Protect Archives - Business Intelligence Info

Tag Archives: Protect

Manage Devices and Protect Your Organization with Microsoft Endpoint Manager (aka Intune)

November 26, 2020 CRM News and Info

Intune, or as they have recently rebranded themselves — Microsoft Endpoint Manager, is a unified management platform for all your devices. Those devices could include Windows, 10 Mac, iOS, iPad, iPhone, Android, etc.

REMOTE WORKFORCE

As companies more towards a remote workforce they will see more and more devices accessing their data. Yes, this helps speed up your productivity and the way you do business. However, this could be a HUGE liability and threat for your organization.

It’s imperative that your organization protects access to your environment at all times.

You have important data that could be exposed unintentionally through your employee devices. The more devices that you have on your network the more you could be exposed. Protect your organization from potential threats with JourneyTEAM and Microsoft Endpoint Manager (aka Intune).

[embedded content]

GROUPS and CONTROLLED ACCESS

Microsoft Endpoint Manager allows organizations to set up groups to be able to control how information is accessed. These groups can be done by project, title, access level, or as you choose.

When you choosing a device and data management system there are four different things that are of importance. Those are the flexibility, integrations, scalability, and security of the Endpoint Management System.

FLEXIBILITY

In the flexibility realm this allows organizations to decide between an on-premise environment or a cloud only environment. Microsoft’s Endpoint Manager allows organizations to have those types of setups. They let you manage devices that are company owned as well as devices that are personally owned.

INTEGRATIONS

The integrations part is important because you want to have deep integrations with Azure active directory and Microsoft 365. There are also tools like Windows defender for Endpoint Manager, which is another solution that enhances management capabilities in relation to windows 10 devices.

SCALABILITY

When you think of process automation and deploying, managing, and updating a windows 10 devices that could be a lot of work. Scalability is where JourneyTEAM and Microsoft Endpoint Manager can help add that additional level of security and growth.

You can create application level controls to provide secure access to your company or work data. Whether the device is fully managed by the company, or if it’s is just without enrollment — you can manage it. And it’s just accessing specific applications that happened to be part of the Microsoft 365 ecosystem. This could be your email, documents on SharePoint, OneDrive or Microsoft Teams.

INTEGRATIONS

And then lastly you have deep integrations with Azure active directory. Here you can leverage conditional access, which has basically rules around how, when and where you’re able to access specific company data. You have ways to gain control and security

So again, Microsoft Endpoint Manager gives you the flexibility, integration, scalability, and security. Those are the four important points to think about in relation to your endpoint manager system.

FIND OUT MORE

If you’re interested in learning more about Microsoft Endpoint Manager (aka Intune), please contact us at JourneyTEAM. One of our business development managers will help you get pointed in the right direction.

CLICK HERE – To see full article

Contact JourneyTEAM
We are consultants that can help make Microsoft Lists a reality! Visit our website to find out more, or call us now at 800.439.6456.

Article by: Dave Bollard – Head of Marketing | 801-436-6636

JourneyTEAM is an award-winning consulting firm with proven technology and measurable results. They take Microsoft products; Dynamics 365, SharePoint intranet, Office 365, Azure, CRM, GP, NAV, SL, AX, and modify them to work for you. The team has expert level, Microsoft Gold certified consultants that dive deep into the dynamics of your organization and solve complex issues. They have solutions for sales, marketing, productivity, collaboration, analytics, accounting, security and more. www.journeyteam.com

—————

Let’s block ads! (Why?)

CRM Software Blog | Dynamics 365

Sonrai Security raises $20 million to protect public clouds with automation

October 15, 2020 Big Data

Public cloud security provider Sonrai Security today announced a $ 20 million round that will be used to accelerate R&D and boost global sales and marketing for its identity and data governance products.

Roughly 83% of enterprise workloads have moved to the cloud, according to a 2020 survey from LogicMonitor. But the cloud remains vulnerable to cyberattacks. IBM found last year that the average time to identify a breach was 206 days. Meanwhile, security breaches have increased by 11% since 2018 and 67% since 2014, Accenture reported in a recent study.

Sonrai offers a platform called Sonrai Dig to help companies stay ahead of threats. The platform is built on a graph that identifies and monitors relationships between entities (e.g., admins, roles, compute instances, serverless functions, and containers) and data within public clouds and third-party data stores. An engine automates workflow, remediation, and prevention across cloud and security teams to provide baseline security. At the same time, it provides critical data in object stores like AWS S3 and Azure Blog priority to address suspicious activity and access rights monitoring.

Sonrai’s data governance automation solution helps integrate teams via analyses, alerts, and actions that align with the way organizations use the public cloud. The platform allows customized monitoring and views for development, staging, and production workloads and an API architecture that can be integrated into a continuous integration/continuous development process. Dig also automatically dispatches prevention and remediation bots and provides safeguards in the form of code promotion blocks to provide end-to-end security in public cloud platforms.

Sonrai CEO Brendan Hannigan, formerly a general manager of security at IBM, says improperly configured cloud interdependencies and inheritances can lead to significant security risks. These include excessive access paths to data, over-permissioned identities, and an unwieldy separation of responsibilities. Hannigan estimates that enterprises’ public cloud utilization generates hundreds of cloud accounts, thousands of data stores, and tens of thousands of ephemeral pieces of compute — complexity that legacy cloud security tools have failed to address.

Hannigan won’t disclose Sonrai’s customers, but he says the platform can scale to thousands of roles and compute instances across hundreds of corporate accounts. “The increasing frequency of cloud breaches caused by identity and data access complexity has driven significant traction for our … platform among large enterprises,” Hannigan added. “They see it as the basis of their cloud security model.”

Menlo Ventures led today’s series B round, with participation from Polaris Partners and Ten Eleven Ventures. It brings the New York-based company’s total raised to over $ 38.5 million, following an $ 18.5 million series A round in January 2019.

Let’s block ads! (Why?)

Big Data – VentureBeat

How to Protect Dynamics 365 Documents in SharePoint From Misuse

June 20, 2020 Microsoft Dynamics CRM

Do you work with Dynamics 365 and use SharePoint to store your documents? You can use the standard out-of-the-box integration between Dynamics 365 and SharePoint offered by Microsoft, but the security models of D365 and SharePoint differ significantly.

Unfortunately, this can result in documents in SharePoint being accessible to users who don’t have the required Dynamics 365 privileges.

xDynamics SharePoint Problem 300x269.png.pagespeed.ic.D0IbGw 73B How to Protect Dynamics 365 Documents in SharePoint From Misuse

Dynamics 365 Documents in SharePoint

Fortunately, a Microsoft Partner has an out-of-the-box tool that solves this problem: CB Dynamics 365 to SharePoint Permissions Replicator. Its goal is to protect the documents that are in SharePoint. It ensures that the proper privileges from Dynamics 365 are applied to SharePoint items, automatically and instantaneously securing your files and documents at all times.

“We are very proud to say that we have the perfect solution to secure your documents in SharePoint, the documents you use in Dynamics 365.” Thomas Berndorfer, Connecting Software explains.

The problem is actually bigger than what one might think, as users can have multiple security roles belong to multiple groups and all this changes over time. “Currently, we can say that we are completely covering the entire security model of Dynamics 365, including security roles, cascading behavior, manager/ position-based hierarchy, business units’ hierarchy, access team templates, and record of ownership.” he describes. It is “an award-winning out-of-the-box solution (…) that has grown over the last six years, proven technology with over 300 installations.” Thomas Berndorfer concludes.

A Solution That Fits The Problem & The Current Crisis

In these times of crisis, customers look for more than a simple fit for their problem. They also appreciate that they can go through the whole demonstration, evaluation, and purchase process based on the web. “Forrester says 73% of business buyers find the web more convenient for purchasing and even more in the current climate that we have”, says Julio Colon, Microsoft.

Thomas Berndorfer, Connecting Software describes the process: “Where can you get it? On Appsource, Azure Marketplace, we have an ecosystem of partners, and, of course, you can get it from Connecting Software. (…) We have a quick deployment. If you go to your Azure Marketplace, it is even pre-installed.”

To get a full understanding of this problem and its solution, watch the full webinar where Microsoft and Connecting Software presented how to Protect Dynamics 365 Documents in SharePoint From Misuse, which includes a demo. Presenting are Julio Colon (Microsoft), Thomas Berndorfer (Connecting Software) and Sherif Kenawy (Connecting Software).

[embedded content]

If you want a personalized demo or if you have any question, get in touch with Connecting Software’s experts. They will get back to you quickly. You can also click on Ask the Author below, and I will help you out.

xana framed.png.pagespeed.ic.cVqanoYude How to Protect Dynamics 365 Documents in SharePoint From Misuse By Ana Neto, Connecting Software. Connecting Software creates integration and synchronization software. Connecting Software is a 15-year-old company, with 40 employees spread in 4 different countries.

Let’s block ads! (Why?)

CRM Software Blog | Dynamics 365

Protect the Restaurant Guest Experience During the Holidays

November 16, 2019 NetSuite

Posted by Brady Thomason NetSuite Solution Manager, Restaurant & Hospitality

It’s that time of year again—the joyful and triumphant restaurant holiday season. Let’s be honest, a restaurant dining room during the holidays can turn from Miracle on 34^th Street to National Lampoon’s Christmas Vacation very quickly, but how you prepare yourself and your front-of-house team will determine the outcome. The stress and emotions of the holidays influence whether you end up with a guest for life, or a rage-fueled, Yelp-happy keyboard warrior on a mission to destroy your brand. Here are a few quick guest experience best practices to ensure you end up with the former instead of the latter.

Get the word out

Perhaps the quickest and easiest way to rally the troops is to communicate through a pre-shift! Remind your FOH team that the holidays are a vulnerable time for your restaurant, so it’s imperative they’re on their A-game. Your guests are typically overstimulated, emotional, stressed, and entertaining their closest family and friends, some of which they have no desire to be in the same room with, and they expect to receive a flawless service experience. Try tuning into the “WIIFM,” or, “what’s in it for me” server mentality; remind servers that guests tend to be more generous during the holidays and are more apt to reward them for an amazing experience with a bigger tip. Be clear with GSAT targets and don’t be afraid to incentivize with team contests and rewards!

Set the vibe

Chances are if the music is blaring, politics streaming on TV, and lights are mind-numbingly bright, your guests will reciprocate with anger and anxiety. If that’s not the vibe you’re going for, be extra thoughtful in creating an environment where your guests feel comfortable and relaxed. The holidays are stressful enough on their own. If you create a hospitable environment and execute with purpose and urgency, your team will follow.

Don’t hold guests hostage

We’ve all been there, sitting at a table waiting for what feels like an eternity for our server to process payment. To avoid this, set clear service expectations for your FOH team to improve attentiveness and speed-of-service, and follow up! Get guests in and out quickly with immediate greets, timely quality checkbacks and speedy payment reconciliation. These are crucial steps to ensure guests have a great experience and to maximize revenue, so be sure to validate that servers are executing them in real-time on the floor.

Write and repeat all orders

Order accuracy is a major GSAT driver, so be sure servers are writing down all orders, repeating them, and entering them into the POS accurately. The chaos of the holidays can easily impact your guest’s ability to articulate what they’re trying to order, and your servers’ ability and willingness to interpret. Not to mention aunt Suzy over there, three Chards deep…

Lead from the front…

…not from the office. Your team needs you to be present on the floor, speaking with guests, extinguishing the inherent fires that will ignite. One of the worst mistakes you can make as a restaurant leader is to underestimate your team. When the right people are given realistic goals, clear expectations and lead by an ambitious leader, magic happens.

Learn about NetSuite software for restaurants.

Posted on Fri, November 15, 2019
by NetSuite filed under

Let’s block ads! (Why?)

The NetSuite Blog

5 Ways To Protect Your Business From Cybercrime

October 14, 2019 SAP

These days, businesses have less reason to fear burglars and thugs than anonymous cybercriminals. While thieves can steal merchandise or damage property, cybercriminals are much more insidious, and the harm they cause can be orders of magnitude worse. When sensitive information is stolen or financial accounts are hacked, the losses can completely beggar even the most spectacular robbery.

It’s not only large global corporations that get targeted; cybercriminals often target lower-hanging fruit. In fact, 79 percent of companies report having been hit by breaches over the last year. Smaller businesses are often less likely to put a lot of effort into protection from cyberattacks because they consider themselves too small to be targeted. While the potential gains of attacking smaller companies may be less impressive, the task is usually less difficult and dangerous.

So what can you do to avoid being targeted by cybercriminals? Consider these tips.

1. Keep all software updated and regularly patched

One of the most common ways hackers gain access to computer systems is via code defects (known as exploits). Some exploits remain unnoticed for years before they are patched, so if you do not update regularly, you could leave your networks vulnerable to anyone with a little bit of technical knowledge. Exploits can affect all software, from operating systems and browsers to specialized software and more.

2. Invest in a reliable VPN

A VPN (virtual private network) creates a secure connection over a less-secure network between your computer and the Internet. A VPN makes you essentially invisible to hackers, so they cannot steal your passwords or financial information, or track your activities.

There are many VPN options available (see ExpressVPN vs. IPVanish). Before you choose a service, determine your organization’s needs and carefully research which one is the best fit.

3. Educate and train your staff

Even if you use the latest antivirus and firewall software, you won’t be fully protected if your employees do not follow the rules of digital security. Over 90 percent of security breaches happen not as a result of hackers overcoming the network’s protection, but because an employee unwittingly opened up door – for example, by using a weak password or falling victim to a phishing email. Investing in cutting-edge security software but failing to educate your employees in cybercrime prevention is tantamount to boarding up the windows while leaving the front door wide open.

4. Divide, encrypt, and back up sensitive data

Today, data is a business’s most critical asset, so protecting it should be a top priority. Put it behind as many layers of security as possible. Do not keep it in a single source, and divide it into segments – it may be less convenient to use this way, but in case of a security breach, hackers will not get access to your entire databanks. Use advanced encryption methods to make sure that even if information gets stolen, hackers will not be able to use it (and make sure your encryption software always has the latest update).

Finally, back up your data regularly. Cloud solutions such as Backup as a Service (BaaS) and Disaster Recovery as a Service (DRaaS) are the most efficient ways to ensure that this happens.

5. Set up strict limitations on company computers

Make sure your employees cannot install unauthorized software on company computers without the sanction from your system administrator. This will both help prevent malware from infecting your company’s network and reduce wasted time.

These days, cybersecurity can no longer be treated as an afterthought. A security breach can be catastrophic for any business, even those without a strong digital presence. The only way to protect yourself is to prepare and follow the advice above.

For more on this topic, read Cyber Security: Keeping Your Data And Online Possessions Safe.

Let’s block ads! (Why?)

Digitalist Magazine

Acronis raises $147 million for tools that back up, protect, and restore data

September 18, 2019 Big Data

Data recovery juggernaut Acronis today announced it’s nabbed $ 147 million in an investment round led by Goldman Sachs at a valuation of over $ 1 billion, following on the heels of angel, debt, and later-stage raises from March 2014 to May 2016. The capital infusion brings Singapore- and Switzerland-based Acronis’ total raised to well over $ 150 million, which founder and CEO Serguei Beloussov said will be used to expand its engineering team, build additional data centers, grow its North America business, and pursue acquisitions.

It’s been a banner year for Acronis, which reported 20% business growth in 2018 and which is on track to notch over 30% growth (and over 100% on the Cyber Cloud side of the business) by 2020. It recently launched the Acronis Cyber Platform, a holistic cloud-hosted solution that enables third-parties to customize, extend, and integrate its products. And in April, Acronis announced a partnership with Acronis SCS, an independent U.S. sister company dedicated to providing secure backup, data protection, and cyber protection services to federal, state and local government, education, and nonprofit organizations.

“We are excited about Goldman Sachs‘ investment,” said Beloussov. “The investment round led by Goldman Sachs will help us to fast-track the product development through acquisitions of companies and additional resources, and accelerate the growth.”

Acronis raises $147 million for tools that back up, protect, and restore data

Above: Acronis True Image.

Image Credit: Acronis

Acronis traces its origins to Parallels corporate parent SWsoft, where Beloussov, Ilya Zubarev, Stanislav Protassov, and Max Tsyplyaev founded it as a separate division in 2001. Acronis spun out in 2003, after which it pivoted focus from disk partitioning and boot loader utilities to backup and disaster recovery software based on disk imaging technology. Over the next decade or so, it acquired three firms — BackupAgent (which specialized in cloud backup), nScaled (disaster recovery), and GroupLogic (enterprise data transformation and storage) — and it launched a global partner program, prior to which it founded an R&D wing in Acronis Labs.

Acronis’ bread-and-butter segments are backup, disaster recovery, secure file access, sync and share, and partitioning, with clients ranging from single-license home users to large enterprises. True Image, the backup software by which Acronis is perhaps best known, uses virtualization and machine learning techniques to mirror images, clone disks, provide blockchain data notarization, and scan for malware in copied files. Acronis claims that last year, its AI-powered defenses defeated more than 400,000 attacks including cryptomining, in which a system’s resources are quietly diverted to generate cryptocurrency tokens.

As for the Acronis Cloud platform, it encompasses backups, disaster recovery, and file synchronization with a selected set of cloud apps curated by service providers. Plan subscribers can perform local and offsite cloud backup of disks, servers, data, or entire mobile devices to data centers compliant with certifications, audits, and standards including SOC-2, the Health Insurance Portability and Accountability Act (HIPPA), and the Payment Card Industry Data Security Standard (PCI DSS).

Acronis Backup and Acronis Backup Advanced, two additional products in Acronis’ disk-based backup and recovery suite, actively protect files from unauthorized modification and encryption while minimizing process disruption to a few seconds. Through a centralized management dashboard, admins can back up to virtually any kind of storage (across over 20 platforms) and convert backups into a set of virtual machine files ready to run on various hypervisors.

Above: One of Acronis’ U.S. offices.

Image Credit: Acronis

Aside from backup software, Acronis also provides Disk Director, a shareware app that partitions machines and allows them to run multiple operating systems. It’s able to format drives with system file in a range of storage formats, including FAT16, FAT32, NTFS, Ext3, and SWAP, and it can create a single, logical volume from the unallocated space across up to 32 physical disks.

Disk Director joins Acronis Snap Deploy, which creates a standard machine configuration that can be deployed across up to hundreds of live Windows computers simultaneously. Acronis Files Advanced secures access to files that are synced between devices. And Acronis Access Connect enables Mac users can connect to and mount directories on a Windows file server just as native Apple Filing Protocol volumes.

Acronis occupies a data backup and recovery market anticipated to be worth $ 11.59 billion by 2022, according to Markets and Markets. It competes to a degree with San Francisco-based Rubrik, which has raised $ 553 million in venture capital to date for its live data access and recovery offerings; Clumio, which raked in $ 51 million for its cloud-hosted backup and recovery tools; and Cohesity, which bills itself as the industry’s first hyperconverged secondary storage for backup, development, file services, and analytics. That’s not to mention data recovery juggernaut Veeam, which now serves 80% of the Fortune 500 and 58% of the Global 5000.

But vice president of Goldman Sachs Growth Holger Staude asserts that Acronis has rivals beat when it comes to install base and availability. The company counts more than 5 million consumers and 500,000 businesses among its client roster, including 80% of the Fortune 1000 companies. Moreover, Acronis’ products are available through 50,000 partners and service providers in over 150 countries in more than 30 languages.

“We are excited to invest in Acronis at this stage of rapid growth,” said Goldman Sachs Growth vice president Holger Staude. “The traditional backup and data protection market is changing due to an innovative solution delivered efficiently by Acronis Cyber Protection through a vast channel of service providers.”

Acronis has more than 1,300 employees in 18 countries, the bulk of whom are based in Singapore, Bulgaria, and Arizona. Acronis Labs is based in the U.S. and Singapore, and Acronis has data centers internationally including in France, Singapore, Japan, and Germany.

Sign up for Funding Daily: Get the latest news in your inbox every weekday.

Let’s block ads! (Why?)

Big Data – VentureBeat

Cybereason raises $200 million to protect enterprise endpoints in real time

August 6, 2019 Big Data

Cybereason, a cybersecurity platform provider based in Tel Aviv and Boston, Massachusetts, today announced that it’s secured $ 200 million in investments and commitments from Softbank and its affiliates, bringing the startup’s total raised to date to $ 400 million. Softbank previously led a $ 100 million investment in Cybereason in June 2017, contributing funds alongside investors CRV, Spark Capital, Lockheed Martin, and others.

With the newfound capital, Cybereason plans to accelerate R&D, pursue acquisition opportunities and strategic product integrations, and ramp up operations company-wide. It also plans to expand its partner program while continuing to build out its endpoint protection offerings, according to cofounder and CEO Lior Div.

“Cybereason’s big data analytics approach to mitigating cyber risk has fueled explosive expansion at the leading edge of the EDR domain, disrupting the EPP market,” said Div. “We are leading the wave, becoming the world’s most reliable and effective endpoint prevention and detection solution because of our technology, our people and our partners. We help all security teams prevent more attacks, sooner, in ways that enable understanding and taking decisive action faster.”

CTO Yonatan Striem-Amit added: “Autonomous security will democratize security and transform the cybersecurity profession. Cybereason will build it through its innovative products and a partner ecosystem.”

Cybereason — which made waves in June after uncovering a global espionage campaign involving major telecom companies — was founded in 2012 by Div, Amit, Yossi Naar and emerged from stealth in 2014 with $ 4.6 million in funding. Many of its employees served in the Israel Defense Forces’ 8200 unit, an elite group specializing in cybersecurity.

The company’s toolset helps to prevent known and suspicious threats across enterprise networks with a combination of behavioral analysis, heuristics, and machine learning, and with a robust activity-monitoring PowerShell and .NET framework engines. The suite relays detailed info from every network endpoint in real time, and it contextualizes security alerts with related attack elements like the root cause, affected machines and users, and incoming and outgoing communcations.

Cybereason’s analytics dashboard bubbles to the top whole process timelines, along with all malicious activity across PCs and internet of things devices. Using the insights gleaned from them, IT teams can craft within the platform custom rules and behavioral whitelists that don’t sacrifice context, or that kick off remediation actions for every attack.

On the antivirus side of the equation, Cybereason prevents malware, ransomware, and file-less attacks in part by analyzing binaries for hundreds of different warning signs, including (but not limited to) rapid file encryption, removal of backups, and modifications to the master boot record. The subscription-based Replay tool allows for historic event investigations without impacting performance, and it provides filters and functions to correlate anomalies affecting users or machines going back months or years.

Customers who take advantage of Cybereason’s managed service gain access to an external monitoring team that investigates the scope of intrusions and recommends courses of action (e.g., cleaning malware, killing processes, deleting registry keys, quarantining files, and more). Said team is able to find and resolve misconfigured services and detect the presence of critical security updates, and to examine environments for removable services and ensure password policies are up to date. For issues that aren’t routine, they perform investigations and intrusion analyses in addition to reverse engineering and root cause evaluations.

In a February 2019 test conducted by the nonprofit MITRE Corporation, which manages federally funded research and development centers supporting U.S. government agencies, Cybereason’s suite bested competitors on the ATT&CK framework, a freely accessible knowledge base of cybersecurity tactics. Moreover, Cybereason claims that in the case of one client, its platform decreased the false-positive rate from 99% to 1%.

Cybereason has no shortage of competition in a cybersecurity market that’s anticipated to be worth $ 300 billion by 2024. SentinelOne, a startup specializing in autonomous endpoint protection, raised $ 120 million in June from a raft of investors including Redpoint Ventures and NextEquity. More recently, Expel nabbed $ 40 million for its risk-monitoring and security information, event management, and automated endpoint security solution. And in late July, Trinity Cyber raised $ 23 million for threat-combating products that combine detection with “adversary inference.”

But it’s clearly doing something right. Cybereason claims that it currently protects millions of endpoints across companies including Motorola, Flowserve, and Oschener Bank, among other name brands.

“Cybereason plays a leading role in helping companies manage cybersecurity risks and protect people’s information,” said SoftBank Group chief operating officer Marcelo Claure. “AI-driven technology like Cybereason’s is helping secure our increasingly connected world.”

Sign up for Funding Daily: Get the latest news in your inbox every weekday.

Let’s block ads! (Why?)

Big Data – VentureBeat

Cybersecurity: How to Protect Yourself Online (Video)

July 7, 2019 FICO

Want to protect yourself online – and protect your family – from data compromise and identity theft?

FICO’s Doug Clare, vice president for cybersecurity solutions, offers some advice in this interview with NBC King 5 News in Seattle. He was interviewed in conjunction with his talk at the US Chamber of Commerce Cybersecurity Series, where he spoke about cyber risk and third-party risk management.

“It’s important for consumers to realize that when they do business with somebody, they may be doing business with more than one party,” Clare said. “Everybody’s got a supply chain.”

For consumers, protection means paying close attention. “It’s important to stay vigilant, particularly about email,” Clare said. “If you get an email with a link, check it out, and don’t click it until you’re sure. Make sure the email is coming from who you think it’s coming from, that the domain name on the email address is correct. Email is a big challenge, be careful.”

Clare also urged viewers, “Have that conversation with your kids and your parents.”

Third-party risk management is a hot issue in the world of cybersecurity, since vulnerabilities in a firm’s supply chain, partner or vendor networks can expose sensitive data. It’s estimated that half of all data breaches occur through third parties.

According to Ponemon Institute’s 2018 Data Risk in the Third-Party Ecosystem, more than 60 percent of US CISOs have indicated being the victim of a third-party breach incident.

More tips on how to protect yourself online are discussed in this blog post and video.

Let’s block ads! (Why?)

FICO

Best Practices for Implementing Payment Controls that Protect Accounts Payable

February 26, 2019 NetSuite

Posted by Scott Siegler, Content Marketing Manager, MineralTree

Fraud attempts are only getting more elaborate, especially in the world of B2B payments. Whether you are a large corporation, small business, nonprofit organization or even a political campaign, payments fraud is on the rise. The AFP’s annual survey reveals an increase in the prevalence of fraud for the fifth consecutive year, with 78 percent of businesses impacted by fraud last year.

AFP 2018 trend data Best Practices for Implementing Payment Controls that Protect Accounts Payable Photo: Association for Finance Professionals

B2B payments fraud is also getting attention from IT teams as it becomes more common. In fact, 85 percent of security professionals are not confident their companies have deployed sufficient technology to protect against payments fraud.

If you’re wondering why B2B payments specifically are facing escalating levels of fraud, look no further than the way businesses handle accounts payable today. Not only are accounts payable (AP) teams leaving room for error by entering invoice data manually and trying to juggle dozens of invoice approvals over email, but they also continue to rely on the riskiest payment method available — paper checks — in spite of very accessible alternatives.

Why Common Attempts to Mitigate Fraud Risk Fail

Most businesses have taken some measures to establish controls against payments fraud, but as we have learned, fraud risk is a tough lion to tame. This task requires more than an AP manager’s divided attention.

Common tactics companies deploy to attempt to protect against fraud include:

Checking the validity of invoice amounts by forwarding invoices through email to department heads who are working with the corresponding vendor.

Manually comparing invoices to their corresponding purchase orders.

Writing checks throughout the week and having the CFO sign them all en masse.

In theory, these practices are all good ideas to keep the accounts payable process secure, but they are challenging to maintain, especially as invoice volumes go up. If your AP approvals live in Outlook, it’s really easy for invoices to fall through the cracks and never get paid. It’s also easy to forge invoice approvals and very difficult to organize documentation of all approvals for quick access during audits. And when the final approval for a payment depends on the signature of a CFO, every batch of payments hinges entirely on the availability of the CFO (i.e., a lot of potential for bottlenecks).

Simple ways to effectively mitigate fraud risk

In spite of the complex approaches to mitigating fraud risk that people have employed so far, there are a few simple options companies can start taking advantage of today.

1. Transition to electronic payment methods

Unlike paper checks, electronic payments make a lot of sense for accounts payable teams to utilize because they mitigate fraud and increase efficiency.

First, electronic payments like ACH transfers add layers of security by encrypting payment data that is in transit. Virtual card technology goes a step further by employing tokenization, restricting each payment to a one-time use credit card number for a fixed transaction amount. In addition to improved security, electronic payment methods expedite the payment process across the board. More efficient payments open up the potential for you to take a more strategic approach to your payments, seeking opportunities to gain extended working capital benefits.

2. Segregate duties in the payment process

The same principle of checks and balances that keeps the United States government under control is a must-have in your accounts payable process. Segregation of duties is as simple as setting up a process where one person is responsible for queuing up business payments and another person is responsible for approving those payments before releasing the funds.

Has it ever made sense to give one person total autonomy over money coming in and out of a company’s bank account?

3. Automate accounts payable

While automated accounts payable has been an unfamiliar concept to businesses up to this point, many are realizing the opportunities it provides for greater security and efficiency and reaping the benefits.

An automated accounts payable process embeds payment controls — like the aforementioned segregation of duties — into the AP process and establishes them as simple and repeatable processes:

Segregation of duties: AP automation solutions designate separate roles in the accounts payable process by creating separate login credentials and separate dashboards. Not only does this make it incredibly challenging to forge approvals, but it also preserves receipt of all approvals in one central location for easy access at any time.

Dual-factor authentication: AP automation solutions require dual-factor authentication to decrease the probability of account takeovers. Every time someone logs in, they are required to not only enter their password, but a verification code delivered via email or text message, as well.

Auto purchase order match: For those businesses that leverage purchase orders, AP automation can take the pain out of matching them to corresponding invoices by doing it automatically and flagging any that are mismatched.

With these controls in place, it’s much easier to protect and sustain your AP process, even as you continue adding vendors on a monthly basis.

Posted on Mon, February 25, 2019
by NetSuite filed under

Let’s block ads! (Why?)

The NetSuite Blog

IBM i Security – 6 super short webcasts to help protect your iSeries

October 14, 2018 Big Data

Jamie Heckler

October 13, 2018

Over the last several months, Syncsort has run a series of 15-minute webcasts covering various topics across the broad realm of IBM i security. This short format has proven to be quite popular with our audiences. See what tips our experts have to share in these six 15-minute recorded sessions.

1. Accelerating Regulatory Compliance for IBM i Systems

Do you need to accelerate compliance for your IBM i systems? Whether it be for PCI, SOX, GDPR or other regulations, view this 15-minute webcast on-demand to learn more about the importance of security risk assessments for compliance, implementing compliance policies that align with regulations, and generating reports and alerts that flag compliance issues.Watch 15-minute webcast >

2. Assessing IBM i Security Risks

Are you concerned about the security of your IBM i, or its ability to pass your next compliance audit? This 15-minute webcast covers common IBM i vulnerabilities, key areas to examine as part of a security risk assessment, tradeoffs between in-house and third-party assessments, and going beyond assessment to remediation. Watch 15-minute webcast >

3. Detecting Fraudulent Activity on Your IBM i

This 15-minute webcast can help you detect fraud on your IBM i series, covering key IBM i log files, identifying security incidents in log files, consolidating IBM i log information under a common strategy with other platforms, and tradeoffs between do-it-yourself and third-party solutions. Watch 15-minute webcast >

4. Securing Sensitive IBM i Data At-Rest and In-Motion

View this 15-minute webcast on-demand and get up to speed on the key concepts you need to know to secure sensitive data on your IBM i servers, including topics such as FIELDPROC encryption and key management, tokenization & anonymization, tools for securing data in motion, and tradeoffs between do-it-yourself and third-party solutions. Watch 15-minute webcast >

5. Securing IBM i User Profiles

Do the right people have the right level of access to your system? Learn how you can strengthen IBM i user profile security, meet audit and compliance requirements and more, including reducing powerful profiles, implementing multi-factor authentication, and enabling secure profile re-enablement and password self-service. Watch 15-minute webcast >

6. Taking Control of Access to Your IBM i Systems and Data

View this 15-minute webcast to learn how exit points provided by the IBM i OS can be used to monitor and secure access to IBM i systems and data. During this webcast you’ll learn more about securing network access and communication ports, securing database access, and securing access to commands. Watch 15-minute webcast >

Bonus! IBM i Security Best Practices

Ok, so some topics are just too big for 15 minutes. In this hour-long webinar, Jeff Uehling shares what he’s learned over the past 30 years regarding IBM i security best practices. See why you need to run at security level 50, how to detect and prevent programs that could compromise system security, and what to consider for mobile deployments. Watch the webcast >

Let’s block ads! (Why?)

Syncsort Blog

Tag Archives: Protect

Manage Devices and Protect Your Organization with Microsoft Endpoint Manager (aka Intune)

CLICK HERE – To see full article

Sonrai Security raises $20 million to protect public clouds with automation

How to Protect Dynamics 365 Documents in SharePoint From Misuse

Dynamics 365 Documents in SharePoint

A Solution That Fits The Problem & The Current Crisis

Protect the Restaurant Guest Experience During the Holidays

5 Ways To Protect Your Business From Cybercrime

1. Keep all software updated and regularly patched

2. Invest in a reliable VPN

3. Educate and train your staff

4. Divide, encrypt, and back up sensitive data

5. Set up strict limitations on company computers

Acronis raises $147 million for tools that back up, protect, and restore data

Cybereason raises $200 million to protect enterprise endpoints in real time

Cybersecurity: How to Protect Yourself Online (Video)

Best Practices for Implementing Payment Controls that Protect Accounts Payable

Why Common Attempts to Mitigate Fraud Risk Fail

Simple ways to effectively mitigate fraud risk

1. Transition to electronic payment methods

2. Segregate duties in the payment process

3. Automate accounts payable

IBM i Security – 6 super short webcasts to help protect your iSeries

Jamie Heckler

1. Accelerating Regulatory Compliance for IBM i Systems

2. Assessing IBM i Security Risks

3. Detecting Fraudulent Activity on Your IBM i

4. Securing Sensitive IBM i Data At-Rest and In-Motion

5. Securing IBM i User Profiles

6. Taking Control of Access to Your IBM i Systems and Data

Bonus! IBM i Security Best Practices

Recent Posts

Categories

Archives