by Felicien | Jan 12, 2018 | Education
Technological advancements have, without a doubt, had a positive impact where your business is concerned. But they have also led to hacking, data breaches and the likelihood that rogue employees will use tools to jeopardize the security of your data.
What is a Rogue Employee?
A rogue employee undermines your business by ignoring rules and policies. They might openly break these rules, without concern of being fired, or covertly subvert them to prevent from being discovered.
Their actions might be relatively harmless or serious enough to pose a risk to the security of your data. In the worst-case scenario, a rogue employee will attempt to undermine your organization by giving your data to a competitor or engaging in corporate espionage.
The rise of BYOD in businesses, where employees are allowed to use their personal devices at work, and mobile apps and cloud-storage solutions, provides the rogue employee the vehicles to do his “dirty work.”
There are three types of rogue employees:
1. The ambitious, resourceful and independent individual: These rogue employees are driven to get a job done, even if it’s illegal. They’ll stay up all hours to find a way to circumvent your rules–rules they perceive are obstacles that just slow them down. They view these rules as only for less capable employees and resent having to comply with them. These rogue employees can be dangerous to your organization because they are so capable.
2. Disgruntled employees with access to highly confidential data: This employee pushes boundaries so they can be involved in as many processes as possible. However, as they get access to more systems your risk mounts. They hold a grudge and want to do you harm in the end. When they quit or are fired, they may steal proprietary information and leak it.
3. Negligent employees: These employees disobey rules and protocols because they’re either incapable of understanding and following them, or they’re just plain lazy. These are the individuals who leave their login IDs and passcodes on sticky notes pasted to their computer monitor or share sensitive data in emails for whatever reason. They aren’t trying to harm your business, they just have no idea how dangerous this behavior is.
An example of a disgruntled rogue employee succeeding in their effort was when president Donald Trump’s Twitter account briefly went offline in November 2017. Twitter learned that it was a departing employee (contractor), who took advantage of his last day to do this.
How to Stop Rogue Employees From Harming Your Business
Constant monitoring, Security Awareness Training, and more severe access restrictions are all strategies you can employ to stop rogue employees.
Monitoring
As an employer, you have the legal right to track Web surfing, emailing and other activities by employees using your company computers. Monitoring will protect your business from harm, and affirm that employees are complying with your regulations and policies.
Two-thirds of companies that employ monitoring have fired employees for infractions according to research conducted by Nancy Flynn, Executive Director of the ePolicy Institute. She believes that general monitoring for electronic abuses (with employees’ knowledge) is necessary.
“It’s a fact of business life that legal risks exist, regulatory risks exist…Employees will put your business at risk accidentally or intentionally. You need to mitigate those risks.”
Training
You must teach your employees how to minimize the risk of data falling into the wrong hands:
Explain the warning signs of a cyber attack, and how to spot phishing and ransomware attempts, and other suspicious activities. Explain what they should do when these threats come across their computer screen.
Set up mock “phishing” emails to see who takes the bait. This will teach employees to better scrutinize emails.
Make sure all employees are thoroughly trained on the security for their individual computers.
Explain to employees that a data breach could mean the loss of their job.
Install and deploy technology that will detect and alert employees when they are doing something they shouldn’t on their computers.
Access Restrictions
Install and deploy Identity and Access Management (IAM) software. This automatically grants access to resources on an “as needed” basis. This will prevent rogue employees from accessing the information they shouldn’t.
These solutions will provide you with centralized visibility and control so you can actively monitor and measure the risks inherent in your IT system. IAM software manages identity authentication, access policies, user account privileges, role-based user provisioning processes, automated workflows, and rule-based group policies.
The implementation of this type of software can be complex especially when access decisions are coded into business applications. Your IT Managed Services Provider can help you with this.
Constant monitoring, Security Awareness Training, and more severe access restrictions are all strategies you can employ to stop rogue employees. Although, unless you protect the privacy of your data, these will only alleviate the problem to some degree.
by Felicien | Jan 12, 2018 | Education
We know LinkedIn is the most popular ‘social network’ for professionals in a wide variety of industries. It’s filled with fantastic features and functions that will propel your career or business in terms of expanding your professional network and enhancing your credibility in the marketplace. So what’s the deal with LinkedIn Premium? Is it really worth the big bucks?
Here’s the Full Scoop on LinkedIn Premium Plans…
LinkedIn Premium plans aren’t exactly cheap – costing around $29.99 to $47.99 per month for job seekers, $69.99 per month for business development or sales professionals, and $99.95 per month for recruiters looking to fill positions.
The base plan, Premium Career ($29.99 per month), is great for job seekers who want to connect with people within any company, industry or geography. You’re able to enhance your profile for greater visibility while sending three InMail messages per month.
The next plan, Premium Business ($47.99 per month when billed annually), gives you unlimited searches in your extended network. Plus, you get advanced search filters and 15 InMail messages each month.
Premium Sales Navigator Professional ($64.99 per month when billed annually), possibly one of the most useful plans, is phenomenal for business development or sales professionals alike. Why? LinkedIn stores mass amounts of data on people from all sorts of companies and industries.
This data is seriously game-changing when you’re trying to make that next sale or add leads to your ever-growing funnel. You not only receive lead recommendations and invaluable insight into existing accounts, but you also get 20 InMail messages each month.
Premium Sales Navigator is also available in a multi-seat version known as Sales Navigator Team ($99.99 per month when billed annually). This option gives you 30 InMail messages, 10 PointDrive presentations, 25 Out-of-Network profile unlocks, and much more.
Premium Sales Navigator Enterprise takes it to the next level with 50 InMail messages and an unlimited number of seats. All of the Premium Sales Navigator plans give you the following great features, so it’s entirely dependent on what extras you need and what you’re willing to spend:
100-mile maximum search radius from specific postal codes
1000 profiles shown per search
15 saved search alerts each week
Unlimited number of saved searches, accounts, and lead recommendations
Advanced search filters
Access to the mobile app
Last but not least, LinkedIn’s Talent Solutions, starting at $99.95 per month when billed annually for the starter tier: Recruiter Lite. Recruiter Lite gives you 30 InMail messages, advanced search, automatic candidate tracking and integrating hiring, and more.
Recruiter Lite is great for those who need to make a few hires. Recruiter, the next tier, is great for those who are always in search of people to add to their team. Pipeline Builder, the last tier, is great for creating a constant pipeline of talent for your team.
Need more information? Call {phone} or email us at {email} to find out more about Premium Career, Premium Business, Sales Navigator Professional or Recruiter Lite. Our team is always here to help.
What’s the Final Verdict?
LinkedIn Premium is absolutely worth the splurge (and of course, we would recommend choosing to be billed annually to get the discounted price of whichever plan you choose). Upgrading is well worth your time and money if you’re looking to:
See more than just the last five individuals who have viewed your profile in the last 90 days.
Access expanded search results with features like filtering results by industry or job title.
Send messages to members of the site (professionals or employers) who are not currently contacts of yours.
Receive lead recommendations and insight into existing accounts easily to keep your funnel constantly up-to-date.
Find great talent to join your company, whether you’re hiring a few people or an entire team.
Learn more about your industry and increase your chances of securing employment within that field.
As an added bonus, LinkedIn Learning and LinkedIn Salary are included with all four versions of LinkedIn Premium. LinkedIn Learning gives you the most in-demand technology, business or creative skills through industry expert-taught courses.
LinkedIn Salary, on the other hand, gives you a breakdown of salaries by job title and location. You can also view data on specific businesses, such as geographic expansion, employee turnover, and other useful information.
If you’re ready to get started with one of the plans mentioned above, get in touch with us now at {phone} or {email}. We’ll answer any questions you might have about LinkedIn Premium and what the right plan can do for you.
by Felicien | Jan 11, 2018 | Education
Accidentally creating two LinkedIn accounts is a common mistake. You may have created the accounts years apart, having forgotten that the first account existed, or maybe you were invited by different users based on different email addresses. Whatever the case, there is a solution to this issue.
Of course, you would want to save your contacts from both accounts, assuming there are not duplicate connections on both pages. It is important to choose which account you will be closing. It is recommended to keep whichever account has the most activity or recommendations, as these are both aspects of LinkedIn that are good for you and your company. After choosing which account you will be keeping, it is time to think about exporting your contacts.
Saving your LinkedIn contacts is easier the fewer contacts the account has. All contacts should have their email listed at the bottom of their account. After you locate the email, you can copy and paste it into a Word document. You can use this file to reconnect with your other LinkedIn account.
If you have exponentially more contacts, the process is a little harder and more like a glitch in the system. To export the emails of many contacts on LinkedIn
Click contacts then click connections.
Click export connections at the bottom of the page.
Export the file to a CSV file.
A yellow bar will appear at the top of your browser. You must click the yellow bar to continue exporting.
Save the file as a .csv, not a text file.
Open the file in Excel.
Delete all columns except the email column.
Save the file as a .txt file.
Use .txt file as an input file.
Finally, invite the contacts to your account.
This process is very confusing and difficult. If you do not want to follow these ten hard-to-follow steps, you can always contact the LinkedIn helpdesk which will provide you with whatever service you are requesting.
It is important to make sure you delete one of the profiles, so connections in the future will not be confused by your multiple profiles or recommend the wrong profile. You also want to ensure that others in the future will not invite you to LinkedIn via a different email address. To make sure everything goes smoothly, link your other email account to your LinkedIn account. Connecting more than one email to your account is easy, and will save you potential misunderstandings in the future.
To delete the account that you will no longer be using; you can either email the LinkedIn help desk or follow the directions below.
Navigate to account setting in the top right corner.
Select ‘personal information.’
Select the 4th option ‘close your account’ and follow the links there.
Keeping your LinkedIn account up to date is important when trying to stay in touch with other professional online. Don’t let yourself make this mistake more than once because it is difficult to fix and might be confusing to some of your connections. Make sure all contact information is correct, even if it means having multiple emails. It’s better to take the time to connect with other the right way the first time, rather than sending them new invites to your LinkedIn profiles over and over again.
by Felicien | Jan 11, 2018 | Education
It’s no secret that the healthcare system is wracked with ransomware attempts. In fact, it was one of the leading concerns for 2017. These ransomware attempts are due to the significant amount of personal information that’s in the hands of the healthcare providers. All this private data is an attractive target for hackers who want to make a quick, albeit illegal, buck.
According to McAfee research, the healthcare sector has suffered more than most when it comes to ransomware.
Part of the reason for this is the surprising lack of focus on cybersecurity amongst many hospital administrators and healthcare providers—They are more worried about HIPAA compliance regarding data protection, rather than overall IT security.
Healthcare providers focus must change. Ransomware attacks are predicted to be more numerous and disastrous than ever before. They have a hidden purpose–to severely harm your IT network, business and potentially your patients.
Hospitals, healthcare systems, and providers must take cybersecurity seriously and make it a priority.
Raj Samani, Chief Scientist at McAfee, predicts that not only will ransomware attacks continue as they have traditionally, but hackers will also introduce pseudo-ransomware attacks:
“The healthcare sector has probably suffered more than most, regarding ransomware,” said Samani. “What we see today is the broken proliferation of ransomware–which started in healthcare.”
According to Samani, pseudo-ransomware is a significant challenge. It looks like a virus, but its purpose is something entirely different. These attacks will take hold of your data and hold it for ransom. However, no longer will hackers merely lock down your computer screen or workstation, they’ll take your data. And if you refuse to pay them, they’ll expose your private information.
In 2017, multiple medical facilities in the U.S. were the target of different attacks. Some ended up paying thousands of dollars to retrieve their files. The hackers used ransomware to encrypt data, lock computers and hold the information for ransom payments. These attacks should be a primary concern for healthcare administrators and providers who store a significant amount of private information.
According to the FBI, we see an increase in these types of cyber attacks, particularly against organizations because the payoffs are high.
The FBI doesn’t support paying a ransom in response to a ransomware attack. “Paying a ransom doesn’t guarantee an organization that it will get its data back, said FBI Cyber Division Assistant Director James Trainor—We’ve seen cases where organizations never got a decryption key after having paid the ransom. Paying a ransom not only emboldens current cybercriminals to target more organizations, but it also offers an incentive for other criminals to get involved in this type of illegal activity. And finally, by paying a ransom, an organization might inadvertently be funding other illicit activities associated with criminals.”
Ransomware attacks are not only increasing, but they’re also becoming more sophisticated.
One reason for the increase in ransomware is because, ironically, we’re better at defending against it. Increasing IT security, decreases the likelihood that you’ll be the target of an attack, right? Wrong – hackers only supplement their efforts with new forms of ransomware. When they succeed, they’ll steal your information and make you pay obscene amounts of money for it.
Hackers have proven that no information off limits to them. They will take whatever information will get a reaction from the owner of the data, no matter how personal or sensitive. For this reason, it’s essential to have a good cybersecurity defense in place to protect your organization and confidential data.
The FBI advises that you take a multi-pronged approach to battling hackers. This includes implementing software restriction policies, backing up data regularly, patching operating systems and restricting access to some necessary files or directories.
The best way to prevent ransomware attacks is to use these best-of-breed solutions to keep the attackers out of your network. An architectural approach to IT security is the most effective way to prevent a ransomware attack from succeeding in the first place. With these protections in place, the criminal will move on to another, more vulnerable IT system to attack.
To safeguard your protected health information from ransomware and other malicious threats, your Managed Service Provider (MSP) can leverage a new best-of-breed security architecture with a layered protection that extends from the DNS layer to email, network, and endpoints.
There are numerous phases to a ransomware attack. The criminal must first design an Internet infrastructure to support the execution of command-and-control (C2) phases. Your MSP can implement an umbrella-like protection that blocks this before establishing a connection—One that can prevent the C2 callbacks and stop your system from releasing data.
To prevent you or your staff from unknowingly being targets of ransomware, you should do the following:
Ask your Managed Service Provider (MSP) to conduct security-awareness training sessions on a regular basis. They should provide information on the latest threats and tactics, and train your staff on incident-reporting procedures, so they feel comfortable relaying that they’ve been the target of an attack.
Reinforce your security policies, such as not revealing or sharing user credentials (usernames/passwords). Plus, your staff should only use company-sanctioned software and applications.
Sign up for Software-as-a-Service (SaaS) applications to share files, exchange documents, and collaborate on projects, rather than relying on an email that might contain malicious attachments.
Make sure your staff never enables macros in Microsoft documents. Macro-based malware is on the rise and is very difficult to detect.
Use non-native document rendering for pdf files and files in the cloud. Applications for desktops aren’t patched regularly, where cloud applications are.
Don’t forget about physical security. Shred paper documents, keep track of who is in your office, and prevent practices like shoulder surfing, piggybacking, and dumpster diving.
Have your MSP conduct ongoing risk assessments to find any vulnerabilities in your IT system:
Conduct periodic port and vulnerability scans.
Centralize your data logging and event-management platforms (SIEM).
Practice timely patch management.
Stop using unnecessary services and follow system-hardening
Practice strong password requirements, and use two-factor authentication whenever possible.
“There’s no method or tool that will completely protect you or your organization from a ransomware attack,” said FBI Cyber Division Assistant Director James Trainor. “But contingency and remediation planning is crucial to business recovery and continuity — and these plans should regularly be tested.”
by Felicien | Jan 10, 2018 | Education
LinkedIn’s InMail can be a powerful communication tool once you’ve figured out to craft messages people will actually want to respond to.
Anyone who has had a completed LinkedIn profile for any length of time will have at least a passing familiarity with InMail, the social platform’s messaging feature. InMail has the potential to be a very powerful networking and marketing tool, but like any other messaging system, how useful it is to your business will depend on how well you’re able to leverage it.
The volume of InMail messages being sent out has been on the rise in recent years as more and more business professionals recognize the value this tool offers. That being said, with more messages making the rounds, it’s getting trickier to get your messages to stand out and get the response you need from them.
After taking a look at what works and what doesn’t, we’ve come up with 5 tips to help your InMail messages grab attention and get you results.
Make It Personal, And Make A Connection
Chances are you’re not just blindly sending InMail messages out to random recipients. You’ve got a target demographic in mind or a specific mailing list comprised of businesses or individuals you want to interact with, so put forth the effort to make those recipients feel like they’re important to you. A well-crafted email template can go a long way, but it’s personalization that will get you real results. Personalized InMail messages can boost response rates by as much as 15%, and for very minimal effort.
Create a loose email framework that touches on all of your talking points and gets your message across, but before you hit ‘send,’ tweak each InMail message to target that specific recipient. Make a personal connection by referencing commonalities between your business and theirs, a shared educational background, or even a preferred philanthropic activity. This level of personalization can increase response rates even further by sparking an interest not just in your message, but in your business and you as a person.
Using language like “connect,” “chat,” “talk,” and “call” also boosts response rates by cutting down on some of the informality of these types of messages. Open-ended invitations to start a conversation without any pressure are typically much more well-received than aggressive messages that suggest specific times and dates for a follow up of some sort.
Keep Your Messages Short And Sweet
The best way to make a fellow business professional like you right off the bat is to show respect for their time. Long-winded emails packed full of details and specifics aren’t easy reads. At best, the recipient will skim through your message and likely miss the point you were hoping to make. At worst, they’ll see a wall of text and simply hit ‘delete.’ Keep subject lines short, and make sure the body of your InMail messages are between 200 and 500 characters.
Timing Is Not, In Fact, Everything
A lot of professionals put considerable thought into when “peak times” for sending out correspondence happen to be. The idea is that they want to avoid their message getting lost in Monday’s catching-up-from-the-weekend rush, or being ignored because it’s Friday and everyone has already started to mentally check-out. The fact of the matter is, it doesn’t matter when your InMail message hits their inbox. Most people answer emails and messages when they have the time to do so. They’ll get to it when they get to it, regardless of when you sent it.
Show Them You Did Your Homework
If nothing else, your InMail messages should refer to details found in the recipient’s LinkedIn profile. Showing them you took the time to review their profile is a great way to demonstrate that you’re genuinely interested in them, and in their business. Since their profile is right there for you to read, it’s only common courtesy that you do so. Having that information also makes it easier to personalize your messages by engaging with them regarding their interests and values.
Focus On Contacting People You Already Know Want To Hear From You
A quick scan of a person’s LinkedIn profile will tell you what type of business they run, the field they operate in, the path their business has taken to get to where it is today, and the goals and ambitions they have for their business’ future. That information can help you gauge whether or not they would be interested in what your business has to offer, either from a services or networking standpoint.
It should come as no surprise that by targeting individuals you know would want to connect with you can increase your response rates dramatically. You don’t appreciate it when someone wastes your time, so make an effort not to waste someone else’s.
