by Felicien | Jul 24, 2018 | Education
With the escalating cyber threats that affect the U.S. Government, the U.S. Department of Commerce issued a Defense Federal Acquisition Regulation Supplement (DFARS) to safeguard the U.S. Department of Defense’s (DoD) unclassified information. The regulation now requires all aerospace and defense companies to be compliant.
Roadmap to DFARS Compliance
In order to be considered DFARS compliant, organizations need to pass a readiness assessment according to the NIST SP 800-171 guidelines.
On average, it will take an organization about six to ten months to become compliant, depending on the organization’s current security status and the available resources they have at their disposal.
Planning is the key to ensure success in your DFARS compliance expedition. It is essential to treat this as a major project, with the mindset of having the needed resources and funding set ahead of time. Many companies hire specialists and consultants and this can really expedite the process, plus it can help an organization to avoid common errors.
Let’s look at an action plan or roadmap to guarantee your cloud environment is safe and compliant according to the DFARS mandate.
Step 1: Calculate Your Organization’s Applicability
Key Question: How can your organization stay relevant?
Using the controls listed in NIST SP 800-171, document the gaps between your current position and the expected end goal.
To ensure your organization is applicable, check off these essentials for Step 1:
Review all contracts to pinpoint important DFARS clauses and provisions.
Review DFARS to determine the type of CDI or CUI (see Clause 252.204-7012) that applies.
Check your applicability with the Contracting Officer as needed.
Define what systems, processes, programs, applications, hardware, software, people, etc. fall under the scope of your NIST 800-171 compliance.
Step 2: Build a Remedial Plan to Safeguard against Non-Compliance
Key Question: What is your current Security Status?
In order to stay NIST SP 800-171 compliant, make sure you can put a check next to these measures:
Conduct a control gap analysis against NIST SP 800-171.
Develop solutions for the identified defects that you find.
Meet with your subcontractors and other business partners to make sure you are both on track and in step for compliance.
Step 3: Implement Your Remediation Plan to Ensure Compliance
Key Question: Have you developed a plan of action to track your progress?
Developing a system security plan will give you the peace of mind in knowing that you are going to be compliant. You won’t have to worry about fines and penalties.
Develop or revise controls as needed to remedy the control gaps with NIST SP 800-171.
Organize your validation testing after remediation is completed to confirm controls are designed and operating effectively (You then need to make sure you have the agreement of your Contracting Officer).
Step 4: Continuously Monitor and Follow-Up
Key Question: How do you maintain constant monitoring to ensure compliance?
Establishing a plan to effectively monitor your compliance can be achieved by doing the following:
Use tools, templates, reports, and metrics to develop an ever-flowing monitoring program.
For accountability, organize monitoring activities and provide status updates to significant investors on your performance and progress.
Conclusion:
To Be DFARS Compliant, it is important to remember to set controls in place for current systems and data, while remembering the need to cover new systems and data as they are created. If you fail to keep this in mind, you will assuredly find yourself falling short of compliance.
There is a propensity within organizations to place an emphasis on the controls during the implementation phase, but once the system is up and running, they tend to take their foot off the gas and eyes off the road. Sustaining constant compliance is a never-ending process. You must continuously make sure that new data and systems are effectively classified and that the correct controls are applied. Once DFARS is running and business returns to normal, a high level of attentiveness must be maintained to guarantee the safety and compliance of your organization.
by Felicien | Jul 24, 2018 | Education
Microsoft’s New Surface Go Tablet: Will It Stand the Test of Time?
The latest new tablet being released by Microsoft is the Surface Go. So, what does it have that older predecessor’s lack? Though it does share some commonalities with its Big Brother, the Surface Pro, there are a few major differences. Let’s take a look at those and see whether the new Surface Go tablet will be a winner or a loser with users. After all, the users are the ones who decide whether a new tablet will make it in the big leagues or be thrown out with the trash by next year.
One: The Price
If you’re a struggling student on a tight budget, then the Surface Go might be just what you’ve been searching for. It has many of the cool features of the Surface Pro without the hefty price tag. For instance, the latest version of the Surface Pro has an Intel Core m3 processor, 5GB of ram and 128GB SSD. It is ultra-lite but has a battery that can last all day. It transforms from a tablet to a laptop by opening the built-in kickstand, then adding Microsoft’s Signature Cover built especially for the Surface Pro. However, at around $799, it’s hardly budget-friendly.
You can get the new Surface Go for about half that much and it will include many of the features above. At around $399, this tablet computer is perfect for most tasks. It performs like a laptop and features a stunning touchscreen. You can enjoy most of the perks of a Surface Pro at half the cost. It can run all your favorite programs or play your favorite games. It’s small, lightweight, and affordable: a triple hitter. The low price will make it very attractive to anyone on a budget.
Two: Display & Processor
With a 10-inch PixelSense display, the Surface Go is a bit smaller than the Surface 3, but it still offers pretty good screen resolution. At 1,800 x 1,200 pixels, the Go gives you 217 PPI (pixels per inch), which is actually higher (201 PPI) than the Surface Laptop, but lower than the Surface Pro (267 PPI).
Microsoft is betting on the 10-inch size of the Surface Go and its smaller price tag to make it highly sought by students everywhere.
The processor on the Surface Go features the Intel Pentium Gold 4415Y chip. Although it is much slower than Intel’s Core i5 and Core i7, this is one of the major reasons for the smaller price tag. Since processors are usually one of the priciest components of most computers, Microsoft was able to slash the price of the Surface Go by installing this slower processor. Though it may be a big tradeoff, many users will be willing to overlook slow processor speed for the lower price to get such a charming tablet computer.
Three: Keyboard & Pen
The keyboard on the Surface Go has keys the same size as the Surface Pro so it won’t be hard to make the switch for typing enthusiasts. The Go tablet also features 2-in-1 keyboard functionality. You can connect to a Type Cover keyboard (sold separately). In addition to the standard version, users can pay a little extra for a keyboard with the Signature Type Cover with Alcantara fabric. The Surface Pen (digital stylus) works the same as the Surface Pro and is sold separately.
Four: Size
With computers, size does matter. Though we might all love a big 17.3 inch screen when viewing our favorite Pinterest projects, those big bulky laptops are not made for a busy lifestyle. The Surface Go is being advertised by Microsoft as the smallest, lightest Surface computer ever made. It weighs only 1.15 pounds and is a mere 10 inches across. It should fit easily into any bag. You can carry it all day and barely know it’s there.
Five: Battery Life
More and more users are looking closely at the battery life of smart phones and computers. There are even new gadgets on the market that promise to extend the battery life of your device. The Lenovo Yoga 920 tops the list with over 22 hours of battery life. However, the price is well above $1,400 for this powerful perk. If you’re talking about tablet computers in the $400 range, then Microsoft’s promise of 9 hours of battery life with the Surface Go seems like a bargain. The Surface Pro only offers 13.5 hours of battery life and it’s twice the price. Nine hours seems like plenty of time to find a power outlet and recharge.
Wrap Up
The Surface Go will be available in August of 2018, but you can expect a backorder from the get-go. Many schools and students are lining up to take advantage of the attractive, low-priced Go tablet. Since it’s made by Microsoft, there’s a very good chance that it may well be every student’s favorite tablet computer by next year. And, it should wind up on a number of Christmas lists this year.
by Felicien | Jul 24, 2018 | Education
Security for your automobile is so important today due to the current rise in car theft. It is necessary to protect your transportation from this threat. Your car represents a hefty financial investment, not to mention that it provides transportation for your whole family.
However, many people take auto security for granted. If you’ve ever had your car stolen, then you understand how traumatic it can be. This article will help you better understand how to perform some basic safety precautions to keep your car safe. Many insurance companies offer lower rates if you install extra protection to keep your car safe from thieves. Sit down and relax, so that you can learn how Fob systems work.
How Key Fobs Work
The main Fob systems include electronic devices. These devices function by reading a key Fob when placed in close proximity. If the key Fob is authorized, the reader sends a signal to the door and the user can gain access. Key Fob entry systems offer greater ease of use, enhanced security, and more control.
Once the key Fob is within short range to the access device reader, the system opens the car door to permit entrance only for the owner. The Fob has a special recognition number and the right-to-use system can be programmed to limit or block entry at any time. The biggest advantage of key Fobs and keyless access in general is that a Fob can be instantly blocked in case it’s stolen or lost.
Because of the uniqueness of each car’s key Fob, billions of codes are created so that each one is exclusive. But hackers have ways of intercepting the wireless signal and then narrowing down the numerical combinations. Within minutes, a hacker’s computer program can figure out the code to unlock your car. This poses a challenge to the security of everyone’s automobile.
Why You Should Wrap Your Keys In Aluminum Foil
Unlocking your car wirelessly is a convenient technology, but it comes with limitations. Thugs have come up with easy ways to intercept the FOBs signal and seize it, locking out alarm signals. The unique key Fob code is sent to the car’s security system using a computer chip. The car has a chip that uses the same algorithm in order to generate codes. Once the codes match, then the car doors open.
Car thieves have figured out how to hack the access codes of your Fob even if it’s not in the car. By capturing and manipulating signals from Fob keys, they can steal your car in just minutes. They use products that assist in intensifying the signal from the key Fob and this allows the car to be stolen effortlessly.
One simple solution to preventing a car thief from stealing this information is to wrap your key Fob in aluminum foil when the key Fob is not in use. The foil blocks the signal, preventing thugs from being able to decode it. Though this is pretty low-tech, it does work and it isn’t hard or expensive to do. Just a bit inconvenient.
How Criminals Attack
Criminals have come up with a way of detecting key Fob signals from a distance of 300 feet away using an amplifier. Signal theft is becoming a much larger problem that even experts can’t deal with. High-powered RFID readers make it all possible. This technology is relatively inexpensive and very accessible to thieves.
Steps To Stop Car Thieves
It is possible to block these amplified signals from reaching your key Fob. One method involves buying a signal-blocking purse or wallet to hold your keys. While this is a simple remedy, it’s important to make sure your keys are properly stored so signal blocking works all the time and correctly. If you can’t afford a purse or wallet with this technology, then try lining your purse with aluminum foil. You can also line only the pouch that holds your keys with foil. Many people keep their keys in the same pocket or area of their purse, so just line that specific area with the foil and remember to place the key Fob there when not in use.
Wrap Up
These days, it’s important to make sure you’re doing everything possible to keep your home and car safe. Though there are many new types of security systems to use, it can be expensive or difficult to install and use them. If your budget won’t allow it, look for easy, low-cost ways like using aluminum foil to protect your key Fob. Make it as hard as possible for thieves to steal from you. They’re often lazy folks who are searching for the easiest targets, so each layer of protection you add, makes you less of a target for car thieves.
by Felicien | Jul 24, 2018 | Education
Why the big hubbub over HTTPS?…
Because from now on, users who visit HTTP sites will be hit with a BIG WARNING from Google. This will happen to anyone using Google Chrome version 68.
Google warns that you should have been protecting your websites with HTTPS for a while now. And this isn’t just for confidential communications. You need HTTPS on all your sites.
Why?…
HTTPS Prevents Intruders And Security Vulnerabilities
You certainly don’t want people (criminals or otherwise) tampering with the communications between your site and your users’ browsers. These intruders can be hackers or legitimate companies like Internet Service Providers (ISPs) that inject ads into your web pages. Did you know that some of these advertisements can block the user and create security vulnerabilities on your site?
HTTPS Protects Your Users’ Privacy
Every unprotected HTTP request to your website can potentially reveal your visitors’ private information, such as their browsing behaviors and even their identities. Some intruders gather bits of information and compile it into user “profiles” to steal their identities.
HTTPS also keeps intruders from listening to communications between your website and your visitors. This means if you don’t use HTTPS and you have an online help desk service with VoIP, someone else other than your rep and your client may be listening.
Intruders can trick your visitors into providing their confidential information or installing malware into your website. They can access and exploit unprotected images, cookies, scripts, HTML … and they can do this at any point along the network.
This means that your users’ machines, a clients’ Wi-Fi hotspot, etc., could be exploited and you’ll be to blame.
HTTPS Is Required For Progressive Web Applications (PWAs)
What are PWAs? They use modern website capabilities to deliver app-like experiences to your users.
Google likes PWAs because they:
Load instantly, even when your visitors use uncertain network conditions. This is because they “live” on the user’s home screen. They don’t need to go to an app store for them. PWAs can also re-engage your users with push notifications. You can control how the app is launched and appear on your site.
Respond fast and smoothly. Did you know that 53% of users leave a site if it takes longer than 3 seconds to load?
Are engaging and provide an immersive user experience. You can pre-cache resources so you’re not so dependent upon the network. It gives your users a more reliable experience when browsing your site.
Google Says That HTTPS Is The Future
In addition to the security benefits of using HTTPS, there are commercial benefits as well. Browsers and search bots prefer HTTPS sites. Your site will be easier for visitors to find.
Today’s new web platform features allow things like taking pictures, recording audio and new geolocation APIs (Application Program Interfaces). They essentially provide offline app experiences. HTTPS is a key component to the permission workflows for both new features and updating APIs.
And take note! Watch for HTTPS warnings from Microsoft, Apple and Mozilla. They’ll be coming soon.
Keep Google happy and your users safe. It’s not expensive to switch to HTTPS and it’s certainly worth doing!
by Felicien | Jul 23, 2018 | Education
Microsoft is always looking for great ways to make your workflow easier. That’s why they continuously update their products. The July 2018 updates to Office 365 are especially unique and should prove to be very helpful to users.
Upgrades To The Ribbon
Microsoft introduced the ribbon in its Office 2007 software. It replaced those traditional menus and toolbars that users were so familiar with. Though the changes did cause somewhat of a stir in the community of users, soon everyone came to appreciate the ribbon. It went over so well that Microsoft continued to update the ribbon each year to include greater functionalities.
Today, no one can imagine Office 365 without the ribbon. With that said, the new updates for Office 365 July 2018 include larger graphical controls on the ribbon that are more visible and grouped in a logical manner. Ribbon functions are more accessible and easier to use. Microsoft’s goal with this update was to make it easier for users to collaborate and connect with others.
The ribbon is also more intuitive now. It puts those commands you’re currently using front and center so they’re available when you need them.
Now there’s only one row of buttons instead of two, which helps to keep the commands you use at the forefront of what you’re working on. This allows more space for your document content. If you’re a big fan of the old ribbon that had two rows of commands, you can easily restore that look with the toggle of a button. Restoring the classic view has been made simple.
The new simplified ribbon is scheduled to be released first in the web version of Word. It will be rolled out to a special group of Office insiders in July. Microsoft will take the feedback from these users, then adjust their updates before rolling out the new Office applications to all users.
Sharepoint Integration
Integration has always been a big thing for Office 365 applications. The Office team has gone one step further with new ways to embed Planner into SharePoint sites. Now the Office 365 productivity solutions that everyone loves are even easier to access. For instance, the SharePoint navigation bar gives all team members the ability to manage tasks directly from SharePoint. Outlook, Calendars, and Microsoft Teams are still available from most applications.
A new button on the SharePoint page allows users to add a plan from Planner. Designing a SharePoint page that has plan details is a breeze. Simply head over to the SharePoint page with the plan details, then click on the Edit button. Locate the area where you want your plan displayed, then click the Plus sign, and select the new Planner web part.
Microsoft Teams Updates
SharePoint integration for Microsoft Teams has been greatly simplified as well. Users can add files directly into the Teams interface right from SharePoint. They can also link an entire SharePoint document library in Microsoft Teams.
Teams have become a favorite meeting application with all the Microsoft apps accessible from the Teams interface. This app took a huge leap forward when Teams was recently updated to allow for links to an entire SharePoint document library. This offers fast, convenient ways to share the SharePoint document library with your whole team. Expect to see more exclusive updates to Microsoft Teams in the future, as it has now become an indispensable part of everyone’s workday. It’s revolutionizing the way people communicate.
New Chat Functions
The Team’s chat experience has been improved to add more flexibility to participants. For instance, if you are involved in a chat that is no longer relevant, you can easily duck out of the meeting. You can also hide a chat if you need to do so or mute a chat if you need to focus on some other task at the moment.
Sway for iOS
Microsoft announced its most extensive update in history on May 30th to Sway for iOS. Now users will find it easier than ever to create a Sway from beginning to end on their iPhone or iPad. Users can quickly toggle between Edit and Preview modes. Add and reorganize text and media in the Edit mode.
Preview lets you see your Sway as others will see it. You can also make easy and fast changes to your Design with the toggle of a button. Edit mode has been simplified to an all-white canvas where users can add photos and videos from the camera or take a new photo. Tap on an image to resize it or add a caption. Photo grouping has been simplified as well. Drag and drop one image onto another to create a new image group.
Sway on iOS allows for the addition of lists, bullets, links, blockquotes, and more with the single tap of a button. Once you have your Sway completed, it’s easy to share or you can invite friends to collaborate. The Sway app for iOS is available from the Apple Store and it’s more fun than ever to use.
Wrap Up
The Office 365 Updates for July 2018 all about ease and convenience. You can do more in less time. It’s well worth it to learn these easy new ways to use Office 365 so you can shave time off your workday and get more done each day.