Asset Management Archives

Your Biggest Security Threat May Be Your Windows 7 Operating System

July 11, 2019/0 Comments/in Asset Management, Security Alert, Small Business IT /by James Wagner

Thanks to shows like The Walking Dead, we’re all prepared for a zombie apocalypse. We know how to fight off zombies, avoid getting bitten, and when to run. But what happens when the apocalypse is much more likely to happen and zombies have already been welcomed into your organization? This scenario is far too real for many businesses: Windows 7 will soon be the zombie in your office that will infect everything.

Windows 7 End of Life (EOL) Is Less than 6 Months Away

Effective January 14, 2020, Windows 7 will no longer be supported by Microsoft. The OS will continue to launch and run, but users will no longer receive updates or support. After the EOL date, systems still running Windows 7 will be considered unprotected, and as such, will be subject to higher security risks. It is important that all current users of Windows 7 migrate to Windows 10 prior to this date so that they can continue to receive regular security updates to help protect their devices from malicious attacks. It’s already past the time when organizations should be taking steps to update to Windows 10. In fact, Windows 7 lost mainstream support from Microsoft in 2015 and it’s basically been on life support since then. Now they’re pulling the plug altogether, and any organization still relying on the platform will encounter operational difficulties as well as enormous security risks. There will be no more security patches issued and no more support extensions available.

Make the Move to Windows 10 Now

While Windows 10 did present some challenges for early adopters, those challenges have, for the most part, been resolved. It is a much more intuitive version of Windows, offering better collaboration tools, stronger security, and more efficiency, no matter the size of your business. But the key thing to remember is that Windows 10 is still supported by Microsoft, which means you will receive security updates and layers of protection that you will lose with Windows 7.

Remember WannaCry?

In 2017 the WannaCry ransomware cryptoworm infected more than 200,000 computers in 150 countries, costing companies millions – if not billions – of dollars. WannaCry was able to spread because the hackers took advantage of vulnerabilities in unsupported versions of Windows to access networks. It literally spread like a wildfire around the world. To avoid a similar situation with Windows 7, it is vital that you get in touch with your Managed Services Provider (MSP) today and schedule time to set up a plan to move your network to Windows 10.

Windows 7 Upgrade FAQs

There are many questions about the Windows 10 upgrade process, and we’re here to answer them and assist in the process. In the meantime, here a few quick FAQs to cover a few of the questions asked most often:

Q: What about Windows 8? Isn’t that a less expensive option?

We often talk about the need for organizations to be proactive instead of reactive in order to be more secure and make the best use of their IT investments. Moving to Windows 8 leaves you in a reactive and vulnerable state, because end of support for Windows 8 has already been announced. The few dollars you might save today will be spent making another shift far too soon. We strongly advise you to go ahead and make the move to Windows 10 now.

Q: Can I upgrade my existing PC to Windows 10?

A: Yes, you can upgrade compatible Windows 7 PCs (based on certain requirements with a full license – ask your CITM if you are unsure if your hardware is eligible for this upgrade). To take advantage of the latest hardware capabilities, we recommend moving to a new PC with Windows 10.

Q: What happens if I continue to use Windows 7?

A: You can continue to use Windows 7, but once support ends, your PC will become more vulnerable to security risks. Windows will operate but you will stop receiving security and feature updates.

Q: Can Windows 7 still be activated after January 14, 2020?

A: To avoid security risks and viruses, Microsoft recommends that you consider upgrading to Windows 10 well in advance of the end of life (EOL) date for Windows 7. Once the EOL date arrives, you will not be able to install any new Windows 7 instances or receive patches, old or new, for existing systems.

Act Now to Protect Your Organization from Windows 7 Security Risks

If you are a current Windows 7 or Windows Server 2008 R2 user and you don’t already have an upgrade plan in place, please talk to your Client IT Manager or Account Manager to discuss the transition so that there is no lapse in your security coverage. Here at The ITeam, we understand that replacing hardware and software can be a daunting task, so if you have any questions at all, don’t hesitate to reach out to your ITeam Account or Client IT Manager to discuss your options. We are here to help make this as seamless and budget friendly as possible! Get in touch today.

Patch Programs Are a Poor Substitute for Comprehensive Cybersecurity

June 25, 2018/0 Comments/in Asset Management, Cloud Security, Cybersecurity /by James Wagner

Many data breaches occur as a result of a business failing to install a recommended patch.

If an organization had only taken the steps to update their software or apply the patches that had been made available, problems could have been avoided.

What is missing that prevents follow-through on these fundamental IT tasks?

There is a substantial gap between when a patch is available and when that patch is applied, which is a common enough problem that even Equifax suffered the consequences.

Patching is a losing battle

The process of installing patches (also referred to as software updates) may seem achievable for smaller businesses with only a few programs.

However, patch management is very time-consuming for smaller and larger organizations alike – and needed patching is often procrastinated.

The very term “patch” trivializes the level of difficulty that IT departments endure when installing these security updates as if the undertaking was as simple as sewing a patch onto torn jeans.

With various programs and software utilities to manage within a single organization, it is nearly impossible to monitor, discover, and patch for every vulnerability.

Patch programs are rarely prioritized

All levels of staff within an organization must strike a careful balance between existing risk versus the costs of addressing that risk.

However, there is reluctance, despite IT professionals stressing the importance of staying up to date with patches.

Installing patches is often manual processes that require critical systems to be offline.

This can slow down coordinating networks and halt work that needs to be done.

This is frustrating to employees who are trying to complete projects and to management staff who are monitoring deadlines.

Missed deadlines and slow productivity are more easily perceived as a threat to the business that is the looming risk of a breach.

Patches are commonly delayed for a more “convenient” moment that rarely occurs.

What is the solution?

Given the pushback or lack of diligence in terms of installing security updates, patches are not a viable strategy for a robust cybersecurity policy.

An infrastructure that mitigates must stem from more than quick fixes to an overall problem in your security network.

Patches rely on manual processes and humans are inefficient.

New automation technologies are what will make identifying vulnerabilities and applying patches more effective strategies, but such tools must be integrated into systems.

It’s not a simple software that can be installed, but instead an entire shift in how digital programs are run and a proactive culture of action to protect data.

Switching to a comprehensive managed security protocol is the most effective way to manage vulnerabilities. Many breaches are the result of human error, and patch programs are not excluded. Even a high-functioning vulnerability management system, which prioritizes patches based on the level of risk, cannot address when a patch might suddenly move from a low priority to one that is higher. They can only alert the proper staff and hope that a patch can be applied in time with minimal inconvenience. Remaining cyber secure demands an aggressively proactive approach, and the practice of installing security patches largely amounts to playing a game of cat and mouse. If organizations are constantly on the run from the next attack, then the realization of a data breach becomes a matter of if, not when.

The ITeam understands the cybersecurity issues facing Canada businesses. We are committed to helping Calgary- and Alberta-based businesses develop proactive, cost-effective IT strategies that minimize risk and maximize efficiency. Contact us to learn more.

Software Asset Management

April 24, 2017/0 Comments/in Asset Management /by James Wagner

We have previously highlighted the benefits of contracting with a Virtual Chief Information Officer (VCIO).

This is most beneficial for middle-sized corporations that employ and oversee the basic implementation and maintenance of their networks (both hardware and software).

It would be served better by an outside partner who can provide up-to-date, cutting-edge guidance in a rapidly evolving technical world.

There are many companies, however, that lack the capital and expertise to manage solid technical implementation and maintenance of their software.

For these companies, working with a Managed Services Provider (MSP) in the area of Software Asset Management (SAM) can be the perfect fit.

Virtual Chief Information Officer

Working with a VCIO allows companies to establish a level of peace and security regarding the big decisions that impact their technological footprints.

While partnering with an MSP that provides SAM assistance removes the burden and anxiety of trying to stay on top of software needs – an aspect of your business that is fluid and changes rapidly.

This benefit (increased peace and security) is widely recognized and is the main reason for the growth of such services.

However, there are a few less well-known advantages that are specific to software management.

Understanding these issues can make all the difference when you are deciding how to structure this important partnership.

These issues are best considered as responses to basic questions:

Are we as cost-effective as possible in the implementation of software?

Ironically, the first thing to disappear when implementing new software is usually cost-effectiveness.

As the number of software programs within your business multiplies, the difficulties associated with understanding and managing such an expansion likewise increases.

Many small companies, especially, rely on salespeople when they make their software purchasing decisions, but many large institutions do, too.

While salespeople have an obvious incentive to understand your software programs and how you run your network(s), their bottom line is in making a sale.

The bigger the sale, the better.

Thus, they have no incentive to be completely open about all of the options – and they certainly will not peruse and provide you with other options, even if those options meet your exact needs.

This is particularly true when individual component pieces are being sold to specific departments.

If one of your departments, such as a training department, for instance,) still subscribes to a legacy software program that is largely outdated, you are most likely going to look for a replacement when that program’s licence is about to expire.

If HR is using a different software program that is relatively new and is on a different payment time frame, it is easier to replace the training department program only, rather than see if there is a program that can work for both departments.

Expand this situation across the spectrum of your organization and you have a difficult labyrinth to decipher and analyze in terms of cost-effectiveness.

Finally, systematizing subscription or other payment structures as much as possible can have a huge benefit.

Are we configured properly to take advantage of new technologies and systems?

If your human infrastructure is not cutting-edge in SAM, working with an MSP is a necessity.

More and more technology is compatible with the cloud, IoT, wireless devices, etc.

These areas were not considered when many older, common software programs were developed.

Much of the need to manage software assets properly is a result of this new frontier and the necessity of upgrading software systems.

Given the complexity of these new technologies and the relative inexperience of most business owners (and even IT managers in small to medium-sized companies), there is a critical need for software decisions to include outside input.

Are we capable of properly training our employees in the best use of new software?

This question might be seen as an element of the last one, but it needs to be addressed directly and as a distinct issue.

Put simply, if you must contract your training after you purchase software, it is best to do so with a partner who has helped you choose the software in the first place.

As technology fundamentally changes how we do business, serve customers, and address security threats, organizations must reevaluate whether their current IT strategies are meeting their needs. The ITeam is committed to helping Calgary- and Alberta-based businesses develop proactive, cost-effective IT strategies that minimize risk and maximize efficiency. Contact us to learn more.

Network Assessment: A Tool for Your Business Growth

December 12, 2016/0 Comments/in Asset Management, Small Business IT /by James Wagner

Evaluating IT systems is no simple task.

However, it is essential to the success and health of your business that you have a sense of what is required to keep your IT infrastructure efficient and secure.

Think of an IT systems evaluation as you would a routine physical or checkup.

Just as you would visit a dentist every six months for a cleaning and x-rays, simply to make sure your teeth are in good health.

A network assessment ensures that your IT infrastructure is in good working order and capable of meeting the demands of your organization.

These assessments not only help you maintain IT security but they also help you remain competitive, by maintaining your efficiency and productivity.

A network assessment is also a powerful tool for growth, allowing you to leverage available technology to make smart investments for your organization’s capabilities.

Preparation for the future

As an essential piece of your business blueprint – conducted through the lens of your organization’s goals and objectives – a network assessment can help you prepare for the future.

A network assessment assures that you have the technology and infrastructure in place to meet your goals.

By working with a managed IT partner who understands your organization’s unique needs, you can develop and implement new tools that help you remain flexible, competitive, and secure.

A network assessment provides you with the insight you need regarding your organization’s ability to:

Expand,
Deliver new products and services, and
Improve customer experience

You’ll also understand how to prevent issues, such as security breaches and unanticipated downtime.

The offer of an outside perspective

Many opportunities to discover deficiencies and improve your IT infrastructure are missed simply due to a lack of information.

A network assessment from a managed IT partner will ensure that your business understands the options available and the solutions that are most relevant to your operation.

An expert from outside of your organization can conduct an assessment of your IT infrastructure to help you detect glitches that may not ordinarily be detected internally.

Risks can be addressed proactively – certainly more cost-effective than reacting to an issue after the damage has been done.

You will be provided with recommendations about the most recent tools and solutions necessary to keep your data secure and achieve business objectives.

Small changes can make a big difference

Each intricate piece of your IT infrastructure should be operating at maximum efficiency.

A network assessment can pinpoint even small issues that may have a big impact on that efficiency and your productivity.

Sometimes a small adjustment to the servers, communication tools, productivity tools, security and data solutions, and the infrastructure that keeps everything running can have a profound impact on the overall success and profitability of your business.

The ITeam provides essential IT support to Calgary– and Alberta-based businesses, with fully managed and customized services designed to meet the needs of virtually any business. The ITeam will work with you to customize a cost-effective solution and help you develop a comprehensive IT strategy that will help you survive economically stressful times. Contact us for a free consultation or schedule a network assessment today.

Your Biggest Security Threat May Be Your Windows 7 Operating System