Securing your Employees
30th June 2022
We often get asked it we can give 3 simple steps organisations can take to help better secure their employees. We have 4 and they can all be obtained through our managed services! They are:
- CyberSmart – the CyberSmart agent checks machines for vulnerabilities, out of date software and machine permissions. It is based on the Cyber Essentials scheme and adding the agent with the questionnaire can lead to your organisation gaining the Cyber Essentials accreditation. To see more about Cyber Essentials, click here. Briefly, it is a Government sponsored security standard for organisations to allow their customers to know that they are taking security seriously. Often it is required in tenders, and most public bodies will now request that the standard be obtained before bidding for work.
- Sophos Intercept X – a next generation anti virus product featuring protection in the case of a ransomware attack. Costing slightly more than a traditional anti virus but with much better detection. Rather than being reliant just on a list of harmful items which gets updated regularly, the system is intelligent and can detect threats based on behaviour.
- DNS Filtering – when employees were all coming into an office they could be protected by a firewall and this would be able to control where they went online and what sites they visited. Now that employees are more likely to work from home, it is no longer sufficient to just secure the office. To give employees the same protection they enjoyed, DNS filtering can be used to stop access to malicious sites and to stop data leaks by controlling use of other non authorised file sharing systems.
- Multi Factor Authentication (MFA) – according to a global survey of 1,403 small business owners conducted by the Cyber Readiness Institute (CRI) finds that more than half still rely only on usernames and passwords to secure employee, customer, and partner data. Services that enforce MFA require users to present more than one piece of evidence whenever they log in to a business account. MFA (also known as 2-factor authentication, or “2FA”) is something the user knows (like a 15-character password), something that the user is (like a fingerprint or face scan), or something the user has (their phone or email account where they can receive a one-time code). The most common place to apply MFA is to your Microsoft 365 accounts to stop third parties gaining access to your email accounts and reduce business risk. We advise that MFA is switched on by default and most new setups of Microsoft 365 now require it to be in place. This does give some issues on accounts that are used for scanning to email from copiers, bbut they are methods around this.
To get a free security audit of your organisation contact us today.