 

Who Should Be In Charge of Company Compliance?

Who Should Be In Charge of Company Compliance?


What if you discovered that all of the hard work, investments and time you’ve put into growing your business is at risk due to a failure of your outsourced IT company, or possibly even your well-meaning (but overburdened) IT department? If you were exposed to that level of risk, wouldn’t you want someone to tell you about it?

This article is that wake-up call.

Over the last several years, the risks associated with cyber security attacks have grown in magnitude. They are no longer a low-probability hazard that will result in a minor inconvenience. Businesses of all sizes and types are getting hacked and losing hundreds of thousands of dollars, or even multiple millions, in addition to suffering significant reputational damage and loss of customer goodwill. For some, it’s a business-ending event. For nearly everyone else, it’s a significant financial disaster that can negatively impact profits and revenue for years.

Yet too many CEOs and small business owners are still abdicating critical decisions regarding risk tolerance and compliance policies to their IT company or IT department when these decisions no longer belong there.

For example, let’s suppose you have an employee who refuses to comply with strict data security and password policies and continually fails cyber security awareness training, putting your company at risk for a cyber-attack and compliance violation. Should your IT manager or IT company fire this employee? Reprimand them? Is it even their IT department’s job to manage employee behavior with company data and devices? If you say yes, the question is, when was the last time you met with them to specifically address this issue and direct them on how to monitor and manage it? Likely never – or once, a very long time ago.

Therein lies the problem. Most CEOs would agree that it’s not up to the IT department to make that call, yet many of these same CEOs leave it entirely up to the IT department (or outsourced IT company) to handle the situation and make decisions about what is allowed, what isn’t, how much risk they want to take, etc.

Worse yet, many CEOs aren’t even aware that they SHOULD have such policies in place to ensure your company isn’t compromised or at risk – and it’s not necessarily your IT person’s job to determine what should or shouldn’t be allowed. That’s your job as the CEO.

As another example, many companies have invested in cyber liability, ransomware or crime insurance policies to provide financial relief in the event of a cyber-attack and cover the exorbitant legal, IT and related costs that result when such an event occurs. Yet our experience shows that most insurance agents and brokers do not understand and cannot convey to the CEOs they are selling a policy to the IT requirements needed to secure a policy. Therefore, they never advise their client to make sure they get with their IT provider or internal IT to ENSURE the right protocols are in place, or risk having coverage denied for failure to comply with the requirements in the policy they just sold them.

When a cyber event occurs and the claim gets denied, whose fault is it? The insurance agent for not warning you? Your IT department or company for not putting in place protocols they weren’t even briefed on? Ultimately, it’s on you, which is why you as the CEO must make sure that decisions impacting the risk to your organization are informed ones, not decisions made by default.

Of course, a great IT company will bring these issues to your attention and offer guidance, but most are just keeping the “lights” on and the systems up, NOT consulting their clients on enterprise risk and legal compliance.

If you want to make sure your organization is actually prepared for and protected from the aftermath of a cyber-attack, click here to schedule a private consultation with one of our advisors about your concerns. It’s free of charge and may be extremely eye-opening for you.

Who’s A Prime Target For Cybercriminals? – Make Sure Your College Students Are Safe At School

Who’s A Prime Target For Cybercriminals? – Make Sure Your College Students Are Safe At School

College has changed since many of us were students. Years ago, we’d be shuffling from class to class, holding a single notebook and a pencil for scribbling down notes. There wasn’t as big a risk of photos or data being stolen online.

That’s no longer the case. Students today have at least one – usually two or three – devices readily available. The scary part is, most college-age students think of themselves as tech-savvy “digital natives”; however, a study by Atlas VPN showed that Gen-Zer’s and millennials are the age groups most likely to fall for phishing scams.

In fact, according to the National Cybersecurity Alliance, 20% of Gen-Zers have had their identity stolen at least once.

Here are just a few of the terrifying ways cybercriminals attack this young crowd:

  • Unpaid tuition notifications – scammers will send fake e-mails to students claiming they owe a certain amount of money or it’ll affect their enrollment.
  • Fake financial aid, grant or scholarship websites that, when clicked, either steal their information or install malware on their computer.
  • Fake Wi-Fi accounts set up by hackers in public places to steal passwords and private data when their device connects.
  • Social media scams used to gather private information to either hack accounts or set up new ones.
  • Hacking phones or social media accounts to steal photos and blackmail students into payment so they don’t release them publicly.

Sadly, the list goes on and on!

How can kids raised on technology fall for so many scams? Here are just a few of the big reasons why:

  • Hackers know most students aren’t properly educated on cyberthreats because they’ve always worked on computers that were secured by the school or their parents.
  • They grew up using social media and feel comfortable divulging private information about themselves (that thieves can harvest and later use to initiate an attack).
  • This is a big one– they have no or very little credit, giving cyberscammers a smoother path to opening accounts in their name.
  • They have multiple connected devices like phones, laptops, tablets and watches that give criminals more avenues to attack.
  • College kids are distracted. They’re focused on school and making friends, and NOT cyber security, making it easy to let a cybercriminal slip by undetected until it’s too late.

What can you do?

We have robust cyber security solutions and 24-hour monitoring to protect the businesses that we work with and can even recommend at-home security software, but what about when your kids go off to school, away from your watchful eye?

You certainly can’t pack up and camp out at college to make sure they’re following cyber security best practices. But you can make sure they know what to look out for and give them the tools and resources to stay as safe as possible.

Here are 14 actions your child can take to prevent being a victim of cybercrime when they’re off at college:

  1. Invest in strong, trusted virus and spyware protection and run scans once a week.
  2. Never click “Remind Me Tomorrow” when a phone or computer wants to update. Turn on automatic updates when possible.
  3. Keep all browsers, extensions and operating systems updated.
  4. Back up the computer to the cloud regularly to avoid losing data if there is an attack.
  5. Do not visit or enter credit card information on websites that aren’t secure (HTTPS:// only!).
  6. Don’t connect to public Wi-Fi. Use a personal hotspot or VPN when on the go.
  7. Beware of phishing scams. Do not click links or open attachments in e-mails, especially from unknown senders. Google websites and search instead of clicking links.
  8. Use strong, unique passwords and use a password manager.
  9. Regularly delete cookies. These can create “loopholes” for hackers to get into a network.
  10. Only install software and apps from trusted sources.
  11. Use multifactor authentication
  12. Lock all devices and don’t share passwords, even with your new best friend.
  13. Cover all webcams – there are stickers for purchase online, but tape and paper will work.
  14. Register devices with the school in the event they are stolen.

Run through this list with your children! When students leave for college, cyber security is not a priority for them, but unfortunately, if they’re targeted it could negatively impact their lives at a time when they’re just getting started.

Cyber security takes just a few minutes of conscious effort but is a critical lesson to learn in this age when nearly everything we do involves technology. The risks of cybercrime will only continue to grow.

If your organization could benefit from cyber security training similar to this but more in-depth for employees, so they know the risks and best practices of cyber security, we can help. Start with a completely FREE Cybersecurity Risk Assessment by clicking here.

 

This HUGE And Recent Data Breach Practically Guarantees YOUR Personal Information Was Stolen

This HUGE And Recent Data Breach Practically Guarantees YOUR Personal Information Was Stolen

Back in May, the company MOVEit, a file transfer platform made by Progress Software, was compromised by a Russian ransomware operation called Cl0p. They used a vulnerability in Progress’s software that was unknown to exist at the time. Shortly after the attack was noticed, a patch was issued. However, some users continued to be attacked because they didn’t install it.

The software is used by thousands of governments and financial institutions and hundreds of other public and private companies from around the world, and it’s been estimated that at least 455 organizations and over 23 MILLION individuals who were customers of MOVEit have had their information stolen.

Some of the organizations compromised include:

    • The US Department of Energy
    • New York City Department of Education
    • UCLA
    • Shell
    • Ernst & Young
    • Northwest Mutual
    • Pacific Premier Bank
    • TransAmerica Life Insurance
    • Honeywell
    • Bristol Myers Squibb
    • Gen/Norton LifeLock
    • Radisson Hotel
    • BBC
    • British Airways
    • Others

The majority of those organizations (73%) are based in the US, while the rest are international, with the most heavily impacted sectors being finance, professional services and educational institutions.

Cl0p is a type of ransomware that has been used in cyber-attacks since 2019. Data stolen is published to a site on the dark web – a section of the worldwide web where cybercriminals sell and trade information without having to reveal themselves. The ransomware and website have been linked to FIN11, a financially motivated cybercrime operation that has been connected to both Russia and Ukraine and is believed to be part of a larger umbrella operation known as TA505.

What makes this attack so terrible is that many of the organizations compromised provide services to many other companies and government entities, which means it’s very likely their customers, patients, taxpayers and students were compromised by association. And yes, you’re probably one of them.

The big question is, were you notified?

For some reason, this breach didn’t make mainstream headlines, but when a company is compromised, they are obligated to tell you if your data was stolen. This can come in the form of an e-mail or snail mail letter. However, due to spam filters, e-mail delivery is clearly not a reliable way to ensure an important message is received, and organizing a letter for over 36 million people can take time.

If you use the software, you need to ensure that all your passwords and PINs are changed ASAP and you must be on the lookout for any strange activity. Don’t use the same passwords and make sure they are at least 12 characters long, using uppercase and lowercase letters, as well as special characters and numbers.

You should also ensure that MFA, or multifactor authentication, is turned on for all critical software applications and websites you use, such as Microsoft Office, QuickBooks, banking and payroll software, your credit card processor, etc. If you do not have MFA set up on your company devices, you may want to start thinking about it. Contact us for questions or how to get started today. 

Want to know if your company’s information is on the dark web? Click here to request a free Dark Web Vulnerability Scan for your organization (sorry, we don’t offer this for individuals). Simply let us know your domain name and we’ll conduct the search for free and contact you to discuss what was found via a confidential review (NOT via e-mail). Questions? Call us at 216-800-7888

The Top 10 Popular Brands To Trick You Into Revealing Your Private Data

The Top 10 Popular Brands To Trick You Into Revealing Your Private Data

Cybercriminals know the easiest way to sneak under your radar is to pretend to be a brand you know and trust. These large companies have spent years on marketing, customer service, branding and consistency to build a trustworthy reputation, and hackers leverage this to go after you.

The most common method is to use phishing attacks. These thieves set up URLs that look scarily similar to the real company’s website. To slip by your watchful eye, here are some of the simple switches hackers make that can go unnoticed:

  1. Switching out a zero for the letter “O” or a capital “i” for a lowercase “L.” If you’re quickly reading an e-mail, it might look legit.
  2. Adding in a word that seems like it could be a subdomain of the real company, like [email protected].”
  3. Using a different domain extension, like [email protected].”

Some criminals will take it a step further and set up a web page that looks identical to that of the real website. When you click the link – via e-mail, SMS or even through social media – several dangerous results can occur.

The first is that malware can be installed on your computer. Clicking a bad link can set off an automatic malware download that contains malicious files with the ability to collect personally identifiable information from your device, like usernames, credit card or bank account numbers and more.

The second is the fake website will have a form to harvest your information. This could be login credentials, passwords and, in some cases, your credit or bank information.

The third most common issue is an open redirect. The link might look legit, but when you click on it, you’re redirected to a malicious website where the intent is to steal your information.

What brand impersonations do you need to look out for? Well, all of them, but according to Check Point’s latest Brand Phishing Report, there are 10 companies that top the chart in overall appearance in brand phishing attempts.

Here Are The Top 10 Most Frequently Impersonated Brands In Phishing Attempts In Q2 Of 2023:

  1. Microsoft (29%)
  2. Google (19.5%)
  3. Apple (5.2%)
  4. Wells Fargo (4.2%)
  5. Amazon (4%)
  6. Walmart (3.9%)
  7. Roblox (3.8%)
  8. LinkedIn (3%)
  9. Home Depot (2.5%)
  10. Facebook (2.1%)

Take a minute and ask yourself how many of the companies on this list send you regular e-mail communications. Even just one puts you at risk.

Cybercriminals go the full mile with these scams. They know what types of messages work best for each company to get your attention.

Here are three common phishing attacks cybercriminals have used under these brands’ good names to gain access to your private information.

  1. Unusual Activity – These types of e-mails will suggest that someone gained access to your account and you need to change your password quickly. They leverage fear so people will click without thinking, hurrying to change their password before they’re a victim of the attack. They usually have buttons that say, “Review Recent Activity” or “Click Here To Change Your Password.” These e-mails can go as far as to show fake login information detailing the region, IP address, time of sign-in and more, like real messages from the companies do to convince you to click.
  2. Fake Gift Cards – These e-mails suggest that someone sent you an e-gift card. When you open the e-mail, they either redirect you to a website to “claim your gift card” or have a button to “redeem now.”
  3. Account Verification Required – These e-mails suggest that your account has been disconnected, and they need you to verify your information. As soon as you enter your login credentials, the hacker has access.

These scams are happening every single day. You’re a target, but so are the unsuspecting employees in your company. Without proper training, they might not know what to look for, panic and try to resolve these “issues” under the radar, ultimately causing the problem.

There are multiple steps to making sure your network is secure. One would be getting e-mail monitoring to help reduce the likelihood of these phishing e-mails ending up in your inbox. It’s also important to make sure employees know what to look for so that if an e-mail does get by the phishing detection system, they can still keep your company safe.

The best thing to do is to start here with your FREE Cybersecurity Risk Assessment. We’ll evaluate your network and provide a full report on areas where you are vulnerable and what to do to fix them. There’s no obligation, but you should know where you’re at risk. Click here to schedule your assessment now.