Employees Are Letting Hackers Into Your Network ... What You Can Do To Stop It

Cyberthreats are everywhere these days. Hackers, scammers and cybercriminals are working overtime to break into your network – and the network of just about every business out there. They have a huge arsenal of tools at their disposal, from automated bots to malicious advertising networks, to make it possible.

But there is one “tool” that you may be putting directly into their hands: your employees. Specifically, your employees’ lack of IT security training.

While most of us expect hackers to attack from the outside using malware or brute-force attacks (hacking, in a more traditional sense), the truth is that most hackers love it when they can get others to do their work for them.

In other words, if they can fool your employees into clicking on a link in an e-mail or downloading unapproved software onto a company device, all the hackers have to do is sit back while your employees wreak havoc. The worst part is that your employees may not even realize that their actions are compromising your network. And that’s a problem.
Even if you have other forms of network security in place – malware protection, firewalls, secure cloud backup, etc. – it won’t be enough if your employees lack good IT security training. In fact, a lack of training is the single biggest threat to your network!

It’s time to do something about it. Comprehensive network security training accomplishes several things, including:

1. Identifying Phishing E-Mails
Phishing e-mails are constantly evolving. It used to be that the average phishing e-mail included a message littered with bad grammar and misspelled words. Plus, it was generally from someone you’d never heard of.

These days, phishing e-mails are a lot more clever. Hackers can spoof legitimate e-mail addresses and websites and make


Continued on page 2
 

 
Continued from page 1

their e-mails look like they’re coming from a sender you actually know. They can disguise these e-mails as messages from your bank or other employees within your business.

You can still identify these fake e-mails by paying attention to little details that give them away, such as inconsistencies in URLs in the body of the e-mail. Inconsistencies can include odd strings of numbers in the web address or links to YourBank.net instead of YourBank.com. Good training can help your employees recognize these types of red flags.

2. Avoiding Malware Or Ransomware Attacks
One reason why malware attacks work is because an employee clicks a link or downloads a program they shouldn’t. They might think they’re about to download a useful new program to their company computer, but the reality is very different.

Malware comes from many different sources. It can come from phishing e-mails, but it also comes from malicious ads on the Internet or by connecting an infected device to your network. For example, an employee might be using their USB thumb drive from home to transfer files (don’t let this happen!), and that thumb drive happens to be carrying a virus. The next thing you know, it’s on your network and spreading.

This is why endpoint protection across the board is so important. Every device on your network should be firewalled and have updated malware and ransomware protection in place. If you have remote employees, they should only use verified and protected devices to connect to your network. (They should also be using a VPN, or virtual private network, for even more security.)


But more importantly, your employees should be trained on this security. They should understand why it’s in place and why they should only connect to your network using secured devices.

3. Updating Poor Or Outdated Passwords
If you want to make a hacker’s job easier than ever, all you have to do is never change your password. Or use a weak password, like "QWERTY" or "PASSWORD." Even in enterprise, people still use bad passwords that never get changed. Don’t let this be you!

A good IT security training program stresses the importance of updating passwords regularly. Even better, it shows employees the best practices in updating the passwords and in choosing secure passwords that will offer an extra layer of protection between your business and the outside world.

If you or your employees haven’t updated their passwords recently, a good rule of thumb is to consider all current passwords compromised. When hackers attack your network, two of the big things they look for are usernames and passwords. It doesn’t matter what they’re for – hackers just want this information. Why? Because most people do not change their passwords regularly, and because many people are in the habit of reusing passwords for multiple applications, hackers will try to use these passwords in other places, including bank accounts.

Don’t let your employees become your biggest liability. These are just a few examples of how comprehensive IT and network security training can give your employees the knowledge and resources they need to help protect themselves and your business. Just remember, you do not have to do this by yourself! Good IT training programs are hard to find, and we are here to help.
 
"Every device on your network should be firewalled and have updated malware and ransomware protection in place."
 

FREE Report: 5 Critical Facts Every Business Owner Must Know Before Moving Their Network To The Cloud

If you're considering cloud computing or Office 365 to save money and simplify IT, it is extremely important that you get and read this report: "5 Critical Facts Every Business Owner Must Know Before Moving Their Network To The Cloud"

This report discusses in simple, nontechnical terms the pros and cons of cloud computing, data security, how to choose a cloud provider and three little known facts that most IT consultants don't know or won't tell you about cloud computing that could end up causing you MORE problems and costing you more money than you anticipated. Even if you aren't ready to move to the cloud yet, this report will give you the right information and questions to ask when the time comes.

Visit: bensingerconsulting.com/cloud/ or call our office at (602) 362-0202.
 

 

The Leader’s Most Important Job

Can you guess what the most important trait is for effective leaders? You can probably guess all sorts of things: relationship building, communication, awareness, positivity, innovation … The list goes on. And you probably do a lot of those things too.

When I speak with leaders, I emphasize that a person’s success as a leader doesn’t come from what they do or how they do it — it’s about how often they do these important things. The Most Important Thing For Leaders: Focus Your Team

A leader’s most important job is taking the time and effort to focus their team. Leaders must help their team members focus their time and expertise to complete the organization’s most important work.

The most successful businesses are driven by profit, innovation, efficiency and effectiveness.

Your team’s revenue and results are all driven by how people spend their time (effort) and expertise (knowledge and skills), and these are the keys to elevating your team’s success. By doing these things and being a role model for your team, you can experience amazing results.

How To Elevate Your Team

1. Passion. Creating a vision requires passion. This passion elevates your own commitment and helps both you and your team be productive. It’s unlikely that a leader will be fully immersed in their role, their organization or their team if they are not passionate about what they are doing.

2. Time, Expertise And Motivation. Everything is the by-product of time and expertise. When a leader invests both time and expertise into their team, the team grows. When time and expertise are invested wisely, the organization also achieves great success. By putting the time and expertise into your team members, you can motivate them to improve in their roles.

3. Focus. This goes hand in hand with time and expertise. By focusing on the strengths (and weaknesses) of a team and learning how to constantly improve and grow, an organization can produce positive results. When a leader doesn’t have this focus, the organization suffers. Mediocrity becomes the norm.

A great deal of time and expertise is wasted in companies where employees are doing low-priority work or work that shouldn’t be done at all. When a team lacks an effective leader, it is difficult for them to know what they should be doing instead.

When a leader takes the time to show their team the importance of their work and how their work will achieve success, the whole organization grows. This commitment is what creates remarkable performances.

You can learn more about this in my book The Encore Effect: How To Achieve Remarkable Performance In Anything You Do.

At the end of the day, it’s most important for leaders to regularly take the time to focus on and elevate their team. Just as a conductor makes sure members of an orchestra are all playing the right music to the best of their ability, so does an effective leader do their job.
 
 
Mark Sanborn, CSP, CPAE, is the President of Sanborn & Associates, Inc., an “idea studio” that seeks to motivate and develop leaders in and outside of business. He’s the best-selling author of books like Fred Factor and The Potential Principle and a noted expert on leadership, team building, customer service and company change. He holds the Certified Speaking Professional designation from the National Speakers Association and is a member of the Speaker Hall of Fame. Check out any of his excellent books, his video series “Team Building: How To Motivate And Manage People” or his website, marksanborn.com, to learn more.
 
 

GET WEEKLY CYBERSECURITY TIPS IN YOUR EMAIL!
VISIT BENSINGERCONSULTING.COM/TIPS/


Do These Things To Protect Your Business From Getting Hacked

1. Train Employees.
Your team needs to know how to identify and handle today’s IT security threats. Cybercriminals often rely on your employees' lack of training to break into your network. Ongoing training gives employees tools and resources to overcome this and many other IT security challenges. Make training a top priority!

2. Hold Employees (And Yourself) Accountable.
Training and company guidelines don’t mean much without accountability. When you set rules, follow them, just as you follow industry and government rules and regulations when operating your business. Be willing to hold anyone who does not accountable.

3. Have A Disaster Recovery Plan.
Things happen. When you store sensitive data, you need to have a plan in place to recover and restore that data should anything happen. This doesn’t just include data loss from malicious attacks but other types of disasters, including hardware failure, fire and flood. How is your data being backed up and saved? Who do you notify in the event of a breach? Who do your employees call in the event of disaster? SmallBiz Technology, Dec. 26, 2019
4 Tips To Get Projects Done On Time With A Small Team

1. Give Them The Tools And Resources They Need
We all need tools to get things done – project management software, content creation tools, messaging apps, virtual private network access and more. Have a conversation about what each team member needs to maximize productivity and work closely with them to meet that need.

2. Set Aside Time For Proper Research
Don’t jump headfirst into a project without jumping into research first. Information is a powerful tool to get things done efficiently and effectively.

3. Assign Accordingly
Before the team goes to work, make sure assignments or responsibilities are delegated properly and check in with everyone on a regular basis to make sure things are going smoothly (or to see if they need help).

4. Plan And Plan Again
Plan out the project before you set to work. Give yourself and your team a map to follow as you work through the project. As with any project, expect obstacles along the way and be willing to update your map accordingly. Small Business Trends, July 4, 2020

Get a FREE, No Obligation, Security And Network Assessment!


Would you like a 2nd opinion about your IT Services, but don’t want your current IT company to know?

Would you like discreet confirmation that your security services are really keeping you secure? And that your backups are really backing up?

Contact us for your FREE, No Obligation, Security And Network Assessment!

We will contact you prior to beginning our assessment. Nothing will be installed on your network. When we’re done, we’ll provide you with written documentation of our findings at NO OBLIGATION to you.

Call (602) 362-0202
or use the form below.





CLAIM YOUR FREE, NO OBLIGATION, DARK WEB SCAN TODAY!
GO TO BENSINGERCONSULTING.COM/DARK-WEB-MONITORING/
OR GIVE US A CALL AT 602-362-0202