{"id":33209,"date":"2019-02-21T09:57:58","date_gmt":"2019-02-21T17:57:58","guid":{"rendered":"https:\/\/www.enxmag.com\/twii\/?p=33209"},"modified":"2019-02-21T09:57:58","modified_gmt":"2019-02-21T17:57:58","slug":"the-moving-target-that-is-it-security-an-evolving-menace","status":"publish","type":"post","link":"https:\/\/www.enxmag.com\/twii\/the-week-in-imaging-twii\/editors-blog\/2019\/02\/the-moving-target-that-is-it-security-an-evolving-menace\/","title":{"rendered":"The Moving Target that is IT Security: An Evolving Menace"},"content":{"rendered":"

Once upon a time, the pace of technology was measured in generations. Then it became decades. After the onset of the internet revolution and the iPhone, the measuring stick became five years, then three years. Now, ironically, looking beyond three years might cause one to be accused of being short-sighted.<\/p>\n

The same can be said for business plans. The five- and 10-year plans, while (somewhat) still a part of the enterprise-level blueprint, are quickly evaporating. Look beyond three years, and you\u2019re bound to be rewriting your initiatives before long.<\/p>\n

As an offshoot of the pace of technology, the evil-doers\/bad actors who deign to penetrate your clients\u2019 businesses and valuable data are also stepping up their efforts to find those weak vulnerability points. That places the onus on security measures to hold serve and adapt, and dealers\u2014much like their clients\u2014must maintain a level of vigilance.<\/p>\n

\"\"

Bill McLaughlin, Atlantic Tomorrow\u2019s Office<\/p><\/div>\n

\u201cOver the course of the last two years, IT security is something we continue to invest time in,\u201d noted Bill McLaughlin, chief technology officer for Atlantic, Tomorrow\u2019s Office in New York City. \u201cYou can\u2019t stay static in that space. The criminals are constantly improving themselves, their tools and techniques. You have to make sure you\u2019re staying on top of the technology that can help effectively mitigate your risk. Unfortunately, you can\u2019t stop it altogether\u2014it\u2019s too prevalent, too constant and too sophisticated. The second you become complacent is the second you become that much more vulnerable. So it\u2019s ongoing and continuous risk mitigation.\u201d<\/p>\n

Following Governance Standards<\/strong><\/p>\n

In years past, dealers such as EO Johnson would encourage their clients in unregulated industries to emulate the same IT security standards as those in the health care, legal and other sectors that are regulated and have stringent requirements regarding confidential information. According to Peter Kujawa, president of Locknet, the managed IT division of EO Johnson in Wausau, WI, unregulated industries were loath to make the financial commitment. But the prevalence of security breaches has caused an about-face in the attitude toward security spending.<\/p>\n

\"\"

Peter Kujawa,
Locknet\/EO Johnson<\/p><\/div>\n

\u201cOver the last three to four years, the constant barrage of news stories regarding security incidents at larger and even smaller companies\u2014in some cases, in local areas where our clients are located\u2014has really put nonregulated businesses on notice that they need to be doing these things as well,\u201d Kujawa said. \u201cIf they\u2019re not doing them today or don\u2019t have the capability to do them in-house, they need to outsource it. In my experience, most SMBs, even some larger companies, don\u2019t have the in-house experience to do true security work. That is a good thing for many companies to outsource.<\/p>\n

\u201cWe have a number of clients who we don\u2019t do any server or desktop support for; the only thing we do is augment their internal IT team with managed security offerings.\u201d<\/p>\n

Another area that has grown from an awareness standpoint is the potential of security vulnerabilities on imaging devices, he added. \u201cOur security team has worked with the imaging team at EO Johnson to help train them on best practices for secure deployments of MSPs and printers.\u201d<\/p>\n

Covering All Bases<\/strong><\/p>\n

So how are dealers ensuring they\u2019re doing their part to provide a level of assurance that addresses the evolving threats? Donnellon McCarthy Enterprises (DME) of Cincinnati offers services that assist with cybersecurity resilience, according to President Jim George. By blending business continuity and enterprise resilience services, DME can create a security strategy that can respond quickly to threats and minimize the impact of an attack, allowing the client to continue to work during the intrusion.<\/p>\n

\"\"

Jim George,
Donnellon McCarthy Enterprises<\/p><\/div>\n

\u201cThe most important service is having a good disaster recovery partner,\u201d George noted. \u201cSome of the commercialized services aren\u2019t testing their backup regularly for clients and others won\u2019t provide a quick recovery.\u00a0Today, it is all about partnering.\u00a0We look for proactive partners that are staffed for managing attacks and are doing the right things to prevent issues.\u00a0As we help our clients avoid issues, our partners are making sure that we are staying ahead of the next threat.\u00a0Constant evaluation of new services and security software is important.\u201d<\/p>\n

George added that clients need to be educated about available solutions.\u00a0DME offers cyber threat monitoring, assessments and endpoint management.\u00a0Covering the fundamentals\u2014improving password security, user awareness and user behavior\u2014is critical, and George is closely monitoring the concept of identity governance as another opportunity for DME.<\/p>\n","protected":false},"excerpt":{"rendered":"

Once upon a time, the pace of technology was measured in generations. Then it became decades. After the onset of the internet revolution and the iPhone, the measuring stick became five years, then three years. Now, ironically, looking beyond three years might cause one to be accused of being short-sighted. The same can be said for business plans. The five- and 10-year plans, while (somewhat) still a part of the enterprise-level blueprint, are quickly evaporating. Look beyond three years, and you\u2019re bound to be rewriting your initiatives before long. As an offshoot of the pace of technology, the evil-doers\/bad actors who deign to penetrate your clients\u2019 businesses and valuable data are also stepping up their efforts to find those weak vulnerability points. That places the onus on security measures to hold serve and adapt, and dealers\u2014much like their clients\u2014must maintain a level of vigilance. \u201cOver the course of the last two years, IT security is something we continue to invest time in,\u201d noted Bill McLaughlin, chief technology officer for Atlantic, Tomorrow\u2019s Office in New York City. \u201cYou can\u2019t stay static in that space. The criminals are constantly improving themselves, their tools and techniques. You have to make sure you\u2019re staying on top of the technology that can help effectively mitigate your risk. Unfortunately, you can\u2019t stop it altogether\u2014it\u2019s too prevalent, too constant and too sophisticated. The second you become complacent is the second you become that much more vulnerable. So it\u2019s ongoing and continuous risk mitigation.\u201d Following Governance Standards In years past, dealers such as EO Johnson would encourage their clients in unregulated industries to emulate the same IT security standards as those in the health care, legal and other sectors that are regulated and have stringent requirements regarding confidential information. According to Peter Kujawa, president of Locknet, the managed IT division of EO Johnson in Wausau, WI, unregulated industries were loath to make the financial commitment. But the prevalence of security breaches has caused an about-face in the attitude toward security spending. \u201cOver the last three to four years, the constant barrage of news stories regarding security incidents at larger and even smaller companies\u2014in some cases, in local areas where our clients are located\u2014has really put nonregulated businesses on notice that they need to be doing these things as well,\u201d Kujawa said. \u201cIf they\u2019re not doing them today or don\u2019t have the capability to do them in-house, they need to outsource it. In my experience, most SMBs, even some larger companies, don\u2019t have the in-house experience to do true security work. That is a good thing for many companies to outsource. \u201cWe have a number of clients who we don\u2019t do any server or desktop support for; the only thing we do is augment their internal IT team with managed security offerings.\u201d Another area that has grown from an awareness standpoint is the potential of security vulnerabilities on imaging devices, he added. \u201cOur security team has worked with the imaging team at EO Johnson to help train them on best practices for secure deployments of MSPs and printers.\u201d Covering All Bases So how are dealers ensuring they\u2019re doing their part to provide a level of assurance that addresses the evolving threats? Donnellon McCarthy Enterprises (DME) of Cincinnati offers services that assist with cybersecurity resilience, according to President Jim George. By blending business continuity and enterprise resilience services, DME can create a security strategy that can respond quickly to threats and minimize the impact of an attack, allowing the client to continue to work during the intrusion. \u201cThe most important service is having a good disaster recovery partner,\u201d George noted. \u201cSome of the commercialized services aren\u2019t testing their backup regularly for clients and others won\u2019t provide a quick recovery.\u00a0Today, it is all about partnering.\u00a0We look for proactive partners that are staffed for managing attacks and are doing the right things to prevent issues.\u00a0As we help our clients avoid issues, our partners are making sure that we are staying ahead of the next threat.\u00a0Constant evaluation of new services and security software is important.\u201d George added that clients need to be educated about available solutions.\u00a0DME offers cyber threat monitoring, assessments and endpoint management.\u00a0Covering the fundamentals\u2014improving password security, user awareness and user behavior\u2014is critical, and George is closely monitoring the concept of identity governance as another opportunity for DME.<\/p>\n","protected":false},"author":166,"featured_media":32816,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[80,1650,82,1638],"tags":[108,3221,1157,3578],"_links":{"self":[{"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/posts\/33209"}],"collection":[{"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/users\/166"}],"replies":[{"embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/comments?post=33209"}],"version-history":[{"count":2,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/posts\/33209\/revisions"}],"predecessor-version":[{"id":33211,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/posts\/33209\/revisions\/33211"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/media\/32816"}],"wp:attachment":[{"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/media?parent=33209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/categories?post=33209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/tags?post=33209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}