The Dirty Little Secret About Security In The
Emerging Remote Worker Society

For better or for worse, “telecommuting,” “working from home,” “working remotely,” or whatever else it’s called has grown exponentially in the 21st century and become a common practice for businesses big and small. A recent study by WorkSimple showed that “61% of Senior Leaders believe their companies will let more people telecommute over the next three years.” Given the rapid growth in laptops and smartphones, this is no surprise. However, the reality that most internal security technologies are network-based has created a significant gap in that they do not typically extend to off-network activity and certainly not to smartphones.

Accordingly, we now see that
• the mobile worker, through the emergence of  laptops, tablets, and smartphones, are now exploiting the limitations of said securities
• the security must now be placed on the endpoint to ensure complete protection and visibility

Why such remote worker growth?

Technology, as Gordon E. Moore predicted, has evolved exponentially since the advent of the microprocessor, making high-speed mobile computing available for anyone to consume. Consumer telecommunication services provide access to high-speed LAN and WiFi internet that is nearly as stable and as fast as a corporate offering (since far fewer individuals are straining the network). As of June 2010, 77% of the U.S. population has access to the internet; while 28% or 85.29MM people in the U.S.  have access to a broadband internet service (according to the ITU).
It’s not any news that companies are operating globally. To keep up, the global economy requires a mobile workforce equipped with laptops and mobile phones to maintain real-time productivity and reactivity to business needs. It’s not uncommon to have workers within an organization out of the office for 75% of the fiscal year, making them as remote of a worker as an employee telecommuting from their home. Both scenarios offer similar challenges for human resource and IT departments that continue to face structured corporate policies updated quarterly, or the complete opposite in neglect and uncertainty for policy making from upper management.

If they can do the same work at home or on the road, why not?

Technology is a pricey investment, especially at high volumes. It isn’t just something that is bought and not maintained. WorkSimple estimated 26.2MM employees worked remotely in some way in 2010 – that’s a lot of trust being placed in millions of dollars worth of labor and capital.  While working, they may have been using secure corporate networks to complete tasks such as updating financial spreadsheets for others in the company to then access and update. What happened, though, when they left the network environment? What programs did they use?  What websites did they visit? Was confidential information leaked outside of the company?
These are the common questions and concerns shared by managers and information technology departments responsible for ensuring that their workers and technology are being productive. Relying on monitoring solutions tethered to a corporate network has drastically limited the visibility into actual uses of company resources, and opened organizations up to new security threats that they haven’t faced before.

So what’s the solution?

An EndPoint Security Solution

Endpoint security has become much more necessary as network based solutions do not adequately account for off-network staff. What information security professionals need is a next generation endpoint solution that focuses on the insider that works everywhere and sees everything. No excuses or exceptions for telecommuters, travelers, and other remote employees. No security gaps missed by lack of visibility across all endpoints, PCs and smartphones, regardless of location.

Simple, Complete SaaS Solution

InterGuard

Deployed at the endpoint, InterGuard defends your business from all insider threats through a cloud-based delivery model. From one desktop agent and one interface, clients can access 5 technologies including Data Loss Protection, Web Filtering, Employee Monitoring, Laptop Recovery, and Smartphone Monitoring. Our solution is offered as both a complete suite or as five individual modules and is offered through the cloud so there is no hardware to buy, install or manage. Installs are fast and easy with no ongoing management required.

1. Web Filtering

• Monitors and filters Internet use on and off the network (even on laptops).
• Blocks or limits applications like peer-to-peer and instant messaging.
• All search terms captured
• Screenshots taken whenever an alert word is typed or read on a webpage.

2. Data Loss Prevention

• Protect and enforce policies governing each employee’s computer use, including those that never connect to a network, including laptops.
• Detect and block non-public personal information (NPPI) from leaving your network or organization , either via email (both Outlook and webmail) or USB
• Scan all PCs (including if off-network) for sensitive/confidential data
• Stop the use of removable media.
• Easy intuitive policy creation.

3. Employee Monitoring

• Records all PC activity including employee communications (email, webmail, and instant messaging) programs used, websites visited, search terms used and keystrokes.
• Screenshots taken whenever an alert word is typed or read on a webpage.
• Blocks or limits applications like peer to peer, webmail and instant messaging.
• Formats all data into easy-to-read reports, making it easy to find and evaluate critical security lapses.
• Ability to search all stored data based on alert words as well as sender or recipient.
• Full individualized reporting on an employee’s computer activity.
• Works invisibly and undetectable at each desktop, without impacting central network computer resources.
• Ideal complement to DLP by recording all PC activity. Since DLP is rule-based, you don’t know what has been missed. Allows for DLP fine-tuning and forensics in case of data-breach.
• Ideal complement to Web Filtering by recording all PC activity instead of just websites since  time wasting activities on a PC extend beyond simple websurfing.

4. Stolen/Lost Laptop Protection

• Geo-locate all laptop locations
• Remotely retrieve/delete important files invisibly, using any Internet connection.
• Monitor everything the thief does including all of the files they attempt to access, etc.
• Prevent the thief from being able to access to any desired programs (Excel, Word, etc.)
• Remotely delete files or an entire hard drive.

5. Smartphone Monitoring

• Monitor and record smartphone messages, including SMS and email
• Get notified via email when select keywords are found in messages
• Select important keywords to have them highlighted in user-interface for easy access
• Access the account from any web browser along with all other InterGuard services

Looking For Some Additional Information? Contact Us Today

info@stonehilltech.com
www.stonehilltech.com

 “Green” back offices and data centers are becoming quite a trend these days — not only because of their energy efficiencies, but also because of the costs they save. With the economic downturn, making IT operations more efficient not only makes practical sense, but is becoming necessary. As your business grows your IT infrastructure will become more complex, therefore the time is NOW to implement strategies that will save time, energy, money, and increase your company’s overall productivity.

StoneHill Tech’s Green IT Strategies:

Go Virtual

• Virtualization dramatically improves the efficiency and availability of  applications in your organization, reduces energy cost and improves operations by managing information traffic and workflow.
• By condensing all files and applications to one server, your business will best utilize your hardware and software resources.

Improve airflow: Improving airflow is easy and inexpensive. To immediately improve efficiency, ensure that:

• Cables, etc., are positioned so they do not restrict airflowMissing ceiling tiles are replaced so no cold air is misdirected.
• Hot air does not ecirculate, by flowing over the tops of racks or around the rows.
• Migrating racks to hot aisles/cold aisles is a continual process.
• CRAC units are positioned for maximum efficiency.
• Servers are designed with front-to-rear airflow.
• The return (hot) air plenum accommodates required airflow

Dispose of  eWaste

It is probably no surprise that in our current age of technology and computer dependency eWaste (electronics waste) is the fastest growing form of toxic waste in the world.  However, since society has begun to realize this there have been companies sprouting up all over that will actually come to your business and collect all your eWaste for free. We use an awesome local company; Go Green eWaste Recyclers.

About three weeks ago I sat down in front of my laptop to do my homework and a screen that looks like the one below popped up telling me I had serious threats/viruses on my computer.  Looks legitimate right?

WRONG!!!! This anti-virus “software” was the virus. However, I didn’t think anything of it until I was suddenly locked out of the sites I frequent, such as my school, my Gmail, my bank, etc. I may not be Miss Techie, but I do know enough to recognize that this wasn’t normal. So, in casual conversation with Zach, who is a Mr. Techie,  regarding the  strange behavior of my computer, before I was even half way done he said, “You have a virus”. Those dreaded words rang in my ears as I began to see the dollars falling from my wallet. Luckily, I work for the best IT company on earth and Zach was able to remove the virus within one day and install legitimate firewalls and virus protections.

Ironically, that same evening I was watching the nightly news where they were featuring a story on “New Organized Crime Rings”…HACKERS. Apparently, technology is not only transforming the way we do business, it has transformed theft as well. The newest trend amongst thieves is to send out   these nasty little parasites, disguised as helpful software, that infect your computer allowing the hacker to track your key strokes, thus gaining access to all of your personal passwords and information. A local OC business man was recently taken for $1,000,000 due to this type of scam. OUCH!

Two days ago, I was out sick and received an email from Zach saying three clients in the past week had been hit with the same thing and decided that YOU need to be aware of what is out there!!!! He sent me this really informative article:   Take a look, it could save you a lot of time, money & heart ache!

Beware fake anti-virus programs

As the nation fights to pull out of this economic crisis businesses must be prepared to take an objective look at their bottom line. By eliminating unnecessary overhead, companies can concentrate on building and expanding their foundation, placing the emphasis on their core product or service.

With the advancement of technology there are many cost effective strategies entrepreneurs and small business owners can implement to leverage their enterprise and increase efficiency.

Most small business owners wish they had more time to focus on growing their business, but are too often bogged down with tedious tasks that are so time consuming they prevent and/or slow down their growth. The solution is outsourcing; whatever your companies requirements, you can literally outsource almost anything.

Human Resources (HR) - Depending on the size of your business and how much control you want to maintain over HR functions, you can either outsource all your HR needs or contract for individual services.

The basic services offered by HR outsourcing firms:

• Overseeing organizational structure and staffing requirements
• Recruiting, training, and employee development
• Personnel File Maintenance
• Tracking Department objectives, goals, and strategies
• Benefits administration
• Employee orientation programs
• Ensure compliance with all State & Federal labor laws & informational posting requirements

Payroll- Many employers outsource some of their payroll and related tax duties to third-party payroll service providers. They can help ensure filing deadlines and deposit requirements are met. If your business does not keep accurate records you could be fined. California passed a law that imposes a $750 payroll fine on small businesses that aren’t able to quickly produce accurate payroll records upon an employee’s request; it is rumored that other states will follow with similar legislation. Outsourcing payroll will greatly streamline business operations.

The basic services offered by Payroll outsourcing firms:

• Processing payroll and record maintenance on behalf of the employer
• Reporting, collecting, and depositing employment taxes with State and Federal agencies.
• Timely filing of Quarterly State and Federal Employer Tax Returns
• Provide Calendar Year-end services such as issuing W2s, reconciling 941s & DE7

Information Technology (IT) Services – Remaining adaptable to the market is crucial to any small businesses success. In the majority of industry, 100% of business functions are run on computers. Your business relies strongly on your network which requires a strong IT infrastructure.  StoneHill, an Industry leader, recognizes the importance a business’s health and offers a free Technology Review. By outsourcing these services you can convert fixed IT costs to variable, significantly decreasing overhead and creating an increase in service availability and overall efficiency.

The basic services offered by StoneHill and other IT firms:

• Maintenance Plan
• Managed Services
• 24/7 Emergency Support
• Online Disaster Recovery
• SPAM & Virus Filtering
• Special Projects
• Communication Network Set-up & Maintenance

Every successful company has a budget. What’s in your budget? More importantly are you budgeting to win? Winning means maintaining existing, and forging new, sustainable business relationships. And if you don’t yet have a budget, get one for free, courtesy of Intuit. If you are not budgeting for IT you are not budgeting to win. In the greatest economic downturn since the Great Depression, most businesses today are drastically cutting costs, according to a recent New York Times article. But at what cost have these cuts come? How is your business performing? According to the NY Times article, a beneficial cost cut is moving away from in-house operations and toward contracted relationships.    

Never before have companies depended so much on technology for their day-to-day operations. When this technology fails them what do they do? Who do they call? StoneHill Technical Solutions partners with small businesses to insure their IT environment is maintained at the most optimal performance level. And it is StoneHill’s winning combination of performance and customer service that makes them a coveted team member and outsourced computer services business partner.

By budgeting for IT you are investing in a critical component of your company’s operations. What does your workplace look and feel like in the event of a computer crash or a server crash? What happens when e-mail is down? StoneHill Technical Solutions is your winning relationship. You can’t afford a monthly expense for computer service? Can you afford to go without use of your computer or deal with a failed network for a day? What you probably cannot afford is long-term contracts and non-performing partners. StoneHill Technical Solutions is the partnership that will keep your business infrastructure running smoothly and efficiently, 24 hours a day, 7 days a week. Take advantage of StoneHill’s free network review today and let them share their findings with you and help you to win!

Author: David Meacham

Quite often Mac users operate under the assumption that they are immune to viruses and malware attacks.  The truth is, Mac users make up a smaller percentage of overall users, constituting a smaller target, and thus yielding a smaller reward to the attacker.  That is not the same as being bullet proof.  Additionally, Microsoft has continually drawn the fire of the hacking community much more often than other companies offering operating systems and applications.  This has fostered a false sense of security in the Mac user community.  Malware can be written to infect anything, including phones and other handheld devices. 

Our position is that users should be vigilant, regardless of their choice of computing platform.  Patch your systems often and beware of the sites you visit and the offers/warnings you click on.  Below is an example of a website designed to lure in visitors.  Once there, they are prompted to take an extra step in order to play a video.  This is a common action for many sites, but this particular one uses the user action to launch illicit code.  It isn’t only the promise of nudity that is used as a lure for users, so don’t get caught up in being judgmental of the intent of the user visiting this site. 

“Hackers have created webpages claiming to contain the notorious Erin Andrews peephole video in their attempt to infect Mac and Windows computers. It’s no surprise that when news broke that a voyeur had secretly filmed her through the peephole of her hotel room door that the internet would be abuzz…

… If you visit from an Apple Mac we identify the malware as the OSX/Jahlav-C Trojan horse. Windows users are also at risk (I almost didn’t need to say that, did I?). When we tested it on a Windows computer we saw it serving up Mal/EncPk-IF on occasions, and at other times rogue anti-virus product Mal/FakeAV-AY.”

Posted on July 19th, 2009 by Graham Cluley, Sophos
Erin Andrews peephole video spreads malware

Author: Jim Cowden (Control Point)

Time is money. In today’s economy there doesn’t seem to be enough of either. And quite frankly, none of these two resources can afford to be misused. So how does a small business or entrepreneur save both time and money? One way to make better use of these valuable resources is outsourced computer support. For those of you who are unfamiliar with this incredible service, outsourced computer support is simply the hiring of a professional outside IT firm to analyze and fix your computers, servers, network, and phones when problems arise on an as-needed or ongoing maintenance basis…. read more

A study performed this month by The Yankee Group found that nearly half of small businesses have delayed or canceled IT projects because of economic uncertainty, according to a new study. But at the same time, 23 percent of small businesses received a D or F grade when it comes to their own IT effectiveness.

Small businesses are having a tough time trying to build, manage and maintain their own IT infrastructures, especially since 35 percent of respondents admitted to be short-staffed in IT, said Carl Meadows, senior manager for product management at The Planet.

The study also found that only 30 percent of SMBs have a fully implemented security program. Only 26 percent have a fully implemented disaster recovery/continuity plan. Only 42 percent said they’re fully compliant with governmental regulations and policies, such as HIPAA or PCI.

The results are especially disturbing, according to Meadows, since more than two-thirds of the small businesses responding to the survey indicated that IT and Web commerce are the foundations that enable their business success.

These are ongoing issues that all small business face.  It is impossible for them to have all the expertise on hand which is needed to handle support, security, disaster recovery and the many other IT related issues that arise. That’s why outsourcing makes sense most small businesses.  Outsourced network support products like Managed Services, Onsite Maintenance & Technology Reviews are just a few of the ways outsourcing can resolve some of these current issues.

To read full Channel Web article click here

Many computer users often dismiss security best practices because they find them inconvenient, they have never been affected in the past, or because they think the rules don’t apply to them. Many cling to the misguided belief that because they don’t bank or shop online, bad guys won’t target them. This post examines some of the more common ways that cyber criminals can use your PC.

 Web/Email Serving – Criminals commonly use hacked PCs as a host for a variety of schemes, including:

- Spam Web sites

- Phishing Web sites

- Malware infected sites

- “Warez/Appz” servers which host pirated software and movies.

- Child pornography servers

Zombie Attacks – Infected PCs also frequently are turned into zombies designed to carry out many tasks for cyber crooks, such as:

- Relaying junk e-mail

- Participating in DOS (denial-of-service attacks) designed to overwhelm web sites by pelting them with massive amounts of bad traffic.

- Engaging in “click fraud,” which uses fake mouse clicks on networks of phony Web sites that siphon money from advertisers.

E-Mail Attacks

An infected PC potentially has great value to spammers and attackers beyond simply acting as a relay for junk e-mail. For example, compromised systems are often harvested for e-mail addresses that will be sold and used in future phishing and spam attacks.

Account Credentials

Any stored credentials particularly user names and passwords for online services are fair game on hacked PCs. Credentials for voice-over-IP or Internet-based telephone services like Skype also are a hot item on underground cyber criminal forums, because they can be used to mask the caller’s location and aid in a variety of scams.

Credentials that victims use to administer Web sites even social networking site web pages can be of huge value to cyber crooks. Stolen file transfer protocol (FTP) credentials, for example, give attackers control over the victim’s site, which is often then use to host malicious programs or other illicit content that helps further a variety of online criminal schemes.

Finally, credentials that allow access to the network of the victim’s employer or company can be of great interest to digital thieves. Many companies allow important private information to be accessed with simple credentials and criminals can grab a high price tag for this leaked information.

Financial Credentials

When casual Internet users think about the value of their PC to cyber crooks, they typically think stolen credit card numbers and online banking passwords. But as we have seen, those credentials are but one potential area of interest for attackers.

This list simply highlights the major reasons that hackers look to gain control of your computer but this list is ever evolving.  Staying on top of security with the latest Windows or MAC operating system updates, Antivirus updates, spyware/malware updates & frequent scans are the only way you can minimize your exposure. 

Ask StoneHill how our Managed Service solutions can automate these tasks for you and keep your company protected.

It happens weekly that I visit a company for the first time to review their network or help with an emergency and find that they have NO documentation.  This problem is often just the laziness of a previous computer support provider but I have also experienced clients who call to retrieve this information and begin getting interrogated about why they want the information.  It’s your network shouldn’t you hold the keys?

You may love your current computer support professional and think they will be with you for years but what if something happens to them and you never hear from them again?  What if you have a sudden falling out?  What if there is an emergency and you can’t reach them? You should not have to pay for another computer support company to have to reconfigure everything or spend hours guessing network information. 

Make sure that you are being provided up-to-date information regularly.  At minimum this documentation should include the user name and password for server(s), domain, firewall, hosting accounts, DNS host & antivirus system.  It is also going to save you time and money if the documentation includes critical vendor information, printer IP’s and server rolls. 

Keeping this kind of documentation is easy, takes very little time and will be worth its weight in gold if you are ever in a bind and need to bring another company in.  Don’t let your current computer support company hold you ransom.