Password Management For Law Firms (Questions/Answers)

Password Management For Law Firms (Questions/Answers)

We can’t function without passwords. So much of the internet is built on the concept of a username plus a password that the concept is core to users’ internet experience. It’s a clever but imperfect system that could certainly be improved upon, but until a game-changing replacement comes along, we have to play the game.

There’s a lot that doesn’t work very well about this system, and many people have questions about what password management best practices are. To that end, here’s a Q&A about passwords and password management.
What’s the biggest problem with how people use passwords?
The biggest problem with internet passwords is password management. Users have dozens if not hundreds of username/password combinations that they need for personal and business use. The problem with this is that nearly no one can reliably remember one hundred unique passwords. Many users, then, select overly simple (and easy to guess) passwords, or they reuse passwords across many sites.
What’s wrong with reusing passwords?
We live in a world of data breaches. When (not if) someone hacks favorite retailer or hotel chain, it’s embarrassing for those companies, but probably doesn’t affect your life too much. If the culprits gain access to your username and password for those sites, it’s a nuisance, but the amount of damage they can do is limited.
But when your hotel rewards password is the same as your credit card password and your banking password, you could have a mess on your hands. Scammers know that at least 51% of people reuse passwords, and you can bet they’ll try those stolen passwords on other, more valuable sites.
What makes a strong password?
A strong password is one that neither human nor machine can guess easily. Forbes compiles an annual list of the worst passwords being widely used, and it’s topped with gems like password, 123456, and qwerty. These are terrible because they’re just about the first things a human might guess. Other bad choices on the human front are the names of people, pets, or places that everyone knows are meaningful to you.
On the machine side, the shorter and simpler the password, the easier to hack. Make your password harder to brute-force by adding length, capital letters, numbers, and symbols. A password of 12 to 16 characters that mixes all these character types is generally considered a strong password.
I just keep my passwords on a sticky note. What’s wrong with that?
In short, everything. A sticky note hidden under your keyboard isn’t exactly a state secret. Think about who might have momentary access to see that sticky note. Clients? The cleaning crew? Maintenance personnel? Who else? This is especially disconcerting In the legal world, where those passwords could give a bad actor access to confidential materials that are under attorney/client privilege.
How can I remember passwords like j#%3M82*mRz!+?
Truthfully, you probably can’t. While that’s a tough password to crack, it’s not very useful for you. A better approach is to take a phrase that you can remember (perhaps one that relates in some tangential way to the site you’re on), and then make the phrase longer and more complex.
For example, iloveturtles is an easy phrase to remember, but it’s not that challenging to guess or to crack. Mix up the phrase by adding replacement characters, like <3iL0v3TurtleS<3, and neither your office mate nor a computer will easily guess or break your password.
Admittedly, this method has limits. Your own memory can be an obstacle, and sites vary with which characters they’ll allow in passwords.
I can’t remember 100 unique, complex passwords. What are my options?
Passwords need to be complex, and you shouldn’t reuse them from site to site. This creates a problem: Who can remember them all? One option that’s gaining a lot of traction in both the personal and enterprise markets, including in the law and legal tech fields, is using a password management tool. You’ve likely seen these advertised as “the last password you’ll ever need” or “one password to rule them all”; stuff like that. Password management tools are a reliable, secure way to generate and remember unique, complex passwords for all the sites and accounts you have.
How does a password management tool work?
Password management tools vary a little bit in terms of functionality, but at the core the services are similar.

First, you input or import all your existing credentials to the password management tool.
Next, you turn all your current weak passwords into strong ones. Some password management tools can do this automatically for you on many websites.
Last, you create one strong, secure password for your password management tool account.

After you’ve completed these steps, you’ll have just one password to remember—the password to your password management tool. It will store the rest of your credentials in a secure, encrypted vault and use them to log you into whatever account you need.
Are password management tools secure?
Yes. The companies offering these tools would be sued out of existence if not. Don’t believe us? Check out what a panel of experts has to say on the topic.
Conclusion
If you have additional questions about implementing a password management tool in your law office, contact us today. We’re here to help.

How Much Does Managed IT Services Cost?

How Much Does Managed IT Services Cost?

You have probably seen managed IT services offered from one or more providers in your area. The option of having your IT needs managed by an outside company has obvious appeal—you do not need to maintain a full-time IT staff, or at least as many IT employees, which should save your business some money. However, as a manager or business owner, you know it is important to read between the lines before jumping on just any opportunity that presents itself. How much does it actually cost to use managed IT services?
Managed IT Services Pricing Depends on Multiple Factors
The cost of having your IT needs managed by an outside provider depends on multiple factors. Each business has specific technologies that may be relatively simple or quite complex. The more complex the technology, the more it costs to maintain. And the level of management you can choose from varies as well. Managed IT services range from basic to comprehensive and are priced accordingly.
So What Does it Cost?
If you are looking for a direct answer to the question of what managed IT costs, you can estimate that your business could pay anywhere between $75 per user to $300 per user. The range is broad and maybe not terribly useful at first glance, which is why we encourage you to read on—and ultimately to speak to a reputable service provider to get a quote based on your specific situation and needs. Now let’s delve deeper into how managed IT services are priced so you can get a better idea of what your costs may be.
What Are Managed IT Services?
The biggest challenge with determining the cost of managed IT services—as we are attempting here—is the fact that there are so many services that fall under the umbrella of “IT”. Your business may have drastically different IT needs than another business. That being said, we can look at the basics of managed IT services to get a clearer picture of where your business may fall on the spectrum of technology service needs.
First, let us define what managed IT services means. At the core, managed IT means your IT needs, whatever those may be, are managed by an outside company. A team of experts offers to manage your IT needs, or at least a portion of those needs, for a fee. There is a huge range of services that fall into the IT category, though, which means managing a company’s IT could mean managing 10, 20, or 1,000 different things.

Managed IT services are presented as a way to save money because outsourcing IT management is typically more efficient for most businesses than employing a team of IT professionals. IT is a deep, complex subject, requiring extensive training in specific technologies and practices. Employing a team with the skillset to manage all your IT needs is costly, which is why only large corporations tend to do it. For small and mid-sized businesses, it often makes more sense to outsource IT management. With outsourcing, you only pay for the services you need, much like you would for legal services or other specialized, potentially high-cost services.
The Two Basic Approaches to Managed IT
Managed IT services fall under two broad categories—fully managed IT and partially managed IT.
Partially Managed IT Services
Some businesses have one or more employees that are tasked with managing IT. You may have specific IT needs that require a dedicated IT team to handle in-house. Even if you do not have an absolute need for an in-house IT person or group, you may just feel more comfortable having someone or a team there, in-person, every day to deal with certain IT tasks.
For businesses with existing IT personnel, IT service providers offer partially managed IT services. You can choose what they manage and when. Partial management can range from providing support for tasks that are exceptionally complex—possibly beyond the skill or workload of the in-house IT team—to providing support for routine tasks like security or backup administration.
Fully Managed IT Services
For many small to mid-sized businesses, the most economical and efficient option is to outsource all IT management. Instead of trying to determine what kind of IT employees you need, how many, etc., you can consult with a service provider who can give you expert insight, advice and the service necessary to keep your business technology running smoothly 24/7. A reputable managed IT services provider will be capable of collaborating with you and other leaders in your organization and deliver industry-leading services that an in-house team may struggle to match.
How Managed IT Service Pricing Works
The price for managed IT services varies by region, provider and customer. That being said, there are a few basic concepts that can help you understand how pricing works. These include:
Per User Pricing
Many service plans will be based on the number of users that are being monitored and cared for. You can calculate your users fairly easily—whoever is using the technology in your company can be considered a user. In today’s technology-driven workplaces, you can usually expect every employee to be a “user.” Anyone in your business that uses a PC, Mac, laptop, mobile device, tablet or anything else that requires IT support is someone you should count towards your total users.
Per Device Pricing
While per-user pricing is probably the most common, per device pricing is also a possibility. Instead of pricing services based on how many people are using the technology, the provider may offer to charge based on how many devices your business uses. You would include all the devices you want to be covered—which really should be every device that sees any use in your company—including PCs, Macs, laptops, tablets, mobile devices, etc.
Pricing Should Be Clear and Easy to Understand
Any reputable IT services company will be very clear about what your services will cost and what will be covered by the fees you pay. It will all be documented in your contract, so you can verify what you agree to before you sign anything or hand over any money. Clarity is beneficial for both you as a customer and for the IT company as they can justify their actions—or inaction—based on the contract that you both agreed to.

The Managed IT Service Options Available
IT management services are further broken down into service levels. The names that different providers use may vary, but you can expect services to fall into three general tiers:
1. Basic IT Services—Lowest Price Initially, But Variable Costs Are High
The entry-level IT management services are offered at the lowest recurring price. They involve basic monitoring of your systems and can cost around $70-150 a month. The services you get at this level are akin to having a security team keep track of your server. The organization pays close attention to what is going on and lets you know if anything seems off.
There are obvious benefits to having this kind of security and oversight, but the benefits are limited and the cost can go up quickly if you need any additional assistance. This is especially true if you do not have an IT team to address things when they do go wrong. If you need the IT service provider to do anything beyond monitor and notify, you can expect to pay between $50 and $300 per hour for assistance—depending on the complexity of the problem that needs to be solved.
It may be possible to purchase a block of time from the service provider at a discounted rate. If you can negotiate a contract for a block of time, you can have the IT provider work on issues until that block of time is used up. Of course, you will need to decide which issues are worth using the block for, and which may need to wait until next month when you have another block of time—or pay for a full-priced solution right now when you need it.
2. Mid-Range IT Services—Considered the Best Value for Most Businesses
As with so many things, the lowest priced option is often more expensive in the long run. IT services are no different. A mid-range managed IT service is more expensive up front, but can often save money over time as your service provider is able to help you avoid issues before they become major—and read to address issues immediately when they are easiest to solve.
Once you get into mid-range services, you are hiring more than just a monitoring service. You are hiring a team to serve as your IT provider in most if not all ways. The team will definitely keep track of your systems and notify you when something of concern pops up. But they will also take the initiative to solve those problems without the need for you to make unnecessary decisions—like whether you want to pay extra for the help. You have already hired the team at a rate that allows them to go into action now instead of later.
The services you can get, for a flat fee, may include:

IT planning
IT strategy
IT design
System backups
24/7 IT support (possibly unlimited)
On-site support
Remote support
Disaster recovery

Mid-range IT management services are usually priced based on the number of users you have, or the number of devices you need support for.
Typical charges per user range from $50-$200 per user.
For per device services, pricing will be based on the type of device. For servers, you could pay between $120-500 per server. Workstations may cost between $30-120 per station. Firewalls can cost between $25-100, while switches may cost between $10-50 per switch.
3. High-End IT Services—Only Necessary in Certain Circumstances
The high-end of managed IT services is only necessary for certain types of businesses—specifically those that need full hosted or cloud systems. If the IT service provider needs to provide your business with the majority, or your entire infrastructure, then your fee will include the cost of providing that infrastructure. You get the full scope of services for the increased cost of the high-end pricing, including the use of the system and the support services you need with that system—as well as all the services offered in mid-range plans. A fully hosted service may cost $300 or more per user, per month, depending on the complexity of what is provided.

Some Factors to Consider With Pricing Managed IT Services
IT service providers are in business, just like you, so they need to price their services in a way that keeps them in business. As with most, if not all, businesses, IT service providers base their pricing on how much time and resources they will need to devote to the customer to get the job done. The harder the job, the more they need to charge. And the more unpredictable the job, the more pricing needs to account for possible spikes in time and resources required for the customer.
When an IT company is deciding how much to charge you, they will consider the following factors:
How Complex is Your Technology Matrix?
Your technology matrix includes all of your technological devices and the ways that they need to interact with one another. The more devices, the more variety, the more connectivity that must be maintained, the higher the workload the service provider will expect. Your system or systems may include:

Laptops
Smartphones
Tablets
Desktops
PCs
Macs
Servers
Workstations
Antivirus software
Wi-Fi for internal use
Wi-Fi for guests
Web filtering
Personal devices
Cloud applications
Unique connectivity issues—like warehouse use or outdoor use
Business software

This is a very small list of potential devices, software and circumstances. You can see how the complexity of a system can increase rapidly, even if you are not what is considered a technology-oriented company.
Do You Have an Existing IT Team?
At first glance, it is easy to assume that having your own IT team would make the job of the outsourced team easier—but this is not always true. Integrating with an existing team presents its own challenges. If you are just hiring the outside team for a specialized task it may be economical, but the price of individualized services is not necessarily the best deal. The more control the outsourced team has the better they can predict their workload, which can make for a better deal with pricing.
Do You Need Individual Services or Comprehensive Services?
When an IT management company is monitoring your system and tells you of a problem, you have the option of hiring that company to address the issue. The actual monitoring work is relatively low demand, which is why it is inexpensive. But actually addressing the issue requires bringing in an IT professional to examine the problem, identify a solution and implement that solution. The IT company only has so many employees, which means taking care of your problem may mean pulling a team member off of a current project to deal with the problem.
The cost of having your service provider address issues on a per case basis reflects the challenge of dealing with problems as they arise. But when you pay for comprehensive services, like with a mid-range plan, you are compensating the company to keep an employee on-hand for your issues. There may still be some juggling of resources to meet unexpected needs, but much of the workload of handling your systems has been accounted for.
What Will My Managed IT Services Cost?
You cannot get an accurate quote for your specific situation from an article, but you can use the information provided here to identify where your needs lie on the spectrum of potential services. Take a close look at your business and IT needs and consider the following:

Do you have your own IT staff, or do you want to have one or more staff members devoted to IT?
What is the complexity of your technology? (Answering this question with real accuracy may be difficult to do without the assistance of an IT professional. Even so, it is worth considering to get a ballpark idea of what you will be asking the IT service provider to do for your business.)
Will you be satisfied with remote services, or do you want to have someone on-site at least part of the time?
Do you need a full network provided for you, or do you have a network on-site?
Are you interested in a low initial price point for basic monitoring services—with the potentially high cost of individual services as needed? Or do you that a flat fee for everything would be more appropriate for your needs?

Things to Consider if you Do Have Internal IT Staff
When you have your own IT staff, there is an additional layer of questions you need to ask yourself. Having an “IT” team can mean a lot of different things. You could have one or more serious IT professionals on staff that have the credentials and training to handle a wide variety of tasks. Or, you could have an employee that does basic technology support—that may or may not even specialize in IT. Maybe you have something in between these two scenarios? As you can see, your situation may be entirely different than that of another business.
If you have a serious IT team, you can decide if maintaining that team makes sense for your business. If it does, you can consult with that team to determine what kind of outsourced services you need. If it does not make sense to keep the team, you could consult with different IT providers about how they might take over the role of your team.
If you do not have a serious IT team, it may make more sense to outsource and move your existing IT people—if you have any—to roles that they are better suited for.
Are There Other Options Besides Managed IT Services?
While managed IT services are the recommended choice for most businesses based on cost and efficiency, there are other options available. These include:
On-Demand IT Services
There are a lot of different names for this kind of service, including pay-as-you-go, break-fix, hourly and time & materials. They all refer to the concept of paying for IT services only when you need them. The term break-fix sums the idea up perfectly. If your team breaks something, the IT provider will fix it. Given the unpredictability involved, the cost for these services tends to be high. It may cost anywhere between $50-300 an hour depending on the job, along with the cost of any materials needed.
Block Time
This is a lot like on-demand, as you still get the help you need on demand, but because you pay early you get a discount. You can arrange a deal where you pay for a block of time. When something breaks, you contact the IT provider and let them know you need help. They work for as long as the amount of time you have paid for. If you need more time, they will generally charge you at the hourly rate.
Support from Your Software Vendor
Some software vendors will provide support for their specific products. The support may be included in the price of the software. Usually, you will need to pay extra for support, which may cost thousands or tens of thousands depending on the software.
Get an Accurate Quote—Contact Your Preferred IT Services Provider
As you know, technology can be confusing and frustrating when things start to go wrong. The idea behind managed IT services is that you can keep confusion and frustration to a minimum by outsourcing the management of your technology systems.
If you would like to know precisely what managed IT services will cost for your business, please contact us. We are standing by to give you a quote based on your unique needs.

Canadian Healthcare Organization Breaks Trail In Health IT

Canadian Healthcare Organization Breaks Trail In Health IT

This innovative Canadian health care organization is making waves in the industry when it comes to health IT. At Humber River Hospital in Toronto, Ontario, IT is being integrated into just about everything the organization does, and it is being done with great enthusiasm. This is wonderful news for health care organizations around the country and the world, as Humber River is providing a road map as to what other organizations can do to make things better in every way for employees and patients alike.
Bringing Hospitals into the 21st Century
Traditionally, hospitals have not been known as organizations that change quickly or dramatically. Until recently, Humber River was no exception. However, things changed when they hired their current CIO, Peter Bak. Peter has a commitment to defining a culture of innovation at Humber, and he entered his current position with this goal. Since he arrived, things at Humber River have changed in a variety of ways, and all for the better.
Some of the IT innovations that Bak has spearheaded at Humber River Hospital include:

Having all of its information available in electronic form
Increasing and improving digital patient engagement
Robotic appliances that travel around the hospital to deliver supplies
Automating whatever can be automated, in order to create safer and more efficient workflows
Linking people to assets in the hospital, such as using IT to help employees find available wheelchairs or other necessary supplies

Improving Employee Communication at Work
The connectivity that Bak supports and promotes is not just limited to inanimate objects, either. He encourages the same type of connectivity among employees. This includes connecting the various care teams of the hospital, which often have significant communication gaps between them. With Bak’s innovations, this is no longer an issue, which creates a better experience for employees as well as patients.
Interpersonal connectivity between care teams is encouraged through the use of telecommunications tools. The hospital uses the highest quality telecommunications tools to allow employees to more easily talk to each other, as well as allowing them to communicate more easily with the IT in the building. The tools also ensure that the right alerts and alarms go off to the correct clinicians in the building, which improves patient safety and outcomes, and makes for a better patient experience, while allowing clinicians to do their jobs to the best of their ability with greater ease.
Using Analytics to Improve Outcomes and Communication Efficiency
Another thing Bak has emphasized since taking on his role at Humber River is analytics. The goal was to leverage electronic data in a way that provided the hospital and its various care teams with good analytics in a simple and easily accessible way. With the correct analytics in hand, care teams can see exactly how they are doing, what they need to do to improve, and how to get patients what they need in a more timely and efficient manner. The hospital is currently experimenting with the use of analytics to eliminate never events there.
Humber River Hospital’s ultimate goal with all of these IT innovations is to provide their patients with the highest quality of care, while giving them the best possible outcomes every single time. Leveraging the use of IT in this goal is helping them be among the best in the industry. What they are doing shows other hospitals how to do the same thing to improve their own employee experience and standard of care for their patients.
Providing an Innovation Map for Others
In any industry, someone has to be an innovator and lead the way into the next level way of doing things. Among Toronto’s hospitals, that entity is Humber River Hospital. It is serving as an inspiration and a guide for others to do the same.
The lack of good use of IT in the health care field is something Bak definitely noticed. The consumer world had already mastered the use of IT in efficient communication. However, the health care industry was languishing in the Dark Ages by not using those available technologies. He saw how using old-fashioned methods of communication was resulting in poorer outcomes for patients, and determined to do something about it. He pushed Humber River Hospital into the 21st century in terms of using technology for improving communications. Today, his efforts have tangible successes. Other health care organizations would do well to follow the map this one innovative place has created for them.

Celebrate World Backup Day on March 31st

Celebrate World Backup Day on March 31st

When Was Your Last Backup?
Data backups are a critical part of protecting the information and files you cannot afford to lose. And yet, many people have bad backup habits – or no backup habits at all.
 
 
March 31st is World Backup Day – a perfect opportunity for you to update your existing backups, double-check that your backups are functional and retrievable, or create that backup you’ve been meaning to get around to.

Need help creating or maintaining your data backup system? Give {company} a call at {phone} or email us at {email} and talk to our technology experts today.

What Exactly Does A Managed IT Services Company Provide?

What Exactly Does A Managed IT Services Company Provide?

Running a business requires a great deal of focused attention. Unfortunately, when your technology team is spending a great deal of time dealing with login problems, software licensing, cybersecurity and more, it doesn’t leave a lot of time for growth activities and strategic thinking. As businesses grow, many organizations find that it makes sense to work with an IT managed services company to maintain a high level of security and staff productivity that would be nearly impossible using only internal assets. These technology partners provide best-in-class tools and support that can scale with your business as you expand. Here’s an overview of the type of services that many of these technology partners provide.
Day-to-Day Operations
Technology teams often refer to “death by a thousand cuts” — which is what happens when you have dozens of people relying on you to provide technical support for your organization. Everything from computers that refuse to reboot to conference rooms where the projection isn’t working all come into your help desk. This can overwhelm the individuals in IT and also cause a productivity loss for the staff members who are waiting on a response or support. IT managed services providers are able to step into this gap and solve a variety of simple challenges, including:

Retrieving lost files or folders
Resetting passwords
Issuing software licenses (based on pre-set business parameters)
Troubleshooting network connectivity
Rebooting servers

These are only a few of the “Help me now!” requests that technology professionals receive on a daily basis, and all of these options can be resolved remotely by a friendly technician from your IT managed services provider.
Creating or Refining Cybersecurity
Ensuring that your business information stays safe is a primary directive for today’s organizations. With many companies storing personal financial and health information for clients or staff, cybercriminals are enjoying access to data from organizations of all sizes — especially those businesses without a robust security posture. Staying current with the latest threats takes time and attention, and can be challenging for technology staff members to juggle with other priorities. When you work with a managed services provider, you have easy and immediate access to cybersecurity professionals who are able to review your current processes, make recommendations for improvement and then even help with the implementation of those suggestions.
Long-Term Technology Strategies and Budgeting
Even things that you might think of as integral to your business can be supported through a trusted IT managed services provider. A good technology partner may have access to dozens of business models and be able to make recommendations for your business based on a broader scope of understanding. Your external IT team can help with research on new vendor partners, negotiating better pricing on software due to shared buying power and even help create budgets based on the unique needs of your business.
Advanced Backup and Disaster Recovery
Should the unthinkable happen, it definitely pays to be prepared. There are any number of reasons you might have to restore operations from a backup, but without a proactive backup and disaster recovery process in place this can be a big challenge for businesses. Massive fires, flooding or other natural disasters claim thousands of businesses every year, as those businesses are unable to restart operations after a disaster. Cyberthreats or data loss could also spell doom for your business, especially if the loss leads to an extended period of time without access to your business data. With an IT managed services partner, you’re gaining access to advanced backup and disaster recovery software and protocols that will help protect your business in the event of an emergency — and help you restart operations quickly. More than 96% of businesses with a disaster recovery solution in place continue operations, but the same cannot be said of those without the forethought to create a comprehensive plan.
There are hundreds of scenarios where an IT managed services provider can help support your business. The bottom line is that you are gaining access to a deep bench of qualified professionals who are solely focused on helping make your business successful. Whether you need immediate assistance with help desk support or longer-term strategic advice, IT managed services providers serve a vital role in today’s business world.