17 Defensive Moves!

“Since late 2009 the FBI has been warning law firms about noticeable increases in cyber-attacks,”  according to John Sroka, CIO of Duane, Morris LLP, an international legal firm based in Philadelphia, PA.  Sroka points out that although companies’ needs and security requirements vary, there are some basic defenses that should be employed.  You don’t have to be a law firm to see the value in his recommendations.  Here they are:

1. Use strong passwords. Passwords should be more than six characters, using a mix of case letters, numbers and symbols. Passwords should also be required on all mobile devices and changed regularly.
2. Install firewalls and keep rules updated.
3. Develop and enforce Internet and technology usage policies.
4. Provide security awareness training.
5. Keep your computer, browser antivirus and other critical software up to date.
6. Do not open an email or attachment from an untrusted source.
7. Pay attention to website URLs. Malicious websites may look identical to a legitimate one but the URL may use a variation in spelling or a different domain. Do not click on unknown links.
8. Monitor security logs.
9. Restrict access to sensitive data.
10. Password-protect laptops and encrypt hard drives.
11. Do not write down passwords.
12. Do not install software from unknown sources or unknown websites.
13. Do not use Drop-box or other Internet file-hosting services for client documents.
14. Media such as USB drives should be encrypted.
15. Servers should be in a locked room.
16. Do not share your user ID or password.
17. Use a screensaver password and always log out when away from your computer for a period of time.

One last recommendation is to offer your clients the protection they need from cyber, privacy and data breach by calling Pat Moore Insurance Services.  Pat Moore simplifies the process, evaluates protection options and provides tailored solutions to protect your client’s first party insurance needs and third party liability.

We have partnered with highly rated carriers in this emerging field. Call Pat Moore’s Kaycie Berley at (800) 214-9294 x228 or send her an email at kjberley@patmooreins.com.  Call her today!

P.S.  Get a unique perspective on cyber risk and security in this short TED video where Mikko Hypponen talks through the 3 major types of online attacks and their implications on privacy and personal freedom.

Sourced from the ALA’s Ask The Experts

Hacked and Breached, Cyber Attacks

Every day there are news reports of companies being hacked and breached.  In 2011 alone some 23 million confidential records were exposed through more than 414 reported security breaches, as reported by the national nonprofit Identity Theft Resource Center (ITRC).

In 2012 these breaches just got bigger according to the 2012 Cyber Liability & Data Breach Insurance Claims Study by NetDiligence.  Highlights include: Global Payments (1.5 million records), Yahoo! (400 thousand passwords) Wyndham Hotels (600 thousand credit cards), eHarmony (1.5 million passwords), LinkedIn (6.5 million passwords) and the lists continue to grow.

New information recently released by Verzion, 2013 Data Breach Investigations Report, indicates that there’s no letup in sight.  Here are six observations from this material: 

1. All organizations, large or small, profit or nonprofit, are appealing to hackers.  75% of attacks took advantage of non-specific targets
2. These breaches happen quickly.  84% happen within minutes to hours
3. These breaches often go unnoticed with 66% remaining undiscovered until months later
4. 75% of these attacks are driven by financial gain, so not just malicious intent
5. 87% of breaches are discovered by outsiders–10% of them being customers
6. 76% of breaches resulted from stolen credentials or weak networks

These reports on cyber security breaches underline the need that companies have to be proactive in protecting their data and establishing a plan to deal with a breach should one occur.  Data hacking is nothing new.  What is new is the amount of information companies have and the growing need for gatekeeping procedures to secure that data.  Especially to businesses with regulatory, financial and technical implications to consider, cyber risk management is very important.

Don’t let cyber, privacy or data breach threaten your clients.

Let Pat Moore Insurance Services help. We simplify the process and put you and your clients at ease. Privacy and data protection are only a piece of the puzzle. We can provide tailored solutions to protect your clients first party insurance needs AND third party liability. Call Pat Moore’s Kaycie Berley at (800) 214-9294 x228 or send her an email at kjberley@patmooreins.com.  She’ll return your inquiry promptly and help you get access to markets that are experts in this emerging field.

Photo Credit:  2013 Data Breach Investigations Report