Tag Archives: security

Podcast & transcript: What Business Owners need to know about Hacking threats

IT expert Darren Coleman of Coleman Technologies

In this episode of Two Way Traffic wealth management advisor Darren Coleman — who specializes in cross-border financial issues — discussed IT security with his namesake, Darren Coleman. Darren is founder of Coleman Technologies Inc., which handles IT managed services and cyber services. The latter Coleman – he’s been called Canada’s top IT expert – leads a team of technicians based in Langley, BC and Dallas, Texas. He says hacking is a trillion-dollar industry and business owners should take note.

Podcast host Coleman drew parallels between financial services and cybersecurity. He said he looks for gaps in a client’s financial plan, while in cybersecurity Coleman the IT expert looks for gaps or vulnerabilities in multi-factor authentication, threat protection to ensure business resilience, and endpoint protection (cybersecurity software that protects from viruses, malware and ransomware).

The two agreed what’s necessary in both their industries is prevention and managing risk. Another point is that Canada and the US have different tax regimes, and different laws for regulatory compliance.

“The U.S. government can gain access to your data if they want it,” said IT expert Coleman. “We believe the Canadian government can’t, but there are ways they can get it too.”

Their discussion explored …

  • Why clients of wealth management firms are good targets for hackers and what to do in a security breach when asked to pay a ransom.
  • How multi-factor authentication can prevent 99% of email breaches.
  • Why organizations devote too much security attention to senior management and not enough to everyone else.

Here is a link to the podcast …

https://podcasts.apple.com/ca/podcast/the-business-of-hacking/id1494816908?i=1000672496679

Darren Coleman of Raymond James [Darren Coleman or Darren #1 henceforth]

Welcome back to another edition of Two Way Traffic, the cross-border podcast. Today my guest is now, let me see if I pronounced your name correctly. Darren Coleman.

Darren Coleman of Coleman Technologies [Darren C #2 henceforth]

You got it.

Darren Coleman

So you and I are namesakes. You run a firm in Langley, BC called Coleman technologies and do outsourced IT infrastructure. You are a cybersecurity expert. Why don’t you take us through Coleman technologies.

Darren C #2

I am the founder and CEO. Part of my mission is to help protect a million people from hackers, so being here on your podcast supports that cause. I’ve shared my cybersecurity insights on ABC, Forbes, MSB Success Magazine. I’ve spoken at Harvard, and co-authored some books. So that stuff led my company down the road to be an expert within the cybersecurity realm. But more than that, we provide 24/7, direct-detect, flat fee, IT support to our clients. We really just become your IT department.

Are there off-the-shelf tools?

Darren Coleman

Our firm has a huge IT spend every year, but for a lot of medium and small businesses, can they not just get all the tools off the shelf?

Darren C #2

Not really. You can hire an IT professional, but you’re probably going to hire multiple people because they’re going to want to take holidays. You’re going to be looking at double the cost right there. But you can’t just buy antivirus. Antivirus isn’t good enough anymore. You need endpoint protection, threat hunting, content filtering, and audits. There are things the IT professional may be good at, but there are  things you need an expert for. If you’re looking for cybersecurity insurance, the forms are 10 or 12 pages long and require things you might not think about. Continue Reading…

Cybersecurity tips to keep your Personal Finances safe

Image by Pixels

By Beau Peters

Special to Financial Independence Hub

How we manage our personal finances has changed over the years, notably the transition to handling more of our financial tasks online. From banking to paying bills to applying for loans to budgeting, all these things are carried out primarily online now.

We love the convenience of doing these things online. However, there’s a greater chance of your financial data being compromised. But if you can adopt these cybersecurity practices, better financial management and security will result.

Educate yourself on Phishing and other Scams

To protect your personal finances from security threats, you must know what they are. Educating yourself on how your financial information could be potentially stolen and used in harmful or criminal activities is essential.

For example, phishing is when a person is contacted by someone that seems legitimate via email, phone, or text message. Because the person seems like they’re a legitimate contact or work for an honest company, people are more inclined to give up the personal information they’re asking for. Phishing scams surged in the wake of COVID-19 due to the urgent need for clarity.

To avoid having your finances compromised in a phishing scam, learn what different phishing communications look like. Look closely at the details and tone of the messages. And trust your gut if you feel like “something is off” with any communications you get.

Educate yourself on these common scams as well:

  • Overpayment scams;
  • Employment scams;
  • Lottery and prize fraud;
  • Debt collection scams;
  • Family emergency/kidnapping scams.

The more you know about potential security threats to your personal finances, the better. Continue Reading…

Are your Online Shopping habits compromising your Financial Security?

Image: Unsplash

By Beau Peters

Special to the Financial Independence Hub

Incredible advancements in technology have made it so we don’t ever need to leave the house to buy the stuff we like. You can buy anything from food to video games from the comfort of your home and have it delivered the next day. However, while convenient, the rise of online shopping has also made it easier than ever to overspend and put our information in the hands of hackers and cybercriminals. It is important to know your limits and shop responsibility.

Today, we will talk a bit about the dangers of shopping online and what you can do to protect your data and your pocketbook.

Awareness of the Risks

If you watch the news, then you have likely heard reporters talk about the criminals that use online spaces to steal the money of consumers. The reality is that if you do anything online, then hackers can get to it. According to Help Net Security, 62% of consumers believe that online shopping fraud is a real threat, yet, most people continue to use e-commerce sites for their needs. The reason is likely because they don’t really understand how bad stolen data can be.

The fact is that if a hacker is able to get ahold of your credit card or debit card numbers, they can steal and retain that information and use it to take out fraudulent loans on your behalf. Even the personal data that you put online, like email addresses and birthdays, can be sold to other hackers for profit.

There are several threats to be aware of, including unencrypted websites. When you shop on any site, you must look at the web address and ensure that it says HTTPS before the website name. The “S” in this case stands for secure, and it means that the website automatically encrypts your payment information so it cannot be read by hackers even if it is stolen.

You must also be cautious when you are shopping on your phone, especially when you are out in public. Hackers can set up fake Wi-Fi networks that can look like the real deal, but when you connect, you are really connecting directly to the hacker. From there, they can steal your data and log into your bank accounts. This is why it is so important to be vigilant about online security wherever you go.

Before you buy anything at a website that you have never shopped at before, take a look around the site for red flags. For instance, if the website does not have a returns policy that you can easily find and review, then it may mean that it is a scam. Also, be aware of spelling mistakes. It is human nature to make a spelling error here and there, but if the website is littered with errors, then it may mean that it was put up in a hurry and the site is not legitimate.

Be Smart about Payment Info and Documentation

It is essential that you are aware of how you use and store your payment information as you do your online shopping. Many companies give you the option to store your payment information on their website for the sake of convenience. But you should know that if that store is not secure, then your financial security could be in jeopardy. So, if you must keep your card information saved at that company, then ensure that they are encrypted, and if you are unsure, then shop elsewhere.

If you do decide to keep your payment information on a website, you must make it a habit to routinely check your debit and credit card statements. If that website is hacked and your card information is stolen, then hackers can continue to use your payment info to make fraudulent purchases. By checking your statements, you can spot false charges right away and file a dispute with the bank.

Also, consider how you store and access those statements. If you view them online at your banking or credit card website, then ensure that you protect your data by adding a complicated password complete with letters, numbers, and special characters. Make your password hard to guess and change it regularly.

Some people choose to download their statements and save them to their computers for future review. If you do the same, then you still need to be cautious because hackers can also get into your device and read the information you have on those statements. Once the documents are on your computer, consider redacting your personal information off of those PDF files, so it cannot be read by others. Doing so will black out your name, address, account number, and other sensitive information so you can keep your files without fear of theft.

Be Smart about your Money

The other potential downside to online shopping is that the instant access makes it too easy to give into temptation and buy more than you need. It can only take a few seconds to find that you have spent the money that you need to pay the bills. That is why it is always a smart idea to create a budget so you can ensure that you stay within your limits.

It is important to consider your wants and needs when budgeting. You may want to buy that new sweater or television set, but are there expenses that you absolutely need to pay before you can splurge? Sit down and write down all of your monthly expenses, including childcare, food costs, utilities, and rent. Compare those necessary costs with the money you have coming in each month. If there is anything left over, then you can dedicate some of that to your online shopping desires.

Part of financial security is not letting your debt get so out of hand that you dig yourself into a deeper hole. If you have debt on credit cards, then it is important that you focus on eliminating it before you spend more unnecessary money. You can do that by adding your credit card payments into your budget, paying more than the minimum each month, and if you have more than one card, then pay off those with the highest interest first. Then, once you pay off your debt, reward yourself with something nice.

As you can see, it is important that you are smart about how you shop online. By shopping with a plan, you can avoid scams and improve your financial situation so you can have a brighter future.

Beau Peters is a creative professional with a lifetime of experience in service and care. As a manager, he’s learned a slew of tricks of the trade that he enjoys sharing with others who have the same passion and dedication that he brings to his work. When he is not writing, he enjoys reading and trying new things.

Small Business: 5 tips to help protect your customers’ data and keep their trust

Photo Credit: Unsplash

By Gloria Martinez

Special to the Financial Independence Hub

When it comes to running a business, trust is key. If a customer cannot trust your company with the information they provide, they will eventually stop coming back, and your reputation will suffer.

Data protection is one of the most essential qualities of any successful company, whether it’s a small online clothing boutique or a Fortune 500 company. Though keeping data safe can be challenging in a time where cyber crime is rampant, there are practices you can implement in your business that will decrease the likelihood of an attack. If you’re a small business owner, these 5 tips will help you protect your customers’ data while ultimately benefiting your profits:

1.) Understand your obligations

While keeping your customers’ data safe is a key element of building and maintaining your company’s success, there’s another important reason you should prioritize it: you could be legally obligated to do so. Take the NYDFS Cybersecurity Regulation, for instance, to which many companies in New York must adhere. One of the requirements of the regulation is that certain businesses operate with an infrastructure that protects customers from cyber security threats. If you’re not sure whether or not your state has regulations like this, this article may provide you with more information.

2.) Use encryption

A lot of cyber attacks happen through emails. This is because a company’s email account is a prime target for hackers, and you need to make sure that any emails that are exchanged between your company and another party (including promotional ads) are protected from these attacks. That’s where encryption comes in. Using a modern email encryption service should work seamlessly into your email platform, and will help keep the business information contained in your emails (including customer data) from getting to anyone but the intended recipient.

3.) Develop a security policy

While software is indispensable in the battle against cyber crime, your efforts can’t stop there. Your business also needs a data security policy in place, whether you have one employee or 1,500. It’s critical that employees become familiar with the policy, as well as the roles played by all people and systems involved. Also, ensure that each employee completes any necessary training with software and/or security professionals. That way, everyone will understand how to adequately handle company data. Continue Reading…

How small business owners can survive a security breach


By Gloria Martinez

Special to the Financial Independence Hub

Photo by Markus Spiske on Unsplash

There are myriad reasons why a malevolent actor would want to breach your small business’ data and info and/or attempt to defraud your company. Money (holding business info or operations ransom) is a big one, but your business also holds plenty of useful, sensitive data on customers, clients, business partners, trade secrets, and finances. Whatever the reason, data breaches are becoming the norm — not the exception — for small businesses around the world, and the cost can be substantial. Here’s what to do if you’ve been hit.

Plug the leak and and figure out what happened

If you are a network security pro or have your own in-house team that can perform this task, that’s great. However, the majority of small business owners feel lost and adrift following a security breach. The smart first step is to hire digital forensic specialists. These experts can do most of the technical work for you, from plugging up the initial breach point, tracking down the responsible parties (which is key for any sort of legal action), and finally doing the necessary legwork to shore up your defenses (so it won’t happen again).

This is also the time to contact your service providers. It’s highly unlikely that your breach exists in a vacuum. We’re talking your point-of-sale software company, internet provider, credit card processor, and accounting firm, so it’s wise to take the appropriate actions.

Boost security and consider Legal Representation

Your next step is to do what you can on your end to improve your data security. Employ the obvious, FTC-recommended actions like changing company passwords, security codes, and physical locks (yes, data breaches can occur when unauthorized people have actual, physical access to your workspace). Then, as the FTC suggests, “you may consider hiring outside legal counsel with privacy and data security expertise. They can advise you on federal and state laws that may be implicated by a breach.” Legal representation is vital for two major avenues — either taking action against those responsible or defending your business from liability (compromised personal data can put you in a serious legal pickle).

Make changes to prevent future breaches

A few solid ways to protect your small business from future security issues include separating personal and business accounts, beefing up your security and data permissions, and retraining employees about proper security protocols. The sad fact is that many security breaches are due to employees — whether malicious or unintentional. That’s why it’s absolutely critical that you take the time to carefully screen your hires to make sure they are reliable and trustworthy. This means holding quality job interviews where you ask the right questions to get an accurate sense of the candidates you’re vetting.

Notify those affected

Legal considerations aside (notification of a data breach may be forced based on state laws), being honest and upfront with your customers, clients, and business partners is always a good idea. It builds trust, for one. It also allows them to shore up things on their end, as security breaches are rarely just limited to the primary target.

Small businesses are generally easy targets for malicious actors for a variety of reasons. For one, they simply do not believe they are big enough to be hacked or breached. They also don’t have the time, money, or resources to devote to major cybersecurity. Knowing that you are vulnerable is half the battle, and the other half is staying calm but decisive when something does happen. Take these steps so you can recover and move on from a security breach.

Gloria Martinez loves sharing her business expertise and hopes to inspire other women to start their own businesses. Her brainchild is Womenled.org. Gloria’s vision is to help all women advance in the workplace and celebrate their achievements.