Immediate Vault Immediate Access

Q&A With New National Cyber Security Alliance Executive Director Kelvin Coleman

The National Cyber Security Alliance (NCSA) announced that its new executive director is Kelvin Coleman, who has held high-level positions in the United States Department of Homeland Security, and the National Security Council.

Coleman’s appointment puts him in charge of the country’s leading cybersecurity and privacy protection education and awareness organization, responsible for leading organizational growth; facilitating strategic partnerships and alliances with government, industry and non-profits; and acting as NCSA’s primary spokesperson.

He discussed with Risk Management Monitor the types of cyberrisks he follows, preventative measures and upcoming NCSA events and services.

What are the biggest cyberrisks facing businesses today? How do you plan to advise or collaborate with business leaders to combat them?

Some of the biggest cyberrisks facing businesses today include email threats, employee activity and vendor security. When it comes down to addressing cyberrisks targeting businesses of varying sizes, everyone needs to start with the basics. It is imperative to get leadership on board with recognizing that cyber resilience is more than just taking technology-focused measures, but also modifying processes and behaviors at all levels in the organization.

What are the attacks that are easiest or most difficult to prevent?

The answer to both is phishing. Attacks come in through three different ways – people, products, and processes. A great product can hold attackers at bay. Similarly, great processes can mitigate a threat. Human beings are the wild cards. People are both the easiest to control and the most difficult, especially when it comes to phishing attacks. One of the NCSA’s tips is “when in doubt, throw it out.” We try to make sure folks understand that if they are not familiar with a link or a website, they need to delete it or ignore it.

At NCSA, our focus is on the human side of cyberattacks, and we work to get people to change their behaviors as well as understand the processes for keeping their devices and online accounts safe, particularly as phishing attacks become more sophisticated.

Speaking of the human side, which professionals are most exposed to cyberrisk?

All of them. Cybersecurity needs to be embedded into the company culture from the most entry-level positions to the most senior, because hackers can access information at any level. We’re all vulnerable, from the break room to the boardroom. We often tell small business owners that they must also train their employees to recognize malicious links and emails, as employees can often be the weakest link when it comes to cybersecurity at the office.

What is your reaction when you learn that the information of 500 million Marriott guests may have been exposed?

Marriott is a great example of a company doing as much as it can to prevent an attack but still being targeted. They were not laissez-faire about their security. So, I see it as a warning for everyone to remain extremely vigilant in the face of increasing numbers of cyber attacks. If it happens to Marriott, we’re all vulnerable to an attack of this nature.

Small businesses seem just as susceptible to cyberrisk as large ones. How would you advise small businesses to protect themselves?

Small businesses are more at risk and they often have information, such as customer data, that’s just as valuable to hackers as that of the customer data from large corporations. Small businesses often don’t have the resources to invest in a prevention plan, nor do they have the capital or leadership or knowledge about cybersecurity. This is why they’re often targets for hackers.

Our advice for small businesses doesn’t vary much from what we advise to all people: Keep a clean machine by keeping software updated, use stronger authentication and passwords, recognize and avoid phishing links, etc. If [a small business] decides to hire a third-party vendor for cybersecurity, we advise them to do their research and hire a reputable vendor. We also encourage them to attend our regional CyberSecure My Business events in their local community, or take part in a CyberSecure My Business webinar.

What new initiatives or campaigns will you be overseeing for in 2019?

In 2019, our overarching goal is to empower individuals and – at the same time– focus on educating businesses to respect privacy, safeguard data and enable trust. This means that consumers need to know how organizations collect and use personal information and companies of all sizes need to be transparent and communicate in an accurate and consumer-friendly language to their customer base.

We will share key messaging and provide actionable tips to help protect privacy. NCSA and our highly engaged partners will host numerous events that will shine a spotlight on the rapidly changing technology landscape and forging ahead toward the future of privacy. We plan to engage industry leaders with diverse perspectives to address opportunities and challenges. In addition, we will soon be launching our Champions program which is a way for both individuals and businesses to officially show support. We expect to launch the Champions portal – along with additional Data Privacy Day information – in mid-December 2018.

What changes or improvements are in store for National Cyber Security Awareness Month (NCSAM)?

I don’t believe NCSAM needs a shiny new toy each year. Our plan is to engage a much larger audience. NCSAM continues to reach more and more people every year, but there are still significant numbers of Americans who need to hear our message – not just during October but throughout the year. We want to connect these folks more with our proven tips for staying safe and secure online. Our goal at NCSA is reinforcing our cybersecurity best practices among a broader audience to better impact online behavior.

How Small Businesses Can Prepare for the Next Natural Disaster

As we have witnessed these past two months, Hurricanes Harvey, Irma and Maria devastated many parts of the south coast and the economies of Texas, Florida and Puerto Rico. The damage from the storms is expected to halt U.S. GDP by an entire percent. Recent estimates put the costs of recovery at around $85 billion and $59 billion for Harvey and Irma respectively.

While larger businesses have the resources to rebuild and recover, many smaller businesses do not. They will likely struggle to account for the cost of repairs, and even lose their companies in the process. According to FEMA, nearly four in 10 small businesses struck by a natural disaster are forced to permanently shut down. With more storms expected in the coming weeks as hurricane season persists through November, it is vital that small business owners prepare in the meantime.

The first step for any small business is to prepare internally. Here are three best practices that small-business owners can adopt to prepare for a future hurricane or any other natural disaster.

  1. Establish a recovery plan: Often, disaster recovery plans fall to the bottom of small-business owners’ to-do lists, especially if their business is located in an area that doesn’t typically experience high-risk weather. However, no business is immune from a harmful storm’s impact. So disaster preparedness starts with a formal plan that’s comprehensive and allows the company to quickly restore its normal operations following an emergency.
  2. Discuss your plan with all employees: It is crucial for your entire staff to be on the same page when it comes to what your disaster plan involves in order for it to be effective. So once small-business owners have a plan in place, they need to ensure that their employees know what’s included and what their responsibilities are should a natural disaster strike. Owners can share this information by emailing a copy to all employees and discussing the plan in detail at the next all-hands meeting.
  3. Back up your business’s data: Small-business owners should ensure their data is backed up both virtually and physically in a secure location. Doing so can prevent a natural disaster from turning into an even worse data loss debacle.

While following these steps can get small businesses on the right track toward hurricane preparedness, no company can be fully protected without insurance. With a plan in place, the next step is finding the right hurricane insurance plan. But there is often confusion over what proper hurricane coverage looks like.

Small businesses should take into account the specific rules and regulations of their industry when choosing an insurance plan to protect against hurricanes and other natural disasters. That said, there are two policies that are essential to businesses that need a defense against hurricanes.

Commercial Property Insurance is a policy that helps cover some of the cost to repair damages or restore your business property should a natural disaster cause harm. It is important to note, however, that many commercial property insurance policies only protect damages caused by hurricane winds, not flood damage resulting from rising water. If your business is located in an area prone to hurricanes, ask your insurance provider about “riders” (also known as endorsements), which can be added to your policy for more complete coverage.

Business Interruption Insurance is a policy that helps companies deal with the extended time (and business) they may lose as a result of hurricane damage. Often, this forced, lengthy pause in operations is what causes small businesses to permanently close, due to the high costs they incur and their inability to generate the revenue required to cover those costs. Business interruption insurance helps small businesses through by providing the funds for necessities such as taxes, loan payments, rent and salaries. Again, it is key to ask your provider exactly what a policy covers before purchasing it. Typically, business interruption insurance only protects your business if the circumstance that forced you to shut down is already covered by your commercial property policy.

This year’s Atlantic hurricane season has already been deemed the third worst on record. With more than a month to go, small businesses can ensure that they’re protected from damages through internal company policies and a thorough insurance plan. As far as hurricane insurance coverage goes, it’s crucial for businesses to do their research and find the policies that will provide the best protection. Although developing these plans will take time and effort, the risks mitigated and money saved as a result will be well worth it in the long run.

The Best and Worst States for Business, According to CEOs

For CEOs, who naturally favor “pro-growth,” low-tax states, southern states present an undeniable bastion for business, according to Chief Executive magazine’s 2015 “Best and Worst States for Business” survey.

In this year’s survey, Texas remained the best state for business for the 11th year in row, followed by Florida, North Carolina, Tennessee and Georgia. Since the recession began in December 2007, 1.2 million net jobs have been created in Texas, while 700,000 net jobs were created in the other 49 states combined, the magazine reported. This job creation contributed toward unemployment rates 1% lower than the national average, an advantage rounded out by extremely favorable taxation and regulation, strong workforce quality, and very good marks for living environment.

Despite notably low unemployment, two of the greatest hubs for business drew particularly unfavorable marks from CEOs: California ranked last in the survey, preceded by New York. Illinois, New Jersey and Massachusetts completed the bottom five. CEOs gave these states the lowest ratings because of their high tax rates and regulatory environments. One CEO told the magazine, “The good states ask what they can do for you; the bad states ask what they can get from you.”

Compared to the 2014 rankings, Idaho has made the largest improvement, rising 10 spots to number 18, primarily due to high growth rates in GDP, while South Dakota dropped eight places, “even though quality-of-life attractions enhance the state’s low-tax bona fides,” the magazine reported.

Check out the full rankings below:

Best States for Business rankings

 

Understanding Small Business Insurance for Young Entrepreneurs

How would you like to be a billionaire by the time you’re 23? If you think that’s a dream too good to come true, think again. That’s exactly what happened to Mark Zuckerberg, creator of Facebook.

online pharmacy rogaine with best prices today in the USA

While it’s true he didn’t strike it rich as a teenager, he did lay the groundwork for the massive worldwide social network while still in his teens at Harvard University.

Steve Jobs was a successful entrepreneur known for his charisma and passion, but also his uncanny ability to make decisions that resulted in success. Like Steve Jobs, successful entrepreneurs tend to break away from the molds their peers seem tied to, and do what other people said was impossible. But for every success story there’s a dozen not so happy endings. If you’re wondering what it is that sets the successful apart from the failures I’d like to suggest that it comes down to understanding and managing risk.

As a young entrepreneur, navigating all the legalities and requirements of starting a business can be mind boggling. It’s easy to get overwhelmed by what you need, what you don’t need, and how much to pay for it all. In the early stages it can seem like you’re bleeding money at an unfathomable rate, but don’t fret. This is often typical in the business world, especially for new businesses.

It’s probably safe to say we’ve all heard the saying “it takes money to make money”, but have you ever heard “it takes money to save money?” When it comes to business insurance that’s the whole truth and nothing but. Without it, you and your business are exposed to more risks than I have time to list. Some risks are easy to see, while others are not. But one thing holds true, they’re all manageable with insurance. To prove my point here’s a short list of risks insurance can help reduce.

  • Preventing Financial Loss – Burglars break in and steal, vandals destroy things without reason, Mother Nature has a temper, and accidents can happen. Preventing loss is one of the best reasons to have good insurance coverage. If a thief steals equipment or a fire damages your building, you’ll have to pay out of pocket to recover the loss if you’re uninsured. A good policy makes even the biggest losses a minor bump in the road.
  • Mitigate Liability – Running a business puts you in the liability hot seat. Without an adequate policy to protect you and your business from lawsuits you’re literally flirting with bankruptcy. The average general liability insurance plan protects against all types of liabilities that every business faces on a daily basis. Everything is covered, from customers who slip and fall on your wet floors to your damaging another person’s property.
  • Insurance Looks Good – Not only does insurance give you peace of mind, it also makes your business look good. Adequate coverage gives clients and potential customers a sense of stability and responsibility; they can trust your business to weather unexpected storms. Likewise, investors and banks like it because insurance tells them their money is in good hands. If something detrimental happens to the business, you banks and investors know you won’t default on your loans. Stabilizing your image is one effect of business insurance that most entrepreneurs don’t fully realize or take into consideration, but it’s a must for success.
    online pharmacy addyi with best prices today in the USA

  • Legal Obligations – Often times people get insurance for one reason, because it’s required. Most states have laws on the books that require certain insurance, or levels of coverage, before an individual can conduct business. As the laws vary from state to state and industry to industry you’ll want to contact an insurance agent or a small business attorney near you for more information.

Starting a business is a lot of fun, but make sure you cover your basis in the beginning.

online pharmacy sinequan with best prices today in the USA

Having the right insurance will reduce your risk and make you more appealing to potential investors. I know you’re in this business because you’re passionate; so don’t risk the success of your business to save a few bucks.