Major data breaches predicted as firms cut IT spending

As the recession continues to bite and firms look at ways of cutting corners on spending, it is vital companies don’t scrimp on protecting their data assets.

While weakening economic conditions are forcing organizations across the US to cut costs, the increase of both external and internal data breaches re-iterates the importance of data protection.

Companies that cut corners regarding data protection risk fines and a decline in profits, as well as detrimental effects on reputation and customer-retention levels.

According to a Gartner study, the cost of a sensitive data breach will increase by 20% in 2009, as breaches become less opportunist and more targeted.

Despite this, research has revealed that three quarters of US businesses do not have a data-loss contingency plan in place.

Last week, Bank of Ireland reported further customer data loss after a USB drive was declared missing. This follows the disappearance of data from 31,000 customers earlier this year, when four of the bank’s laptops were stolen.

Organizations must take action to prevent potentially crippling damage to the business. By recognizing the value of customer data and taking proactive steps to protect it, companies can mimimise associated side effects of loss, such as reputational damage.

Data protection is not a nice-to-have but a must.

All organizations, public or private, should be implementing encryption policies, training their staff and third-party agencies in how to protect data, and never allowing sensitive material to go off-site without safety measures in place.

The financial and reputational cost of a data breach is increasing exponentially, and both the public and private sectors are already in the dock when it comes to data protection.

Effective data protection costs very little, so organizations need to see through the recession to the real cost when something goes wrong.

PCI Compliance FAQ

PCI Compliance What is PCI Compliance?

All merchants processing, transmitting, or storing credit card data were required to comply with the new Payment Card Industry (PCI) Data Security Standard by June 30, 2005. Compliance required is based on several criteria.

The Payment Card Industry highly recommends voluntary compliance for all merchants accepting credit cards online and failure to comply with these new security standards may result in substantial fines or permanent expulsion from card acceptance programs.

Do I need to become compliant?

Any company that accepts, processes, or stores credit card information needs to comply with the standards set by the Payment Card Industry.

What kind of a scan needs to be performed?

Vulnerability Assessment Scans must be performed by Payment Card Industry Approved Scanning Vendors (ASV). The scan will be performed over all externally facing IP addresses that touch the credit card acceptance, transmission and storage process. Scans must be turned into the merchant bank on a quarterly basis.

How long does it take to become compliant?

The PCI compliance process can take anywhere from one day to two weeks. The amount of time it takes for a company to be considered PCI Compliant is dependent on the threats the PCI scan discovers and the amount of time it takes to complete the self assessment questionnaire.

How do I report compliance?

Both the passing PCI Scan and Annual Self Assessment Questionnaire should be turned into your merchant bank. Your merchant bank will then report back to the Payment Card Industry that your company is PCI Compliant.

What happens if I am not compliant?

Failure to comply with the Payment Card Industry security standards may result in heavy fines, restrictions or permanent expulsion from card acceptance programs.

Click to continue reading “PCI Compliance FAQ”

Five Easy Steps to PCI Compliance for Small Online Businesses

Five Easy Steps to PCI Compliance for Small Online Businesses

When making purchases from Web sites such as Amazon.com – sites that once kept your credit card data on file – you may have noticed that you must now re-enter your credit card data for each purchase. Over the past two years, large online retailers have been forced to change their security procedures in order to meet new standards and tighten online security.

Now these high standards are being applied to small online merchants, and this will require immediate changes in your online store’s security procedures. In this column we examine the background of the problem and how it applies to small online businesses. Specifically, we’ll outline what the small merchant must do to improve Web site security and become compliant with the new high security standards in order to continue processing credit cards online.

Security for Small Online Merchants is a Big Deal

Security breaches may seem to happen only to huge corporations — like the TJX security breach last year that compromised more than 94 million T.J. Maxx and Marshall’s accounts — but in reality, cardholder data compromises affect small online store owners far more frequently.

Click to continue reading “Five Easy Steps to PCI Compliance for Small Online Businesses”

How to Protect Your Small Business from Internet Threats

Multi-tiered Internet Security for Small Businesses

The Internet is vital to today’s small business. Unfortunately, the dangers posed by viruses and hackers can jeopardize privacy and productivity and erode customer trust. In an ideal world, small businesses would have around-the-clock network protection from an experienced Information Technology (IT) team. In reality, the small business owner faces 24/7 confusion and worry about a network attack because he or she is the IT team.

As dependence on the Internet continues to grow, and the threats to computer networks continue to evolve, it’s important to become aware of what activities make small businesses more vulnerable to Internet security threats.

Do you have valuable information on your network?
By taking advantage of the convenience and accessibility of the Internet, many small businesses have made valuable information more accessible—both to employees and outsiders. Although types of sensitive data can be quite broad and vary from organization, there are a few key types of information that every business should plan to protect. These include all data related to: private customer information, strategic plans, business operations and financial data. Damage to or loss to any of this information could result in decreased sales, reduced competitive advantage, potential lawsuits and decreased profits for the victimized company.

Are you connected to the Internet?
Small businesses open themselves up to a variety of Internet threats just by being connected. Confidential files, such as salary data and credit card information might be sent across email or be viewed by network intruders.

Click to continue reading “How to Protect Your Small Business from Internet Threats”

Are You A Lonely Yuma Cube Dweller?

Tips for Managing Outsourcing Partners

When you find the confidence to let go of an unwanted business process or task, you hope that you’re headed towards the outcome you had in mind:  A lower cost for equivalent or better results.

Yuma businesses shouldn’t have to hope, if you want to gamble, go to Paradise Casino.  If you want to profit from partnering with an outsourcing provider, follow these basics:

Tips for Managing Outsourcing Partners

- Develop relationships.  Pay a fair amount or on the high side.  Use the same person, develop and train them.

- Spell out what you want very explicitly. The more detail and the more specifics you can give a freelancer of what you want, the better the finished product will be.  Freelancers have no imagination and no way of knowing what you want.  They are in a different country and a different culture — all they have to go on is what you tell them, so be explicit.

Click to continue reading “Tips for Managing Outsourcing Partners”

Out-Sourcing or Out-Tasking How Will Your Business Save Money?

If you’re not faced with even more challenging business decisions than you were 2 months ago, stop reading; this article isn’t for you.  It’s for those of us who have to make a dollar out of fifteen cents.  It’s for those of us who can’t let go of quality, can’t let go of continued profit growth and can’t let go of all of our US-based employees in favor of Bangalore or Sao Paulo employees at half the price.

Yuma’s market isn’t as turbulent as Silicon Valley’s, Dallas or New York’s markets, however those of us who live in this desert paradise still want to grow our businesses to the size and breadth of the big boys.  Yuma, here’s how we’re gonna do it.
At the end of this article, ask yourself Dear Yuman, “what tasks could I off-load and make my business more productive, more profitable or more resilient to these turbulent times?”

Here’s an example:

Kim DeAnda, Spa Director at Lotus Day Spa & Salon spends about 16 hours per month on Quickbooks entries and reconciliation.  This was a task that she neither loved nor wanted, but was necessary to ensure that Lotus Day Spa & Salon’s financial instrumentation was accurate.  Either Kim did the work, or they hired an accountant, which was cost prohibitive.  Spending 16 hours per week, and roughly calculating her time’s value at $25/hr, she came out to a cost realization of $400/mo in Quickbooks accounting.

Click to continue reading “Out-Sourcing or Out-Tasking How Will Your Business Save Money?”

How To Make Sure Your Company Comes Out On Top Of Google Results

Stephanie Wexlar talks about 4-5 simple practices to keep your site and products coming out on top.  You don’t have to spend a lot of adwords dollars to make an impact for your small business.

The basics for Yuma’s small businesses to get big exposure online:

1.  Write articles on your site and make them relevant to your products, services or market (notice I put “Yuma’s small businesses” in the preceeding sentence?).

2.  Get other sites to point to your site, it’s like a popularity vote.  Do what you can to have others to link to you, blogs, posts, comments or even industry related sites.

3.  Use title tags in your HTML.

4.  Find a good Search Engine Optimization partner to help your small business succeed.

“New Energy” Income Tax Credits & Yuma’s Abundance

Congress just passed an Income Tax Credit for new energies, specifically solar and wind.  Does this open a new industry in Yuma, as a producer of energy?  If we can’t get the refinery (”old energy”) can we embrace the “new energy?” No industry’s scramble to get a grip on today’s economic and financial circumstances is more interesting than New Energy’s efforts.  Yuma is in a sweet spot for realizing the benefits of this change, due to the amount of solar energy beaming down on us 360 days per year. That’s because 3 things hit New Energy simultaneously, not just the 2 that hit most of business and industry.Everybody has to figure out what to do about the financial crisis and the rescue package passed to alleviate it.New Energy has to figure all that out while including into the equation how to respond to the extension of the New Energy tax credits bundled into the rescue package.Does the extension of the credits mean boom times for New Energy? Does the financial crisis mean the end of ready financing for New Energy projects? Will the rescue package restore financing or squelch the boom?

Click to continue reading ““New Energy” Income Tax Credits & Yuma’s Abundance”

15 Steps To Building Your Small Business ECommerce Site

Here’s an inspiring fact for anyone starting an online business: If you gather everything you need before you launch, you’ll be far ahead of most people who start online stores.

Believe it or not, thousands of people launch e-commerce sites only to realize they lack an essential element. Six months in, after spending their nest egg, they ask: “You mean I need a pay-per-click campaign? But I didn’t budget for that.” Or, “I need Web analytics software? I had no idea.” The nest egg goes rotten under your nose.

Assembling everything you need prior to launch will save you numerous headaches. And it will better prepare you to compete with established businesses, which are operating with full toolboxes.

The list below contains everything you’ll need to get your online store off the ground. Read it, assemble the items, and prepare to work long hours.

Click to continue reading “15 Steps To Building Your Small Business ECommerce Site”




AJAXed with AWP