Publish Date
25/07/2024
Categories
Blogs Hot Topic
The recent CrowdStrike failure was indeed an unfortunate event, causing significant disruption across many organisations. However, it also provided a stark illustration of the potential consequences when critical systems are compromised. Unlike a cyber attack, this outage demonstrated how even non-malicious failures can have far-reaching impacts.
Downtime, regardless of its cause, can have devastating effects on a business. These range from loss of revenue and inaccessible data to diminished customer confidence and, ultimately, loss of business.
In the case of ransomware attacks, the impact can be even more severe, comparable to the dreaded “blue screen of death” experienced worldwide last week. While a blue screen may have straightforward solutions, ransomware attacks often leave organisations without viable workarounds. This leads to significant operational disruptions, data loss, and financial repercussions. Essentially, a ransomware attack is like a blue screen of death—for all the data in your business.
The CrowdStrike outage affected a vast number of users, highlighting the vulnerability of even the most robust systems. The incident underscored the critical need for businesses to have strong cybersecurity measures in place, not only to prevent attacks but also to ensure quick recovery from unforeseen failures.
The financial impact of IT downtime is staggering. According to a report from MSN, companies are losing billions every year due to IT downtime. This loss is not just due to ransomware but also from unexpected system failures, like the one experienced by CrowdStrike. Despite these recurring issues, many organisations are not improving their ability to fix such problems promptly.
However, the facts show that the chance of downtime is increasing, with the ‘it’s not if, it’s when’ mantra commonplace amongst cyber security experts.
According to the Hiscox Cyber Insurance Readiness Report 2023:
These statistics emphasise the critical need for robust cybersecurity measures and quick incident response protocols.
This recent event has served as a wake-up call for businesses to reassess their IT strategies. It is crucial to invest in robust protective measures, proactive threat detection, and swift incident response protocols. Many organisations operate under the false assumption that “it won’t happen to us” until it does. The CrowdStrike outage is a powerful reminder that downtime can strike any business, at any time.
Who is Responsible?
It’s essential to have clear accountability within your organisation for managing cybersecurity risks. Typically, the IT Lead is responsible for the overarching cybersecurity strategy. However, every employee has a role to play in maintaining security protocols and reporting suspicious activities.
As Microsoft advises,
“In the event of an outage or disruption to the Service, you may temporarily not be able to retrieve Your Content. We recommend that you regularly backup Your Content and Data that you store on the Services or store using Third-Party Apps and Services.”
This highlights the importance of regular data backups and having a well-defined disaster recovery plan in place.
Lessons Learned and Moving Forward
The disruption experienced during the CrowdStrike failure serves as a sobering reminder of the critical need for robust protective measures. To mitigate the risks associated with IT downtime, businesses should consider the following steps:
Conclusion
In conclusion, the CrowdStrike outage has provided valuable lessons on the cost of downtime. No one thinks it will happen to them—until it does. By learning from these experiences and taking proactive measures, businesses can better safeguard their operations and minimise the financial and operational impact of future disruptions.
As a Managed Service Provider (MSP), we are committed to providing and maintaining secure and resilient IT infrastructures. If ever there was a wake-up call required around the impact of downtime, last week provided a stark reminder. If you are interested in mitigating the risk of downtime, and want a no obligation discussion around email security, backup & disaster recovery, or security awareness and testing for staff, please fill in this form.
Stay Secure.
Publish Date
28/05/2024
Categories
Blogs
Keeping your business safe from cyber threats is a top priority in today’s digital landscape. One key aspect of this is ensuring your systems are regularly updated with the latest patches.
Cyber attackers often exploit vulnerabilities left unaddressed by outdated software, leading to potential financial losses and breaches for businesses. Addressing these vulnerabilities through regular patch management is crucial.
In a 2019 survey conducted by Ponemon Institute, 60% of breach victims said they were compromised due to known vulnerabilities they didn’t patch. In 2021, Microsoft found that more than half of known network vulnerabilities were due to missing patches, and a staggering 68% of organisations hit by ransomware lacked effective patch management. Clearly, patching is an absolute necessity for any business when it comes to their cyber security.
Patch management involves the timely deployment of updates by third-party applications to address evolving vulnerability gaps. This ensures that the software remains resilient against potential security breaches, mitigating the risk of exploitation by malicious actors.
By promptly applying updates as they become available, organisations can minimise their exposure to vulnerabilities, reducing the window of opportunity for a breach. Basically, you’re keeping your digital defences up-to-date to ward off potential attacks.
With technology advancing rapidly, cyber threats are becoming more sophisticated, especially with the rise of AI. Attackers can now exploit vulnerabilities faster than ever, meaning developers are having to constantly release patches where there may be a security gap.
While patching manually is possible, it can be time-consuming and prone to delays which is not ideal when it’s neck and neck between you and a potential cyber-attack. In fact, it is estimated it takes 28 days to patch once a high-risk vulnerability is detected on-premises.
On the other hand, automating patch updates streamlines the process, ensuring your systems stay protected without the risk of human error. Just remember to plan out these automatic patch updates so that you have the least amount of disruption for your business as possible. Not only does then mean less downtime for your business, but your IT team will have greater internal availability for other projects.
It may not always be possible with every application to just ‘automatically patch’. But if external management is the route you want to take, you could consider working with a managed service provider (MSP) to ensure seamless patch management.
Integrating patch management into your IT strategy is crucial for maintaining security best practices. Partnering with an MSP that offers automated patch management, along with device management and proactive monitoring, ensures your systems are always protected.
At Cobweb, we provide a comprehensive Microsoft managed service with third-party patch management for over 1500 applications. Our experts will handle the patching process, freeing you to focus on your core strengths and responsibilities. Learn more here about our managed services to keep your business secure and resilient.
Thursday 13th June 2024 @ 3PM
Publish Date
21/05/2024
Categories
Blogs
No longer should IT roles just be ‘behind the scenes’. IT leadership is about driving innovation and creativity for business growth. And yet, only 9% of IT leaders perceive their role as directly contributing to business expansion. Traditionally, this may have been the case, but with how fast the online world changes, you need to keep on top of new technologies and innovative IT to stay ahead of your competitors.
Gone are the days of IT leaders simply ‘keeping the lights on’. Now, they’re expected to be strategic thinkers, innovators, and agents of change. That means focusing on initiatives that align with the organisation’s big-picture goals and finding ways for technology to drive business growth.
Budgets are tight, so IT leaders need to be clever about where they invest their resources. It’s all about finding the right balance between thinking outside the box and staying efficient. Whether it’s investing in cloud technology or data analytics, every penny spent should have a clear impact to the business’s short and long term goals.
Measuring the impact of tech investments can be tricky, but it’s essential for proving their value. That means setting measurable goals and tracking progress every step of the way. Whether it’s improving customer satisfaction or boosting sales, IT leaders need to show that their initiatives are making a difference.
AI and automation are changing the game for IT leaders, offering new ways to boost efficiency and productivity. But it’s not just about implementing the latest technology—it’s about empowering departments to use it effectively. That means investing in training and creating a culture that embraces new ideas for the better of the business.
Due to the nature of business, IT leaders need to keep customers at the front and centre in everything they do. That means working closely with other departments to understand their needs and delivering experiences that exceed expectations. Happy customers mean business growth, plain and simple.
Change is inevitable, especially when it comes to technology. Technology managers and leaders need to be ready to adapt and evolve, constantly looking for new opportunities to drive growth. Your business needs to stand out, look professional and show off that it’s ahead of the game!
Essentially, the role of IT leadership is more critical than ever in driving business growth and innovation. By thinking strategically, making smart investments, showing tangible results, embracing automation, putting customers first, and embracing change and leveraging new technology, IT leaders can help their organisations thrive in today’s fast-paced digital world.
Consider emails, for instance. Typically, we glance over the content before our eyes settle on the conclusion. Which is more memorable? A simple black text signature, or a vibrant, branded e-signature complete with relevant social media and website links? Exclaimer is an innovative strategy to drive business growth through an email signature management platform. With the user-friendly platform, IT leaders can ensure brand consistency, boost productivity, and drive business growth with ease. And this is only one example at a relatively low cost!
Remember, to drive business growth, you need to stand out and be different. You need to leave an impression, and so implementing creative technologies into your business strategy is crucial.
Publish Date
13/05/2024
Categories
Blogs
The IT infrastructure within your organisation is crucial for its success in today’s digital era. Business expansion is heavily dependent on the effective utilisation of technology to make a significant impact and the companies that excel are those that employ technology most innovatively and have the time to manage it.
However, with the UK grappling with significant issues like the skills shortage and the rising cost of living, the ability for many businesses to invest in IT to the necessary extent for success is becoming increasingly challenging.
But what about opting for a service which offers the same efficiency, practicality, security and expertise of an in-house IT team? This is a managed IT service. It’s like having an IT manager 24/7, who never leaves or goes on holiday, is never sick and yet costs only a fraction of what it would to hire one.
To remain competitive, your business must operate efficiently. A lack of efficiency can cause your entire operation to decelerate, preventing it from being well-equipped to handle the workload and challenges of a modern business environment.
Without an expensive IT department, maintaining efficiency is difficult. One IT technician or a small team may not suffice for all your requirements and they are often restricted to assisting just one or two individuals simultaneously, decelerating your operations and possibly resulting in greater downtime. Time is money after all!
Choosing a Managed IT Service resolves this issue at a minimal cost, providing on-demand access to a full team (which should possess strategic vendor relationships to expedite recovery times) without the need to enlarge your IT staff. Essentially, it grants access to IT specialists, enhanced security, and rapid resolution times, all while being more cost-effective than hiring and expanding your IT team.
For many businesses, budgeting for IT can be challenging due to the skills shortage, making it hard to find the right employee and agree on a wage that satisfies both the business and the individual’s needs.
Opting for a managed IT service, businesses only need to pay a pre-agreed service charge per term, gaining access to a team of experts and continuous support. This team can function as an extension of your existing IT department, liberating resources that can be redirected towards business growth.
Having access to IT expertise can provide your business with a competitive advantage. You will receive guidance on the latest technologies that can drive organisational change, enabling you to leverage tools like AI and business process automation (BPA) effectively.
The support of a knowledgeable team from a managed IT service provider ensures that you receive comprehensive assistance and can resolve issues swiftly, minimising operational downtime.
Much like security cameras monitoring your home 24/7, a Managed IT service will proactively monitor for any suspicious activity within your own digital environment, to mitigate malicious actors causing harm to your organisation’s data.
Protecting your business around the clock is a resource most businesses simply don’t have without using Managed IT services. Even if you employ an IT specialist to monitor your organisation’s security, there will be times when they are not available and need to go home. However, a Managed Service provides continuous 24/7 monitoring and ensures that new security patches and updates are applied promptly, so your business is never left exposed.
Managed IT service providers can also help you understand compliance regulations and provide advice to ensure you’re not violating these regulations. This helps to prevent noncompliance, which could lead to litigation consequences.
We’ve seen why IT for businesses can be costly. A managed IT service removes this stress and gives you access to a team of experts who work in the background and can help whenever you need it.
Check out Cobweb’s award winning managed services! We’ll be able to work with you and guarantee that your organisation has everything it needs to grow, as well as take care of anything else that you may require.
We’re Your Team, Extended.
Publish Date
29/04/2024
Categories
Blogs
In the ever-evolving landscape of digital transformation, where businesses and individuals increasingly rely on online platforms for their daily operations and transactions, the risk of falling prey to sophisticated cyber threats has escalated. As a Managed Service Provider (MSP) committed to safeguarding your digital journey, we believe it’s imperative to address a crucial aspect of cybersecurity: the normalisation of discussions around online scams. It’s not a matter of if you might encounter a scam or attack, but when.
Online scams have undergone a dramatic evolution, leveraging advanced technology and psychological tactics to exploit vulnerabilities. These scams range from phishing attempts that mimic trusted entities to elaborate schemes promising high returns on investments. It’s essential to understand that these scams are designed to deceive, making no one immune to their traps, regardless of their level of digital savviness or intelligence.
There’s a pervasive stigma surrounding victims of online scams, often tinged with embarrassment and self-blame. This sentiment stems from a misconception that falling victim to a scam is a sign of naivety. However, the real danger of this stigma lies in its potential to deter victims from reporting these incidents, thereby hindering their recovery process and allowing scammers to operate with impunity.
As your MSP, we are on the front lines of your digital security, and part of our mission is to change the narrative around online scams. Here’s how we’re doing it:
Proactive Communication: We are committed to keeping you informed about the latest scam tactics and preventive measures. Regular updates and educational content are part of our strategy to empower you and your team, ensuring you’re always a step ahead.
Offering Robust Support Systems: Our dedicated support team is here to assist you in the event of a scam. From identifying the breach to navigating the recovery process, we provide the resources and expertise needed to minimize the impact on your operations.
Emphasising the ‘When’ Not ‘If’: We operate under the premise that encountering online scams and attacks is a matter of ‘when’ not ‘if’. This mindset is crucial for developing robust prevention strategies and resilience against potential threats.
Advocating for Transparency and Reporting: Encouraging transparency and prompt reporting of scams within your organisation can significantly mitigate risks. It also plays a vital role in our collective efforts to combat online fraud, enabling us to update our defensive measures in real-time.
Educating your business: We work with leading awareness training companies to provide cost effective training and education, and threat simulations to your employees. We help you prepare for the ‘when’, meaning these threats will go no further.
Managing Your Services: Our management of the products we provide, such as Microsoft 365, Azure, Acronis, and Mimecast & KnowBe4 means that threats are being monitored and dealt with by experts who work in this field day in and day out. They are also the most up-to-date on changes to products and licenses and evolving threats.
Together, by fostering an environment of openness, education, and support, we can strengthen our defences and maintain the integrity of our digital ecosystem. Remember, in the realm of cybersecurity, preparedness and partnership are our most potent weapons.
Publish Date
09/04/2024
Categories
Blogs Hot Topic
There is often great debate about creating backups for data in services such as Microsoft 365 Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams. The common assumption amongst many is that Microsoft backsup, so everything is covered.
When explaining that 3rd party backup provides a more holistic, secure safety net for your business, customers often tell me, “you would say that, you want to sell more products!” But there’s usually one response that gets their attention:
Microsoft’s shared responsibility model firmly puts data in the court of the user. Microsoft have got you covered when it comes to Global Infrastructure, Uptime and Cloud Service. But access and control of data in your M365 tenant? That’s on you.
In an on-premises data centre, you own the whole responsibility stack. As you move to the cloud, some responsibilities transfer to Microsoft. The following Microsoft diagram illustrates the areas of responsibility between you and Microsoft, according to the type of deployment of your stack. Note that your businesses setup, data, devices and accounts & identity remain your responsibility.
As a Microsoft 365 user, you act as the data custodian. Your main task is to ensure that your data is not only accessible but also securely backed up, separate from Microsoft’s cloud infrastructure and ready for recovery whenever necessary. Microsoft actually state this in their Service Agreement under section 6b:
“In the event of an outage or disruption to the Service, you may temporarily not be able to retrieve Your Content. We recommend that you regularly backup Your Content and Data that you store on the Services or store using Third-Party Apps and Services.”
Microsoft Service Agreement, Section 6b
Dependence on Microsoft for all aspects of data recovery, especially in scenarios like data deletion or security breaches, is risky. Microsoft’s built-in safeguards, such as recycle bins and retention policies, are meant for short-term fixes and may not suffice for comprehensive data recovery strategies.
Statistics reveal a troubling trend: a significant portion of businesses experience data loss or corruption within their SaaS applications, including Microsoft 365. The reality is stark – recovering 100% of data without a dedicated backup solution is often unattainable.
Opting to backup Microsoft 365 data with a third party solution such as Acronis safeguards against data loss and cyber threats. Cobweb’s alignment with Acronis for its backup solutions reflects a commitment to delivering advanced, secure, and dependable data protection services, enabling businesses to operate confidently in the knowledge that their cloud data is comprehensively secured.
If you’d like to learn more about M365 and backup, we’re hosting a virtual roundtable on the 2nd May with Microsoft MVP Andy Malone and Acronis experts. To sign up, please click here.
Publish Date
27/03/2024
Categories
Blogs
Creating a solid cyber security strategy is crucial, especially in the face of the rising threat of ransomware which has surged by 13% in the last five years. Recent data reveals that 4 in 10 victims fail to recover their data after an attack, and 1 in 5 organisations forced to deal with ransomware had to halt their operations.
While these statistics might seem daunting, having a plan in place is your best defence. The prospect of an attack becomes even more dangerous when you lack a comprehensive response strategy.
At our most recent networking event, Cobweb Connect, we had the privilege of hearing insights from Sarah Armstrong Smith, Microsoft’s Chief Security Advisor for Europe. She delved into incident response and crisis management, stressing the importance of preparing your employees to handle breaches. It’s safe to say our attendees absorbed a lot from Sarah’s experience, underscoring the need for decision makers to grasp the potential consequences of not having solid plans or incident response protocols in place.
So, how can you effectively prevent, detect, and respond to a ransomware attack?
Understanding how to safeguard against ransomware risks is essential, and a Managed Service Provider (MSP) can help ease these concerns. With Cobweb as your MSP, you can concentrate on your core business while we manage and monitor your IT systems, enhancing security. Our proactive approach shields your devices, endpoints, gateways, and cloud services from potential threats. Contact Cobweb to explore how our MSP solutions can fortify your cyber defences and become part of a community dedicated to a risk-free digital future.
Recent Comments