Mon – Fri (7am – 6pm)
5663 Balboa Ave #403
San Diego, CA 92111

(619) 573-9363

Cybersecurity And Secure Nerwork Concept. Data Protection, Gdrp. Glowing Futuristic Backround With Lock On Digital Integrated Circuit.

Security

What are examples of some of the layers to help protect your business?

  • Updating your server and desktop software on a regular basis. This includes software on your servers, your computers, and your mobile devices. Not only will this assist your business on the efficiency side, but also importantly these updates will often include new security updates.
  • Updating and patching networking equipment on a regular basis. An example here would be to update the firmware on your firewall at your business. Remember the firewall is the front door to your business.
  • Having a strong ransomware prevention tool in place. We all see it in the news, it’s important. Most of the leading-edge new solutions here include advanced threat intelligence, we typically lead here with the best in breed.
  • Using MFA, or multi-factor authentication, wherever possible with software in your business. The analogy that we use with clients here is the example of when you log in to your banking website, and they send you a unique identification code via another method, example text, to ensure that you are you. The goal is to make sure that you are indeed the person on the other end, and not the bad guys. Implementing MFA used to be a “nice to have” but is now becoming essential on the security front. Note that now MFA is not only available with Microsoft 365 but many other software companies are now deploying this functionality as well.
  • Backups. What type of backups do you have in place for your data both on-premise and in the cloud? Are they file-based or image-based? Also, what is your TTR, or time to restore should you need this information, and when was your last test restore?
  • Business processes are key. An example here is if there is an email sent to someone on your team that tells them to wire money, you have a process in place that states that the recipient of this email needs to call the sender of the email, for identity confirmation purposes, preventing business risk.
  • Employee education. You can have all of the security tools and processes in the world in place, but if your employee clicks on the wrong link on the wrong spoofed email. This will not be good. We teach our clients that ongoing employee education of what threats are out there and reporting things that look suspicious are important