CMIT Solutions of Round Rock would like to thank Mark Perry, Regional Account Director with Barracuda, for taking the time to answer a few questions about data security and how we partner with Barracuda to ensure that our customers’ data is always safe and secure.
Hi Mark! Please tell us a little about Barracuda.
You bet! Barracuda is a data protection and security company. At Barracuda MSP, we are dedicated specifically to partnering with service providers such as CMIT Solutions at a local and national level to provide multiple security, backup, and recovery options that serve their SMB customers’ diverse needs.
We assist with everything from deployment to training. Our dashboard allows CMIT Solutions to monitor their clients’ systems so emergency situations are addressed immediately. Barracuda also provides around the clock support as well.
Where do you see SMBs biggest deficiency when it comes to data security?
Unfortunately, few people seem to know what “IT” really is unless they’re in the business. Combine this lack of knowledge with budget constraints, and companies often decide they don’t want to spend money on proper IT solutions. They often look for the cheapest and fastest way to get something up and running, without considering the long-term implications or security gaps that creates. It’s like a race to the bottom, and doesn’t typically result in them getting the solution they truly need.
Because of the lack of data security knowledge, what do you see as one of the biggest IT misunderstandings?
Most SMBs assume they aren’t targets for IT focused attacks. They think it’s only the large Fortune 100 companies that get attacked. In reality, it’s actually the opposite! Attackers will focus on small business and mom and pop shops because they view them an easy target. Many cybercriminals make an assumption that small businesses don’t know how to deploy or have the budget to afford proper IT solutions, and all too often, they are assuming correctly.
Think of it this way…on the outside, it seems like robbing an armored car makes more sense. You know it’s full of money and just one hit could set you up for life. But the planning and effort to actually pull the job off would be tremendous, and the chances you would be successful are slim to none. Now, if you went through a mall parking lot looking for several unlocked cars, you’d have a much greater chance of actually pulling a robbery off. The reward is smaller, but if you found some cash, phones, electronics, etc. and could hit multiple cars in a couple of hours, it adds up fast. It’s a classic risk vs. reward scenario.
What do you see as a top threat to business security?
Quite simply, education and awareness. There are serious repercussions that can happen when a business is unaware of how to shore up data security. For example, Healthcare, Financial, and Banking companies all have industry and government regulations that require data to be protected. If you do not follow those regulations, you are leaving yourself wide open not only for a data loss but also for potential litigation as well. Even if you aren’t in a regulated industry, you need to educate yourself — no one wants to get involved in a lawsuit that could have been easily prevented with a bit of education.
Ignorance isn’t an excuse to say I didn’t know! Get educated from a company like CMIT Solutions of Round Rock.
What are the biggest data security threats to SMBs?
Email is a top threat vector. The need to educate your employees on what to open and not open is paramount to your data security.
However, 40% of attacks to SMBs are one of two common phishing attacks:
- Phishing
An email sent to a large number of people and is more or less random. Phishing scams are very common these days. For example, you get an email that looks like it was sent from Amazon and sends you tracking information. But before you can get this information, you are asked for personal information. It’s a dirty little scam that many people fall for, unfortunately. - Spear Phishing
I like to compare this spearfishing in water. When you spearfish, you are searching for very specific target versus casting a wide net like a phishing scheme. Attackers visit websites and look for a listing of their executives. They gather names and emails to set up an attack. It might look something like, “Hey Mark! I look forward to our call, but before we do this, you need to send me a $50. Please wire this amount to this account.”
Without the tools CMIT Solutions and Barracuda provide, you are 100% relying on the “human factor”. Meaning, you are relying on somebody using their best judgment on what is real and what is a threat. Sometimes, it is very hard to decide as attackers are extremely clever and skilled at making things look “real”.
Where do you see data security in 5 years? In 10 years?
Cybersecurity will continue to make news — both small and large scale. I believe that having data security tools and practices in place will start to be required for business as attackers are getting more numerous and even smarter.
I also believe data security will become more complex, especially with the growing number of remote workers and flex jobs. Remote workers often use personal mobile devices or laptops and cloud-based apps/data. This practice leaves your business very vulnerable and makes the need for proper security tools crucial.
There are some great things coming our way, but the increasingly complex security needs of businesses mean they will likely need to rely even more heavily on service providers. It also means that end-user awareness and preparation will continue to be critical to the security of all businesses.
Thank you, Mark, for taking the time to talk with us and we hope this helps SMBs understand more about data security. If you have any questions, please don’t hesitate to contact us today!
