cybersecurity Tag

04 Nov

Posted at 15:29h in averynormal blog by
0 Likes
In a modern world that relies heavily on agility, connection, and collaboration. It seems like the digital transformation would be the perfect way to adapt to the modernizing world.  Unfortunately, here are 4 ways your digital transformation is a huge cybersecurity risk to your organization. 

1. Cloud services are not as safe as you think

cloud-computing-cyber-security-risk-organization Cloud services like Dropbox, Office 365, and Google Drive are becoming increasingly popular in the workplace. In a workplace that relies a lot on collaboration, the list of pros for cloud services are endless. Some of the more common pros include: 
  • Improved disaster recovery: With the help of cloud services, you’re able to backup some of the more important documents your organization needs. This could come useful in case a major security breach has occurred.
 
  • Better security: According to RapidScale, 94% of businesses have experienced improved security after switching to cloud services. Whilst cloud services will not protect an organization from internal security theft and/or breaches, encryption does make protected information less accessible to potential hackers.
 
  • Better collaboration: A large enterprise might find cloud services to be a lot more useful compared to smaller startups. With cloud services, individual team members can view and share information easily amongst one another on a specific cloud service platform (e.g. Google Docs).
 
  • More affordable: Cloud services allow organizations to access a number of collaborative services for cheap. Instead of purchasing and installing various hardware, businesses will simply have to pay for a cloud service online and then download it to install. It cuts down the amount of manpower and downtime needed.
However, despite these cheery positives. Cloud services still pose a threat to organizations. A number of major companies have experienced breaches to their cloud data. Some popular names include Microsoft, Dropbox, Linkedin, WWE (World Wrestling Entertainment) and Yahoo, to name a few.

Some of the more commonly known cyber threats associated with cloud computing include:

 
  • Malware attacks
 
  • Internal hackers
 
  • Cloud service specific cyber threats: EDoS, a.k.a. Economic denial of sustainability is a form of DDoS attack. An EDoS attack exploits the features of a specific cloud service leading to a large cloud adopter bill. The cost could potentially be large enough to cause either a withdrawal or bankruptcy. Learn more about EDoS here.
 
  • Shadow applications: Shadow applications are programs that have been installed onto a computer system without the user’s knowledge and consent. Often times, cloud services are being installed and used in a computer without the knowledge of the IT department. Therefore, no one is really responsible for investigating the origin of the application and whether or not the data stored in it will be encrypted. Or what happens to your data? Can you get it back?
  So although cloud services makes the collaborative and the digital transformation easier. It is also a huge cybersecurity risk as there is a potential for the data to be redistributed to other unknown computers.   

2. Chat applications might provide too much transparency

messaging-apps-cybersecurity-risk If you’re a millennial, chances are you’re no stranger to online chat rooms and chat applications. But applications such as Google Chats, WhatsApp, and Telegram are becoming increasingly popular in the workplace. Don’t blame your team members, these apps are fast and they send everything the team needs immediately to one another. However, when it comes to ease and free software, there’s always risks. Some of the more commonly known security threats to these chat applications include:  
  • The spread of malicious content: Thanks to the ease and the lack of awareness when it comes to chat applications. It makes it very easy for malicious files, images, and URLs to spread quickly. It is also easier for user error to spread on messaging applications. Keep in mind that no matter how rigid a business policy is, or how strictly a security protocol is followed. There is still room for human error to occur. Apart from the spread of malicious content, there is also a potential for accidental disclosure.
 
  • Lack end-to-end encryption: Depending on the type of chat application you’re using, some messaging apps do offer end to end encryption. However, there are other messaging apps that allow transparency to occur. Which means that some messaging apps allow employees an inside look into all the communication done by their employees. 
  However, the risks associated with chat and messaging apps can be significantly reduced with a proper protocol in place. Monitoring what employees can and cannot discuss on these chat apps also reduces the risk of a data breach. Additionally, listening to the advice of the IT department and following their advice can help reduce the risk of downloading and utilizing a scammy messaging app.   

3. More data stored makes you a better target

stored-data-makes-you-better-target-cybersecurity-risk In a world driven by revenue and profit, one of the main aims of digital transformation is to engage better with their customers. In fact, in a study conducted by MIT, companies that have embraced digital transformation are 26% more profitable than those who don’t. Mobile apps and CRM systems are just some methods that companies use to engage with their customers. Unlike the days of yesteryear, customers today do not stay in one single channel. They shop online, save and share product images for their peer’s opinions, and even share feedback and ask questions on any social channel made available to them. All of which makes you a better target. Remember, customers who need to create profiles to access your storefront are allowing you to store valuable data. Of course there are some preventative methods you can take to prevent a data breach. Some methods for you to protect valuable customer data include:    
  • Restrict access: One way to prevent internal data breaches is by simply restricting the amount of access an employee has. Set your programs and systems in a way where each employee only has access to whatever is relevant to their job. This also allows for easier accountability to take place in case a breach occurs, and allows you to control where the data travels to.
 
  • Manage your data: Delete unused data from view to prevent it from being regurgitated. Store and keep unused data and files in a separate server to prevent any potential breaches from occurring. 
  At the end of the day, there are many risks and perks to digital transformation. What matters is having the support of a strong IT team that is capable of handling your organization’s digital transformation.

30 Oct

Posted at 15:25h in averynormal blog by
0 Likes
find-tech-recruiter-how-to-singapore Finding a reputable tech recruiter might be one way to solve your job hunting woes. Imagine this scenario. You’re actively looking for a new position. But you have a full-time gig. You’ve heard horror stories about tech recruiters in Singapore, but you figured, you’ll give this a shot. How do you find a trustworthy and reputable recruiter? 

Why you should use a tech recruitment agency 

You’ve heard about the cybersecurity talent brain drain. But did you know that finding and hiring the ideal job candidate is tough for all industries? Which is why a number of companies are employing the help of recruitment firms in Singapore. Here are some reasons why you should use a tech recruitment agency:
  • Save time: Finding the right candidate is a tough, time consuming process. Agencies help your employees save time to focus on more important responsibilities on hand. Additionally, agencies spend most of their time sorting through CV’s. They might already have your ideal candidate waiting for the right job. Which can help you save additional recruiting time!
 
  • Better candidate quality: Unfortunately, not all HR executives and hiring managers are trained to hire for tech and cybersecurity specific roles. Especially in a non-tech organization. Turning to an IT recruitment agency in Singapore might just be the answer to finding a trained candidate.
 
  • Additional security: Here’s the thing, candidates are flaky people. You might have invested all that time finding the right hire...only to have them drop out at the very last minute. And you’re back to square one. Outsourcing your hiring needs will not only help you save time. But a recruitment agency will be able to provide additional candidates to help fill your job opening, should a candidate drop out during the interview process. 
  Are you interested in outsourcing your hiring needs to a reputable tech recruitment firm? Follow our guide below for information on how to find the best recruiter for tech:   

1. Find recruiters with active knowledge in the tech industry

Here’s one thing you might not be aware of: not all recruiters in Singapore charge a premium. However, they might be charging another precious item: your time. Which is why, finding a recruiter with an active and working knowledge of the tech industry is imperative!  Most recruiters are pattern matches. They’re looking for matching words, skills, and languages on resumes that meet the criteria the clients are looking for. Think of recruiters as scanners - who spend their day reading through hundreds of CV’s each day. Unfortunately, it is hard for “scanners” to find some candidates positions. A good tech recruiter is someone who is a great “scanner” and a technician. They’re also great communicators; a skill not many in the recruitment field is equipped with. 

2. Ask for referrals 

After all, we live in a modern world where reviews and referrals are number one. However, whether or not a good tech recruiter will come through your referrals, depends on how strong your professional network is. Linkedin is a good way to find referrals as well as suggestions, comments, as well as reviews to help you find a tech recruiter. Alternatively, a quick Google search could also provide you with some great results. 

3. Think like a candidate

A good recruiter will hire good job candidates. Which is why it pays off if you start thinking like one. Job portals are a good place to help you find a reputable recruitment agency, but websites like Linkedin might also be useful. A simple search of the term “recruiter” and even “tech recruiter” on Linkedin might be a good way to kick things off. Networking is also a useful method to find trustworthy tech recruiters. Keep in mind that recruitment agencies are also on the lookout for clients (you)! An easy way to network with recruiters is by attending local tech conferences and events. We guarantee you’ll gather a number of business cards to exchange!

4. Follow the creative “yellow brick road”

Here’s the thing, recruitment agencies want to be found. Both by candidates and of course, potential clients. One way for agencies to stand out amongst other competitors online is by creating content (i.e. articles and videos). A quick YouTube and Google search for recruitment and tech related articles might lead you to your ideal recruiter.
Read More: A Very Normal Company’s Tech, HR, and Recruitment focused Blog 

5. Find a recruitment agency with the ideal working culture 

The best recruiter is one that thinks and hire like you would. Which is why we believe that finding a recruitment firm whose working culture meshes well with yours is a good way to determine that. Thankfully, with the help of social media, you’ll be able to get a glimpse into the working lives of some well-known recruitment companies. Pro-Tip: This will also be a great time to find out if the agency has a good social media presence. Ideally, you should pick an agency with a regular posting schedule, as well as great social media presence. Additionally, agencies with a bigger following usually means that it has access to a larger pool of candidates. 

6. Compare prices 

Like any form of service out there, the best recruitment agency is useless if you cannot afford its services. Which is why we recommend seeking pricing quotes from several agencies to help you compare the prices. Recruitment agencies rarely advertise their prices on their websites. The best way to find out the price tags of such agencies is by making an appointment. What you should do is prepare a list of a few relevant agencies and send them an inquiry. Don’t forget to ask for detailed information such as services, terms, and prices. 

7. Check the expertise

You’re almost there! The last and final thing to do is to check out the expertise of your top agencies. Research is key to helping you find the best tech recruiter for your organization. Look out for client testimonials, client list, and candidate testimonials. These are telling signs to help you decipher if the agency has the required expertise and experience to hire for your organization.  Was this article helpful? Let us know in the comments section below! Click here to collaborate with A Very Normal Company. We’ll help you find the candidates needed for any open IT, tech, and cybersecurity related opportunities.  

11 Oct

Posted at 09:19h in averynormal blog by
0 Likes
As Gen Z youths are starting to infiltrate the job market, so are some of the biggest security threats your business will experience. You heard us correctly, younger generations, are the biggest security threat to your business. Especially Gen Z employees, who despite being the most technologically savvy generation are also dubbed the most ignorant.

Who are the Gen Z’s? 

Generation Z typically refers to the kids born between 1995-2010. They’re the generation right after the Millennials. This is the generation raised on smartphones and tablets, social media and the internet. Coincidentally, this is the reason why Gen Z individuals are true digital natives.

Difference between a Gen Z and a Millennial employee

The one major difference between a Gen Z and a Millennial employee is this; millennials witnessed the rise of technology and played a major role in developing it. Whilst Gen Z individuals had widespread access to technology from their early years. Gen Z’s comfort with both the internet and the digital world could be one of the reasons why they’re overconfident with digital safety. Think about it, the more comfortable you are in an environment, the less guarded you’ll be. Some terrible cybersecurity habits from Gen Z include:
    • 78% of Gen Z employees tend to reuse the same passwords across different online and social media accounts. Interestingly, only about 60% of Baby Boomer employees admit to password resume.
 
    • Only 44% of Gen Z employees understood what the term phishing means. However, 71% of Gen Z’s are confident that they will not fall for a phishing scam.
 
    • Gen Z prioritizes personalization over privacy. Compared to their Millennial counterparts, Gen Z individuals are more willing to share personal data with strangers online, for a more predictive experience. In short, Gen Z does not value personal online security as stringently as Millennial employees.
 
    • Poor social media hygiene. Thanks to this generation’s obsession with personalization, social media apps have devised methods to help personalize the consumer experience. Which means that Gen Z’s are more inclined to geotag images shared online. In the wrong hands, the metadata can be used by cybercriminals to track where you live - and wreak havoc on the devices both at home and your workplace. See: Internet of Things
 
    •  
    • Inclusive generation. Perhaps too inclusive. To digital natives, there is no difference between the friends they meet online and the friends they made in the physical world. If they’re in it for the long run, attackers might be able to befriend a Gen Z employee online, to gain access to incriminating company details.
 

How to Prevent Cybersecurity Threats when Managing Gen Z Employees

Now that we understand how the youth operates. How do we help them prevent cybersecurity threats? Some ways you can do so include:
  • Education: One way to solve Gen Z’s ignorance towards cybersecurity is by educating them. Whether you choose to teach your newbie employees about the threats of connecting to unsecured wifi. Or the dangers of spilling confidential workplace information to strangers on the internet. Learn more about why cybersecurity should matter to HR personnel, too.
 
  • Encourage 2FA: As a self-described Gen Z employee, I didn’t know about the importance of two-factor authentication. I mean, who would want access to all the unfinished drafts and client requests in my Google Drive right? But 2FA is simply a second layer of security that makes it harder for an attacker to access your data. In fact, 2FA should be implemented no matter how strong your password is. Here are some worrying facts about traditional security: A. 90% of passwords can be cracked in under 6 hours B. Two-thirds of internet users use the same passwords everywhere C. Smart cyber attackers have the power to test billions of passwords  Learn more about how to better protect your password here.
 
  • Introduce Unique Best Practices: As an HR representative, it is up to you to create and introduce the best cybersecurity practices that best fit your employees. For instance, focus on the idea of “Digital Trust” when dealing with Gen Z employees. This is a generation that is more conscious of their actions over the internet. 72% of Gen Z worry that their online actions, such as their social media posts and online purchases will affect their job purchases.  Creative problems require creative solutions. Gen Z is a group that is obsessed with personalization. Maybe, you should give them personalized solutions as well. Learn more about the best cybersecurity practices every HR employee should know here. 
What are some unique ways of managing Gen Z employees and their lack of cybersecurity skills? Share them with us in the comments section below!