Managed IT services or break-fix support? The real difference, the hidden cost of reactive-only IT, and which suits a Tasmanian small business.
What does IT support cost in Tasmania? What drives the price, what a quote should include, and how to compare providers on value, not just the monthly figure.
How much cyber security does a Tasmanian business actually need? A practical guide to the risks that matter, the basics to get right, and when to do more.
This e-Book is a great summary for business owners to build out the Strategy for the underlying Technology. Most owners we talk to, reluctantly say they don’t understand the technology, so don’t want to ask questions. We want you to start asking questions! Feel free to download this PDF BELOW
If you have any questions about how to implement thee above or how this all fits into overall Strategy and Governance, please visit this PAGE
Here are some tips to help your staff with your password policy. Tip 1: Use Complex Passwords Think beyond birthdays or pets names. Use a combination of uppercase and lowercase letters, numbers and symbols. Tip 2: Don’t Reuse Passwords Keep your passwords unique for different apps. A data leak on one website can make all your applications vulnerable. Tip 3: Leverage Password Managers Remembering passwords is hard. Password managers securely store them and can even generate unique passwords for your applications. Tip 4: Enable Two-factor Authentication (2FA) Even strong locks can be broken. Enable 2FA on all your cloud apps to make it harder for criminals to gain access. Tip 5: Beware of Imposters Watch out for phishing emails impersonating familiar contacts. Clicking on links in these emails could put your business at risk. Feel free to download and print out this PDF for your staff training ->
Data Loss Prevention . It is extremely pleasing to see the Australian Government working hard on helping organisations with their overall Information Security Management. Home | Cyber.gov.au is an excellent website to bookmark. With the information constantly being updated on this site, I worry that organisations are falling farther behind, because Information Security Management still does not make its way into the overall Risk Management Strategy. As organisations, we seem to have implemented Work Health and Safety so very well, so how do we start getting the same uptake on Information Security Management? Some suggested steps . Elevate, across the entire organisation, the words being used; instead of the more technical word(s); cybersecurity, firewalls, application control -> think instead of the overall Information Security Management , ie The Owners or Board MUST manage the security of ALL information ! Start picking some risk areas to understand; I find this is an excellent first step in understanding “does my business actually have client’s personal data?“ and “how do I start securing that information“ -> Securing Customer Personal Data for Small to Medium Businesses | Cyber.gov.au Share that information and understandings across the entire organisation. The IT team might know this inside and out, BUT most likely the language is far too complex. Speak in non IT language, Speak in business language. SEEK UNDERSTANDING TO STAY COMPLIANT! Summary Some of those actions can be carried out by yourself, some ideally will be done in partnership with a Trusted Technology Solutions Provider. Links List of our Professional Services | Strategy & Governance | Compago Technologies
Strategic Technology Alignment e-Book PDF
Lets reset expectations! Over the last 2-3 years, we have been working with our contracted clients on their compliance journey around Cyber Security, Essential 8 or ISO27001. The first step, is usually the hardest and most commonly, it involves getting EVERYBODY ( board, owners, exec’s, staff and IT ) to all agree that things ARE NOT 100% secure and compliant and that we need to start somewhere. It is much more important to be honest with what % compliance a company is currently at and having a plan to address the gaps VS pig headedness. The below image is a typical organization’s dashboard approximately 3 months into a monthly compliance engagement, in that, the board | exec’s are aware that; All requirements have been articulated, reviewed and selected from a relevant standard . All requirements have had possible controls identified that will meet the requirements . Of those controls , there are no “ unsure “, like there would be at the beginning of the process. The organisation is; 50% through the process BUT, depending on budget, timing and other business pressures, they might be 12 - 18 months away from 100% ready and expecting that Insurance companies will add extra requirements each year. aware that the Australian Government will continue to lift the awareness of cyber awareness ( Small business | Cyber.gov.au ) Summary Any small to medium business can start the journey, and the journey simply takes scheduled time and diligence BUT it will be a waste of time if the board or owners won’t take that HONEST first step of assessment. GREEN is the goal, but it starts with mostly RED .
Compago Technologies and Eagle Crest Technologies are excited to announce a newly formed state-wide coverage partnership.
