It’s common to see companies showing confidence in their security systems. Their networks are protected from external threats, which can often lead to a false sense of being secure. With this attitude, they may stop thinking about security and fail to establish internal measures within their networks, and this is a grave mistake.

In recent years the majority of security threats and compromises have come from within the company. A common threat to companies is the logic bomb - malware that targets IT systems and deletes data. As a logic bomb is introduced from within the network, the blame often lies with a disgruntled employee with full access to internal systems.

Insider threats Giving employees full access to the network when they don’t need it is a common mistake often made by companies. There’s little need for an employee who does graphic design to have access to weekly sales records. This practice could set your company up for a considerable security problem in the future.

Dawn Cappelli, an insider-threat expert at the Carnegie Mellon Software Engineering Institute stressed, "These types of insider attacks happen to businesses of all sizes, from small companies to very large corporations." This is an important issue businesses should be aware of if they want to remain secure.

Take Precautions Security threats can be a particularly harsh nightmare for small businesses, as many don’t have an IT department or staff with the technical expertise needed to maintain a secure network. If you’re one of these organizations, it’s a good idea to hire an outside consultant to help you with your network security. With consultants, it’s important that you maintain close contact with them to ensure any issues that crop up are dealt with expeditiously.

If you don’t work with an external company there are a few things you should do when you have an employee leave the company. First, their accounts should be deleted immediately and their access privileges should also be revoked. Second, if you have accounts with shared passwords, you should change them to ensure an ex-employee can’t gain access to the system.

If you’d like to learn more about internal security, and measures you can take to ensure you are safe, we are ready to help you. Please contact us.

If the past 10 years has taught us anything, it’s that many managers are woefully underprepared for disasters of any kind. We’re resilient though, and will always find a way to survive. One of the keys to a business’s survival during times of hardship is the Business Continuity Plan (BCP). A vast majority of organizations have one and believe it to be effective, but is it?

Here are six key non-IT functions and processes that need to be in place to ensure your company is ready to effectively execute your BCP.

Easy to use plans Many continuity plans have been developed mainly for the IT department, as such, they can be a little complicated to understand and follow if employees don’t have a technical background. You should aim to have a plan that’s easy to follow and can be understood by all employees.

Communicate plans Remember that your plan encompasses all facets of your organization. It’s crucial that every employee knows their role and the relevant actions to take when the plan is executed. To do this, you need to ensure that all employees have access to a copy of the plan and any changes or updates are clearly communicated.

Test plans Beyond communication, it’s important to conduct regular tests, with every quarter being sufficient. The tests should be as real as possible and span all departments within the organization. This will ensure that employees are aware of how they, and the systems, will react under duress. It’ll be beneficial to your business if the first time the employees execute the plan isn’t during an emergency.

Short term and long term plans Your BCP should consist of both long term and short term elements that can be easily adapted to meet changing business environments and the emergence of new threats. You should aim for an even mix of short and long term solutions that cover as wide a variety of situations as possible.

Ensure buy-in from all levels If you’re in the process of instituting a BCP you should ensure that the whole organization is onboard with the plan. If an employee is unsure about the validity of a part of the plan, take the time to find out why and ask for suggestions. An uninformed or uncooperative employee could be the difference between survival and failure in a disaster situation.

Update and Review After every test, staff turnover and technological update, you should review the plans and make changes if necessary. Essentially, if anything in the company changes, review and update the plan. Remember: just because you have an effective plan this month, doesn’t mean it’ll be so in the future.

Continuity plans are only as strong as the weakest link. In an emergency, the last thing you want is an employee following the wrong process or be unsure of what they should be doing. If this happens, you could see an exponential growth in recovery time and costs. We’re ready to tell you more, so please contact us if you would like to talk continuity planning.

Smartphones are one of the tools that have been instrumental in blurring the lines between our personal and professional lives. While we’re at home, we access our work email and while we’re at work, we’re checking our personal email, all on the same device. As such, we tend to have a large amount of confidential information on our phones and should be taking steps to secure them.

Whether you have an Android, iPhone or Windows Phone 7, here are two tips to keep your smartphone secure:

Lock your screen If you have data or information on your phone you would like to keep secure, the first thing you should do is lock your screen. Most smartphone users lock their phone with a 4 digit number combination, but it’s recommended you use a password for higher security.

• On Android. To establish a password on your device go to Settings and select Security. Press Screen lock. On Ice Cream Sandwich, you have six options for security, with the least secure at the top and most secure at the bottom. Many users select Pattern or Password. Enter the password twice and press Confirm.
• On iPhone. Select the Settings app followed by General. From there select Passcode Lock and turn it on. You’ll be asked to set your passcode and confirm it.
• On Windows Phone. To set a passcode go to the home screen of your device. Open Settings from your Application list and select Lock & Wallpaper. Press Password, enter your password and then press Done.

It’s recommended that you set a password that’s unique. Don’t use your birthday, address or phone number. At the same time, you have to make it easy to remember. If you’re having trouble coming up with a password, this video by Mozilla is a big help.

Enable remote wipe While passwords and other security codes will go a long way in preventing others from accessing your phone, it often isn’t enough. The next step in device security is to set up the ability to remotely wipe your device.

• On Android. At this time there is no native remote wipe option on your phone. You’ll have to download an app from the Play store. The apps work by using a push service - you “push” the commands to your phone from another source i.e., a website. When you install the app, you’ll have to register your phone and access it from a website.
• On iPhone. The iPhone has remote wipe capabilities which can be accessed through iCloud. On your device select Settings, iCloud and turn on Find my iPhone. If you lose your phone log into iCloud and select Find my iPhone. From there you’ll be able to remotely wipe your device.
• On Windows Phone. If you lose your phone you can remotely wipe it by going to the Windows Phone website, logging in and selecting My Phone. From there you’ll be able to wipe your phone.

Even if you don’t have confidential information on your phone, it’s a good idea to, at the very least, set a solid passcode on your phone. Adding the ability to remotely wipe your phone will ensure the information won’t be viewed by other people. If you’d like other ways to keep your mobile phone secure, please contact us.

In 2009, the video game industry recorded revenues of USD 60.4 billion dollars, double that of the movie industry. One of the biggest draws to games is not the story or gameplay, it’s the competition and sense of achievement one gets when they beat their friend’s score, or a hard level. Many businesses have started applying game mechanics to non-game situations.

The term to describe this trend is gamification, but what is it, and how can businesses use it?

What is gamification Gamification is the application of game design techniques and mechanics to non-game applications. Foursquare and its badges is a good example of this - users check in at locations to earn points, unlock badges and compete with their friends. Do they win anything? Nothing physical, but there’s something satisfying with competing with other people to be the best.

While gamification got its start with technological related operations, it has since been integrated by businesses of all sizes. Business that have adopted elements of gamification have seen improved user engagement and ROI.

How can businesses leverage gamification? Gamification is interesting because it can be applied in a variety of different business situations. For example, here are three such uses:

• To increase employee engagement. It can be hard at times to keep your employees engaged while they’re doing mundane tasks. One of the most common uses of gamification is deploying badges to act as a motivator to encourage employees to put effort into their job. When an employee reaches a predetermined level they are recognized for their achievement. This will go a long way in improving engagement.
• To create brand advocates. You can use gamification to turn your customers and fans into brand advocates. Before they start singing your praises, they need to be given a reason to do so. The best way to do this is to create a points/reward system. For actions such as purchases or reviews, customers gain points that can be spent on other services. Think of it as akin to the points system used by credit card companies.
• To generate traffic. Many SMBs are dependent on their websites for revenue but struggle to get traffic to their site. Gamification techniques can be employed to encourage people to spend more time on, and return to, your website, almost like a modern loyalty program.

There are many uses for gamification and we’ll continue to see new and innovative ways to deploy it in organizations. If you’re interested in ways you can implement aspects of gamification in your business, or would like to learn more, we are here happy to sit down with you for a chat. Please contact us.

The mountain lion is often seen as a formidable cat, it’s highly adaptive and found in almost every major ecosystem in North and South America. These traits are what Apple is going for with its next version of OS X, Mountain Lion. With a scheduled release a few months from now, there are a number of features that will give small businesses the opportunity to roar.

Here are four features of Mountain Lion that small business employees will find useful:

Enhanced communication and social media If you use OS X to access and monitor your social media accounts you’ll be interested to know that you’ll have the ability to post directly to Twitter from various apps. If you use iChat, it will be renamed: Messages. With it, you’ll be able to send messages, pictures and videos to other iChat/Messages users, regardless of the device. This could be a beneficial external and internal collaboration tool due to the growing amount of Apple users.

AirPlay mirroring If you or someone in your company gives a lot of presentations, Macs running Mountain Lion will have the ability to wirelessly broadcast whatever is being shown on the screen. To share your screen with an HDTV or Projector, you’ll need to have an Apple TV box. It works by streaming content to the TV box which is connected via an HDMI cord to the TV or projector.

Gatekeeper Security is top-of-mind for companies these days, and Gatekeeper is an extra level that businesses can implement. Its purpose is to restrict the apps that can be downloaded and installed on your computer. While many businesses should have measures like this in place, this app can act as another layer to ensure an even more secure organization.

iCloud Possibly the biggest trend in small business computing is the integration of cloud storage. Apple’s cloud storage service, iCloud, will play a prominent role in Mountain Lion, especially for businesses. With this feature, employees will be able to access data stored in the cloud using Apple’s different devices. Any changes made to documents stored in the cloud will be automatically updated in realtime, without the user having to save and update.

Mountain Lion is shaping up to be one of the best versions of OS X to date. There are numerous features that users will find appealing, and many businesses are eager for the retail release. A word of warning though, while a version of Mountain Lion is available to download, it’s an unfinished product and as such, we recommend that you hold off from installing it onto your business’s computers. If you’d like to prepare your systems for the OS, please contact us.

One of the most common complaints smartphone owners have is that it’s tough to get the phone to seamlessly sync with their computer. If your business uses Microsoft Office 365, there aren’t many tools or apps that allow you to use all the features on your smartphone. If you’re a Windows phone user, you’re in luck as your phone has built in features that allow you to use Office 365.

If you would like to connect Office 365 with your Windows phone, follow these steps:

Please be aware that these instructions are for Windows Phone version 7.5. If you are running an earlier version, it is recommended that you upgrade to version 7.5 first.

1. On your Windows Phone press Settings followed by Email and Accounts.
2. Tap Add an Account and select Outlook. This is a catchall for any email service that uses Microsoft Exchange, Office 365 included.
3. Enter your Office 365 email address and password, and your Windows Phone will automatically configure your account.
4. After the configuration is complete, a window will pop up informing you that your Office 365 email and SharePoint Online Team site have been set up on your phone. You’ll also be able to download Microsoft Lync 2010 from the Marketplace if you need it.

When you return to the home screen, you’ll notice that an Office 365 email tile has been placed at the bottom of the screen. It’s a good idea to go into the Email settings on your phone (follow step 1 above) and adjust the settings to your needs. For example, your email account will automatically be named Outlook. To re-name it tap on Outlook and select Account Name.

From the Settings page you’ll also be able to select which Office 365 services you want your phone to sync with e.g., contacts. By default your contacts will show up in your People hub. If you don’t want your contacts to sync, you can deselect it from this page.

If you use Office 365 and a Windows Phone you’ll find that the integration is near seamless. If you would like to learn more about Windows Phone or any other Windows product, we’re here to help.

Android versions have some pretty delicious sounding names. The newest version of the OS, codenamed Ice Cream Sandwich, has some tasty features that many users are now able to enjoy. These sweet new additions and improvements have definitely made the OS easier to use and more appealing to the multitude of discerning users.

Here are some great tips and tricks to help you get the most out of Ice Cream Sandwich:

• Settings. There’s a quick and easy way to access settings. Simply swipe down from the top of your screen and the Notifications menu will open. Press the blue icon (sliders) beside the date to access your settings.
• Uninstall apps. This used to be one of the more complicated actions of Android, but with 4.0, it’s easy. On the home screen press the Apps icon (white circle with 6 squares) and find the app you would like to uninstall. Press and hold the app, drag it up to Uninstall which will be in the top left of the screen and let go.
• Swipe away. A neat feature of 4.0 is that you can swipe away apps and messages in some locations. If you have lots of notifications, open the Notifications menu and swipe the message to the right to dismiss it. You can also do the same with recent programs (double rectangles in the bottom right of your screen) and browser tabs.
• Disable app icons. When you download and install programs from Google Play, a shortcut will be automatically placed on your home screen. You can turn this off by opening Google Play and selecting the icon with three vertical grey squares followed by Settings. Tap Auto-add widgets and app shortcuts won’t be added to your home screen after they’re installed.
• Send text response when you can’t answer. If you’re in a meeting and can’t answer a call, simply drag the call selector button up to be given a number of text responses you can send to the caller.
• Quick browser control. You can streamline the browser controls in the stock Android browser. Open the browser and select the three grey squares in the top right of the screen and tap Settings. Select Labs followed by Quick Controls. You’ll notice that your URL bar and tabs are gone. To see them, press and hold anywhere on the right side of your screen to bring up a selection wheel.

Ice Cream Sandwich is by far the best version of OS and offers users some great features. If you’d like to learn more about Ice Cream Sandwich, or other Android products please let us know. We’re happy to help.

There’s no doubt in the value of using social media to build your brand. But opinions differ in the use of social media by employees. It seems that companies are polarized in the issue, but are being slowly awakened to the fact that allowing employees to access social media at work has great benefits. Do you allow employees to access social media in your office?

There are four distinct advantages to allowing social media:

• Increased productivity. There have been a number of studies that have found that judicious use of social media in the workplace will actually increase productivity. A study conducted by the University of Melbourne found that employees with access to social media are 9% more productive than those without.
• Increased buy-in. Employees like to feel trusted and empowered. If they don’t you can expect to experience higher turnover and lower morale. A good way to gain trust is to allow employees to use social media in the workplace. If an employee feels like they are trusted, they’ll be more likely to stay with the company.
• Recruiting. Small businesses have started to use social media for recruitment, but limit efforts to one account. If you have 10 employees in your organization, each with a social media account with 100 friends, you have the potential to reach 1,000 people. This is achievable if employees are allowed to access social media at work and are encouraged to share posts.
• Identification of business opportunities. Through the use of social media, employees in charge of sales and business development can source new clients and build fruitful relationships.

There are many advantages to allowing access to social networks at the office. If you‘re hesitant to completely open the social media floodgates, try doing so in short periods, like the final three hours of the working day.

No matter what you decide, allowing access to social media is a good practice for your business. If you would like to learn more about social media and how you can leverage it in your business, we are happy to talk with you.

Calendars. Businesses have been using them to establish deadlines, meetings and events for as long as we can remember. Having moved from paper to the computer, calendars have become an integral app on smartphones. On our phones, we want to view all our calendars from one platform, and with the iPhone you can do just that.

The three most popular calendar programs are Outlook Calendar, Google Calendar and iCal. Here are the steps you can take to sync your different calendars with the iPhone. These calendars will all be viewable using the Calendar App on your iPhone.

Sync with Outlook Microsoft Outlook is the most popular email program in use, making the accompanying calendar just as prevalent. To sync your Outlook calendar with your iPhone:

1. Open Outlook
   1. Click Tools and select Trust Centre.
   2. Click Add-ins, followed by Details.
   3. Select iTunes Add-in, followed by Manage.
   4. Select Com Add-ins, Go and finally iTunes sync add-in.
   5. Click Ok.
2. Plug your iPhone into your computer using the USB cable. iTunes should open automatically.
3. In iTunes, select your iPhone. It will be located in the left hand bar, under devices.
4. Navigate to the Info tab and check Sync calendars with.
5. Choose Outlook. You’ll be able to select which Outlook calendars you want to view using your iPhone.
6. Press Sync.

Sync with Google Calendar If you use Google Calendar, syncing with the iPhone takes a few more steps, but it’s still fairly straightforward.

1. On your iPhone select Settings followed by Mail, Contacts, Calendars.
2. Press Add Account.
3. Select Microsoft Exchange. Note: Devices running iOS 4.0 can sync with more than one Exchange account. If you’re using a version that’s earlier than 4.0 you’ll only be able to sync with one Exchange account.
4. In the Email and Username fields, enter your full email address e.g., name@gmail.com. If you use a @googlemail.com account you’ll most likely get an Unable to Verify Certificate error message. If you do, press Cancel when the error message is displayed.
5. In the Password field enter the password you use to log into your Gmail account.
6. When you have entered the information, press Next in the top right of your screen.
7. In the Server field enter “m.google.com” (without the quotations).
8. Tap Next.
9. Select Calendar if you only want to sync with your calendar. If your company uses Google Calendar to setup meetings, you’ll also need to turn on Mail.

The calendar should sync automatically and show up on your iPhone within a few minutes.

Sync with iCal If you use iCal you can sync with your iPhone by:

1. Plugging your iPhone into the computer using the USB cable. iTunes should open automatically.
2. Select your iPhone. It will be located in the left hand bar, under devices.
3. Click the Info tab, followed by Sync iCal Calendars. You’ll be able to choose what calendars you would like your iPhone to sync with.
4. Press Sync.

No matter which calendar app you use, you can view it on your iPhone. There’s no need to carry around a day planner or appointment book with you anymore, just carry your phone. If you would like to know more about how to capitalize on the features of the iPhone we’re only a call away.

One selling point of the Mac is that the OS, OSX, is more secure than a computer running Windows. Many Mac users have been lulled into a sense of complacency and have been taking inadequate steps to protect their systems. A recent trojan has shocked these users into reality and left many of them wondering if their systems really are secure.

If you mention “OS X” and “virus” in the same sentence, you’ll get some weird looks from Mac users. Traditionally viruses and trojans on OS X were near non-existent, but there’s a Mac specific trojan, codenamed Flashback, that has affected more than 600,000 computers. This is big news as it shows that machines running OS X may not be as secure as first thought.

Many Mac owners are unsure of what exactly the Flashback trojan is, what it does and how to ensure they’re not infected. We’re here to help clarify the situation.

What is a Trojan and What Does Flashback Do? In general terms, a trojan is a piece of malicious software that infects a computer and gives control of part, or the whole computer to hackers. The Flashback trojan takes advantage of an OS X Java vulnerability and infects computers by tricking them into downloading a fake Java update.

When the program is installed, Flashback will download and install the main trojan code without the need for permission from the administrator. From there it proceeds to hijack your browser, redirect search queries to websites developed by hackers, and then take advantage of pay-per-click advertising.

Why Should I be Worried? While this version hijacks your browser, there are far more sinister things it could do. As this trojan acts as a downloader, there’s nothing stopping the developers from updating the malware to steal passwords, banking information and other confidential information.

How do I Ensure My Mac is Clean? Apple has released an update for machines running OS X 10.6 and later. The first step you should take is to update your computer to patch the vulnerability. To update your Mac:

1. Press the Apple logo, located in the top right hand of your screen.
2. Select Software Update...
3. Press Install and Restart.

While the patch will prevent Flashback from working, it won’t delete the program if you’ve been infected. The Internet security company F-Secure has developed a script that scans your computer and removes Flashback if found. Once you have downloaded the script, open and run it. The script will search your computer and place the infected files in an encrypted ZIP folder labeled Flashback_quarantine.zip.

Flashback has infected a higher number of Macs than any other trojan to date and goes to show that Macs also have security flaws. This also serves as a reminder that you should have a virus scanner and security program running on your Mac. If you have any questions regarding the security of your Mac or other devices, please don’t hesitate to contact us. We are here to help keep your machines secure.