Business Continuity is not something you do once and check off that you completed it. This is something that requires continuous evaluation and planning. So what does this mean for you?
We have written a few posts related to this in the past, and rather than re-write them here, I will reference them throughout this post as they become relevant. Starting with our post related to Disaster Recovery (DR) plans Discussion: How Disaster Recovery Plans Protect you from Cyber Threats. This was compiled from a discussion with Expedient. We have a long relationship with Expedient, hosting or even just a Disaster Recovery option for our customers. We've launched RKL Hosted Cloud, which utilizes the Expedient platform but has some additional services provided by us, RKL eSolutions, to go with the brand.
This is typically the time of year when many companies are reviewing and renewing their various business insurance plans. A lot has changed in one year with cybersecurity policies and coverage. We have seen guidelines for minimum Network Security Controls to be eligible for coverage. These are in no particular order and it may be different in each unique situation.
- Multifactor Authentication (MFA)
- Virtual Private Network (VPN)
- Remote Desktop Protocol (RDP)
- Patch Management
- Weekly Backup
- Email Scanning & Filtering
- Encrypting Sensitive Information
- Restricting Elevated Privileges (e.g. Administrator Level Reductions)
- Isolating Cloud Backups (Cold Storage)
- Replacing Unsupported Software
Taking the actions above may be a requirement just to get a renewal. It does not mean you will get any reduction. In most cases, we are seeing rate increases in this area. We:
- Explain what Ransomware is
- Explain how to protect yourself
- Explain how to handle a Ransomware attack
For those of you who use Sage ERP software, this may provide more focused information for you in addition to the information above:
When considering how to address the items mentioned above, make sure:
- Kaseya VSA for Patch Management and Unified Backup
- Webroot for Antivirus and Malware Management
- RocketCyber for Security Monitoring, Endpoint Protection
- Traverse for Network Performance Monitoring
- Compliance Manager for Role-based Compliance Process Automation
We mentioned these based on our previous experience but if you have another solution in mind, we would be happy to discuss further.
