About Us

A firewall sits between a local computer or network and the Internet. Its access lists filter inbound and outbound traffic according to rules an admin or user sets. Firewalls are not 100% effective however. They must be checked often and cybersecurity providers may do penetration testing to determine their effectiveness.

Business email compromise (BEC) that results in wire transfer fraud and ransomware are the two most prevalent (and critical) threats facing SMBs and organizations.

With BEC, attackers gain access to email servers at a business and monitor all traffic to gather personal information. After spending some time (perhaps months) to learn the ins and outs of the business’ finances, they compromise a payment using the personal information they found. This relies on deception regarding account numbers and transfers.

Ransomware is malware (malicious software) that involves compromise of a network, encryption of the organization’s operating systems and data, and subsequent demand of a ransom to decrypt the systems and data. The threat actors usually ask victims for payment (ranging from the hundreds to millions of dollars) using cryptocurrencies, like Bitcoin. Convincing phishing emails are one of the means of attack (vectors) that ransomware begins with. Ransomware criminals now rely on impressive services such as 24/7 tech support and trained negotiators. Unprotected backups are frequently targeted and recovery then becomes more difficult.

With over 90% of cyberattacks being due to user error, education for employees and partners can help to prevent attacks. Training should be regular and will create greater cyber awareness at your organization. It will also help minimize internal threats.

One such area for education is for dealing with phishing emails. With 85% of all email being spam (i.e. marketing or malware), user training to recognize and avoid clicking is of utmost importance. Part of “cyber hygiene” involves safe practices while web browsing, emailing, texting, or other online communication.

Cybersecurity providers should build your defenses using defense-in-depth–the layering of security technology and processes that overlap and work in concert. If one layer fails, another takes its place, making an attack more challenging. One layer is systems that are patched and hardened and therefore less likely a door into your network. Employee education also serves as a layer.