We have been having a lot of conversations with Business Owners in the Denver area regarding Cyber Security Insurance recently.  One thing that we have really been struck by is this perception that if you have Cyber Security Insurance that it is a Get Out of Jail Free card for your business.  This it certainly is not.  You need to be taking reasonable and appropriate measures to protect your business.

Should I Have A Cyber Security Insurance Policy for My Business?

Yes.  This is absolutely a requirement in this day and age.  However, any Business Owner that has filled out a Cyber Security Insurance policy will tell you the application is most certainly much more intensive than a standard insurance policy.  If you go through that policy and just check the boxes you could be putting your business at risk.

As a Business Owner you should be putting these things into place BEFORE purchasing Cyber Security Insurance for your business.

1.  Identify a Head of Security as it relates to I.T for your business.  This person should have a direct line of communication to your executive team.

2.  Training.  You need to put a plan into place to provide your employees with ongoing Cyber Security Training.  The biggest weakness in any organization is the people and they need your help to make good decisions in relations to Internet and Email use.

3.  Network Auditing.  There needs to be a formal plan in place to regularly test and audit the security of your Network.

4.  System Policies.  There needs to be policies in place to ensure that security patches are being applied to every single device across your Network.

5.  Disaster Recovery Plan.  There needs to be a formalized Disaster Recovery Plan in place for the company.

6.  Written Security Policies.  There needs to be a policy in place regarding general security policies such as password management.

7. Mobile Device Management.  There needs to be a formalized policy in relation to Mobile Devices.

Why Is This Important?

If you purchase a Cyber Security Insurance Policy but are not taking reasonable and and appropriate measure that may be deemed as the Insurance company and negligent or worse case scenario fraudulent.

If you have a Cyber Security Insurance Policy in the Denver area but are not sure if you are in compliance or are in the process of looking into obtaining coverage give us a call at Code Blue Computing we can help you make sure you get all the pieces in place to best protect your business.

Please fill out the form below and someone will get back to your shortly.

* Your Name

First

Last

* Your Email

* Your Phone Number

* Comments

* I'm Not a Robot

Cyber Attacks are on the rise in Denver.  Hackers can use very sophisticated methods to try and gain access to your network.  Conversely, if they can gain access easily even better.

This is a very simple way for a hacker to gain access to your network and remarkably effective.  How exactly does a Cyber Attack with Thumb Drives work?

• The Hacker will scatter USB Thumb Drives throughout the parking lot of a business or a business park
• Wait for an unsuspecting employee to pick it up and bring it in to the building
• Once the employee inserts the device into their computer behind the scenes a program is launched to infiltrate the computer network

As business owners we need to be proactive in protecting our businesses from Cyber Attacks.  The fact of the matter not all of our employees or even as many as we would like to believe are tech savvy.  Finding it out after an attack is a very expensive lesson to learn.

What Should You Do as a Business Owner?

Provide ongoing Cyber Security training for your staff.

Make sure that everyone know never to put a Thumb Drive of unknown origin into their computer

Get a Cyber Security Audit so that you can plug these types of holes before an attack not after.

Call 720-746-9763 to schedule a 30 minute phone call regarding your business today!

We thought we had seen everything and then a new twist on ransomware emerged in our office last week.  Cyber Criminals are emailing people with a message similar to this one:

(password) is your pass. Lets get directly to point. You do not know me and you’re most likely wondering why you’re getting this e mail? Absolutely no one has compensated me to investigate you.

Let me tell you, I setup a malware on the xxx streaming (porn material) site and guess what, you visited this site to have fun (you know what I mean). While you were viewing videos, your web browser started out operating as a Remote control Desktop with a key logger which gave me accessibility to your display screen and webcam. Immediately after that, my software obtained all your contacts from your Messenger, social networks, as well as email . Next I created a video. First part displays the video you were watching (you have a nice taste ; )), and next part displays the recording of your web camera, and its you.

You have got a pair of alternatives. Let us understand each one of these solutions in particulars:

Very first solution is to disregard this e-mail. In this situation, I most certainly will send your actual recorded material to every bit of your personal contacts and just imagine about the shame you will see. Furthermore in case you are in a romance, just how it would affect?

Next option will be to give me $7000. I will describe it as a donation. Subsequently, I most certainly will straight away delete your videotape. You can continue on everyday life like this never took place and you would never hear back again from me.

You will make the payment via Bitcoin (if you do not know this, search for “how to buy bitcoin” in Google).

Should you are thinking about going to the cop, good, this email cannot be traced back to me. I have covered my steps. I am not trying to ask you for a lot, I simply want to be paid for. You have one day to make the payment. I’ve a specific pixel in this e mail, and at this moment I know that you have read through this mail. If I do not get the BitCoins, I will, no doubt send out your video to all of your contacts including close relatives, coworkers, and so forth. However, if I receive the payment, I’ll erase the video immediately. This is the non:negotiable offer so please do not waste my personal time and yours by responding to this e mail. If you really want proof, reply  Yeah! and I will send your video recording to your 11 friends.

I thought we had seen everything we just had not.  So what is happening here?  There have been some major data breaches throughout the country over the last few years.  Passwords and emails have been compromised and are available for download to Cyber Criminals.  They are relying on just enough information to scare users into paying the ransom.

This is a new level of phishing scam we have not seen before.  At its core, it is phishing though. Change your passwords, absolutely.  Do not pay the ransom is a scam.  If you have any questions or want to be sure that your computers have not been compromised you can always give us a call.

Most small business owners have little to no security measures in place to protect their business against a Cyber Attack.  As someone who talks with business owners every single day I will tell you most trend towards the none versus the little.

cy-ber-at-tack

an attack by hackers to a computer network or system

As a business owner the time where you could ignore Computer and Network Security when it comes to your business are over.  In 2017, Cyber Attacks against U.S. Businesses doubled.  Yes. Doubled. That only accounts for reported attacks most Cyber Attack incidents are not even reported.  The most important thing to know here is 93% of all attacks could be prevented with putting simple security measures in place and proper training of employees.

How To Protect Your Business from a Cyber Attack

Security Patches.  Patch Management is imperative for protecting your business.  Making sure every single device in your organization has an updated operating system and security patches.  Believe it or not, there are businesses with computers that have Windows XP computers in their business there are NO security patches for unsupported operating systems.  Others, simply do not have their system patches up to date.  If you have one device that is not up to date with security patches your business is at rick for a Cyber Attack.

Firewall and Passwords.  A firewall is not optional it is required. Period. With so many remote workers needing to access company files your must have a firewall to keep your network safe from hackers while allowing your remote workers in.  A firewall will limit backdoor access to your network to those looking to cause harm to your business.  Setup your organization to require strong passwords and more importantly require frequent changing of those passwords.  Also, making sure that passwords are not being reused across multiple applications.

Employee Training.  We simply cannot assume that all users within the company are savvy enough to know what to and what not to do.  This is not industry specific don’t assume because your employees are highly educated that this means they are tech savvy.  Have quarterly training with all users about not opening emails attachments and links that are suspicious, email phishing, and good cyber attack practices.  For example, in the past week we have received no less than 10 faux emails from Microsoft that look pretty legit. When we hover over the link or look at the email address it is blatantly obvious to be malicious.

Encryption.  You must encrypt data.  Period.  If your business is the victim or an attack or a mobile worker loses a laptop you can rest easy that the data is not accessible to the hackers.  There are tons of system wide, or file specific tools to encrypt your data.  If you have a business and are not encrypting data you are at risk.

Backups.  This will be the one thing that will be most indicative of whether your business will be able to recover from a Cyber Attack or close your doors.  You must have daily backups for your business. Ideally, those backups will be housed offsite.  It should be noted that an External Hard Drive that is connected to your computer or server 24/7 does not count.  Why?  Because if your network is breached a virus will deploy immediately and will go straight to that external as well.  Worst case scenario if you have a breach but have current backups your I.T. Team will be able to get you back in business quickly.

Business owners are a risk whether your organization is large or small.  The good news is that the vast majority of attacks that are happening can be easily prevented.  Hackers know that most companies have a pretty large hole in Computer and Network Security and are spending their time and energy on those vulnerabilities that already exist as opposed to brute force attacks on your network.

In this day and age managing your own computer network and security is neither a good idea or nor easily done.  Most small businesses do not have an in house I.T. Department and if they do they are many times backlogged in projects throughout the organization.  Generally, it is a good idea to utilize the service of an outsourced I.T. organization to look at your risk for a Cyber Attack.

Why?  It is good to have someone with an unbiased view audit your current network, systems, and Cyber Security policies take a look at your potential vulnerabilities and help you craft a plan.  Those organizations that actually have systems, training, and an actual plan in place are the ones that will recover from a Cyber attack.