Pause for a minute and ask yourself if your business is prepared for a disaster. Chances are you have some plan for a large scale disaster like hurricanes, earthquakes and fire, but what about other disasters like hackers or human error? The truth is, many businesses with a disaster recovery plan often forget to ensure they cover all potential disasters.

Here are five tips to help ensure that your business is fully ready for the next disaster.

1. Backup everything While it can be tempting to only backup the most important data and programs, it can be a chore to identify what is deemed to be important. Who knows, a file that is non-essential today may become essential in the future. If it is lost due to a disaster, this could prove to be a problem.

It would be a good idea to look for a backup solution that covers all data and programs. But, having a full backup solution isn't enough, you also need to ensure that recovery is easy and can be implemented quickly.

2. Look into tiered recovery Establishing a tiered recovery method means identifying the value and importance of existing systems and utilizing a recovery method that meets needs. It would be a good idea to identify mission critical systems and adopt a recovery method that can have these systems up and running as quickly as possible. From there you can tier different systems and match a recovery method. For example, archived files are likely not needed right away, so they can be recovered at a later date, using a slower recovery method.

3. Keep copies of all keys and licenses With the amount of software and programs businesses use on a daily basis growing, it would be a good idea to keep copies of the activation keys (the string of digits and letters you enter to activate the full version of software) and purchased licenses.

While many of these are now distributed electronically through email, there are still software developers that distribute keys by mail or with the physical install CDs. If you lose the codes in a fire, you will be out of luck and have to purchase the software again. This is an extra charge you likely don't want.

4. Pick the right recovery locations The best recovery plans offer numerous backup solutions which are hosted in different locations. A good provider knows this and will utilize data storage centers as far apart as possible. If you choose to backup your own data, it would not be a good idea to keep the backups in the office.

Similarly, if you are preparing for a big disaster, you likely have physical locations that you can move to if your main business location is damaged or destroyed. Optimal plans will have more than one location identified, and have them as far apart as possible. This will minimize the chances of losing full operations and increase your business's ability to bounce back quicker.

5. Match your recovery plan to your business There are so many different backup and recovery options that it can be tough to pick one. The best course of action is to look at your systems and how they work. If you operate strictly offline, a cloud based backup solution likely isn't your best bet. Or, if you operate fully in the cloud, a physical tape or hard disk backup may not be optimal.

If you are looking to beef up, or establish a disaster recovery plan, try working with an IT partner like us, who can help you find the optimal solution that can meet your needs and budget.

It's the year 2013, or if you follow the Chinese Zodiac, it's almost the year of the Snake. Regardless of when you celebrate your New Year, social media will be sure to be there to help you connect with other revelry makers. Because it's a new year, you can look forward at what social media trends will be popular for small to medium businesses in the coming 12 months. Below are five potentially huge social media trends for 2013.

Social goes mobile The way people view information is changing thanks to increasing adoption of tablets and mobile devices. The adoption rate is forecasted to rise in 2013, with the number of users who view your content on mobile devices soon overtaking those using a more traditional browser.

Because of this, the use of web technology that resizes text, images and other content to any screen size, will become even more popular. What this means for social media managers is that you will need to keep mobile users in mind when developing content and ensure it can be easily viewed on tablets and smartphones.

Visual marketing Visual marketing is the use of video, images, infographics, etc. to get your message across to your target audience. The key to this type of marketing is that it enhances brand memory, recall and identity.

Social media sites like Pinterest, Instagram and Facebook, are perfect platforms that, with effective use, can create an awareness that resonates with target groups, creating increased engagement.

While this marketing concept isn't new, you can expect to see more companies focusing on developing more content that's visual in nature throughout the next year and beyond.

Content marketing (B2B) When it comes to B2B marketing on social platforms, companies have been using content as the main brand driver. This takes many forms, including: Papers, ebooks, infographics, webinars, etc. For example, infographics have proven to be valuable tools in increasing brand awareness. Most companies are well aware of this and it's hard to find a business that doesn't have some kind of content on their website.

In 2013, you can expect to see many enterprises turning to social media platforms like Pinterest, Facebook, Google+, etc. to develop and share content. Couple this with an increase in visual content and there will be an increased trend for smart marketers to develop engaging posts that are also visually appealing.

Google+ is a Google must Google is playing the long game with it's social media platform, Google+. While it currently isn't anywhere near as popular as Facebook, Google is making changes to the platform and turning the service into a central hub for managing your online presence - when it comes to Google that is.

Last year, Google rolled out a number of services, such as Local, into Google+. This forced businesses with a Google presence to use this service to manage it. This trend will likely continue over the next few years, with the slow release of valuable services that are exclusively for Google+ users and force users to switch to them.

In other words, for companies using Google's services: Google+ is a Google must.

Facebook remains king. For now! Despite a disappointing IPO last year, Facebook is still #1 when it comes to social media. This likely won't change in the near future. Facebook is well aware of this and will continue to take steps to keep users.

We can expect Facebook to introduce a premium version of Pages, along with increasingly powerful analytics tools. Alongside this, their mobile advertising service will likely mature into a viable business option. What this means for businesses is that they will need to keep on top of these offerings and figure out how to best leverage their content.

These are just five social media trends for the coming year. Have you identified any more? What do you think will be the biggest change to social media in 2013? We're interested to hear your thoughts.

February was an interesting month in terms of disasters. First there was the incident at the Super Bowl where half the stadium's lights abruptly went out leaving the game suspended and millions of viewers wondering what was going on. Then there was another Super Storm that hit the Eastern US, not to mention all the dramas going on around the world. These events continuously highlight the need for all businesses to have a Business Continuity Plan.

While a Business Continuity Plan (BCP) can be complicated, and comprised of many different objectives, the main reason companies include this in their business strategy is to build up resilience. Disasters of many kinds can result in either lost data, sales or even business. While a BCP won't prevent large-scale disasters, it will help your business recover quicker.

When looking at how resilient your business is, there are three main aspects to consider.

RTO RTO stands for Recovery Time Objective and is the time period from the beginning of the disaster to recovery of operations. This number, or time period, will be different for every company. For example, companies that operate online stores will likely have a short RTO, as they rely on 24/7 uptime to conduct business and sales.

In general the RTO is an objective, one that employees and stakeholders should strive for. Having one can help planners identify potential problem areas along with critical functions that must be recovered and any preparations that will be necessary. If a business does not address, or identify a set time to recovery they could see an unnecessary increase in recovery times, or worse lost profits.

RPO RPO stands for Recovery Point Objective and represents the amount of data a business is willing, or can afford, to lose. The easiest way to figure this out is to look at your systems and think about how much data or information you personally can lose before being unable to do your job. From there, you can work out the frequency with which you should back up your systems.

For example: If you figure that you can lose a day's worth of data, then your backup should be done on a daily basis. If you currently back up your data or systems once a week, and figure you can only miss a day, then RPO helps you realize this is not enough and that you need a system or plan that better meets your needs.

The difference between RTO and RPO is that RTO is a broad process that covers the whole Business Continuity timeline, while RPO is focused on data and backup.

ROI When looking at different Business Continuity systems, it is always a good idea to calculate the ROI, or Return on Investment. You can calculate the cost of the integrating any plan, time to implement and recovery, expected value it can bring your business and avoided losses. This will give you a pretty good picture on whether current systems are strong enough, and if new alternatives are better.

By figuring out the time you expect to recover, how often you should back up and the total ROI of proposed, or existing, systems you can gain a clearer picture of how resilient your company is.

If you're looking to make your company a little more resilient, why not get in touch with us? We are happy to sit down and discuss your options with you.

If the scale of natural disasters in 2012 is any indicator of what 2013 is to bring, we could see an increase in the severity of the weather. For businesses, this often means disruption of key services. We don't have to tell you that any disruption in service could have a drastic negative impact on profits. To mitigate potential losses, many companies are turning to Business Continuity (BC). Those just starting to develop their own plans are often at a loss due to the scale of the project. We're here to help make it a bit less daunting.

Here's four questions you should answer when looking into adopting a Business Continuity plan.

1. What systems need to be recovered first? A good idea is to request each department/role list their essential systems and rank them in the order they need them back online in order to do their jobs. From here, you can compare answers and rank them in priority. For example, If all roles say they need Internet connection back online first, you know that the Internet is the first system that needs to be recovered.

2. What do we need to assure customers of stability? For the majority of businesses, the customer is the lifeblood. However, most customers will only stick around for a limited amount of time before going to a competitor if your business can't meet their needs. To keep customers loyal during a time of disaster, you need to prove you are either stable, or working to get there. Some examples of this could be a backup site with basic functionality that can take the place of your main website if it goes down.

3. What do business partners require? Your business partners are just as important as your customers and are often the link between the two. With partners, you often have set requirements that you need to meet in order to continue order fulfillment and shipment. You need to be aware of what these are and the related systems. After all, how are you going to get your product to your customers?

4. Are there any contractual requirements with vendors? Businesses that work with suppliers or vendors often have contractual obligations such as payment due on a certain date, or a set product order volume to fulfill the contract. As with business partners, you need to be clear on what these obligations are, and how you meet them. For example, if you pay a supplier on the 10th of every month, most will expect payment on the 10th, regardless of if you are operational or not.

Once you have the answers you needed you can take a step back and try to come up with a timeline of how long continuity actions should take and what your priorities are. From here, you can draft an actual plan, or look for vendors that can work with your systems and provide a continuity plan or service that meets your needs.

If you are looking for a business continuity system for your business please give us a call, we may have a solution that fits with your business.

When it comes to disasters, people and businesses tend to think big, really big. Take for example Superstorm Sandy that hit the eastern US earlier in November. It can be pretty much guaranteed that a whole string of businesses will be preparing diligently for the next big storm. While this is important, smaller issues that happen at a higher frequency will be pushed to the side. One common issue revolves around passwords, and who manages them.

Search for Terry Childs online and you'll find a number of articles about a former Network Administrator for the city of San Francisco who is currently in jail for supposedly doing his job. His job, as a network administrator, was to manage the city's network. When he was asked by his boss for the passwords to critical parts of the network, he refused on the grounds that the request went against the established network policy.

Issues like this: One employee or vendor in control of vital passwords, can pose a big problem to companies, especially during times of disaster. Imagine if you work with an administrator who is based in New York, and they lost power during Sandy. What could you do if your network crashed, or you needed access to your system and someone else has all the passwords?

The most crucial factor is you shouldn't trust one person or organization with passwords to vital systems. We don't mean personal passwords to systems, we mean passwords to vital systems, like servers or Internet connections. If one person has the passwords, there's just too much risk. If they are disgruntled, they have the power to do some serious damage, and if they are injured or are no longer alive, you'll face untold amounts in lost profit, and fees in recovering passwords and information.

There are a number of things you can do to mitigate problems like these.

• Keep a password list - It could be a good idea to keep a physical list of the more important passwords. This is an important document, so it's a good idea to not leave this one lying around. If you have a safety deposit box or safe in the office you can put the list here.
• Set passwords to the position, not the employee - Many companies will often give passwords to one person who will be in charge of these. When they advance, or if they switch roles, they will often take a password with them. Instead, look at organizing this a different way around: Assign a password to the position rather than an individual so that when they leave the person filling their role is given this password instead.
• Assign a person to be in charge of passwords - This is a good idea, especially if you work with Managed Service Providers. A person of authority within your organization should be the main contact person, and they should have copies of all passwords given to outside companies.
• Change passwords regularly - To avoid having employees steal things it's a good idea to change your passwords on a regular basis. If an employee leaves a position and is in charge of an important password, you should take steps to change this scenario even if you trust the person.
• Create the right policy - If you are going to share passwords, or have a limited number of people who know them, it's a good idea to create a policy that clearly defines: what position has access to what; what happens when someone leaves; how to recover passwords; how many backups will be kept; how and when the password is to be shared. Basically you want to ensure you aren't caught flat footed. With employees, confidentiality agreements that explicitly state what they can and can't share and the consequences of breaching the policy should also be clearly defined and followed.
• Pick who to trust - Important passwords shouldn't be shared with everyone, and you should take steps to vet the trustworthiness of the person or company you will be giving passwords to. If you have an established sharing process, and a vendor you're considering working with is pushing a policy that is different from yours, it may be a good idea to look for someone whose policies are closer to yours, or who can work around your policies.

If you are in the unfortunate position of not having the passwords to your system, it's a good idea to get in touch with IT professionals like us, as we are often able to recover systems and passwords, or at the very least, reset them. After you recover your systems, it's a good idea to test for vulnerabilities, especially if the last person in charge had a tendency to not share information. We can help with this and any other concerns with password management and recovery, so please contact us if you would like to learn more.

Disaster Recovery (DR), the act of ensuring that your systems and departments are ready for a disaster and that your IT systems can recover from it, is an important issue for all companies. While large companies with operations in more than one country can often bounce back quickly, small to medium businesses in the disaster area might have a tougher time, Ensuring a DR plan is reliable is necessary for small to medium sized businesses.

Here are four ways to ensure your DR plan is sufficient and company is disaster-ready.

Are your systems compliant? Many DR systems are licensed, and it’s important to ensure that these licences are both up-to-date and supported by all necessary backup systems. If you’ve added or changed components like a server or software, but not upgraded the relevant licenses, chances are your systems won’t be covered when disaster strikes. If this is the case, when you go to retrieve the backup, you’ll just get a license error; your data can’t be retrieved.

Another issue with DR software is that it’s often not used, lying dormant for years. You should regularly check and ensure the software meets modern compliance standards, is up-to-date and licenses have not expired. You should also be aware of how the software you use integrates and interacts with the DR software. For example, an upgrade to a new email server, may not communicate well with your DR software.

What’s the status of your backup server? As most DR plans usually involve a separate server from day-to-day servers, it’s important to ensure that they are functioning properly, usually by having the vendor test them. It’s also equally important to communicate with the vendors or manufacturers of the servers to ensure that the correct software/hardware licenses are in place and cover the function. If they aren’t, you could risk legal action or being fined.

Test regularly Regular tests are an integral part of a properly functioning DR plan. You need to conduct tests on at least a yearly basis to ensure all systems involved in the DR plan function well. From these tests, observe any function that performed poorly, or not at all, and take steps to fix or replace it.

Work with a knowledgeable partner DR plans and systems can be a complicated, almost messy aspect of business. While this may be, DR is crucial to the survival of a business after a disaster, and shouldn’t be treated lightly. To get it right liaise with DR experts to create and maintain a plan that meets your needs.

If you would like help with either implementing or improving your DR plan, please contact us, we may have a solution for you.

The Internet is the lifeblood of many, if not all companies. We rely on it to communicate, research and relax, and in the modern world, we hardly disconnect from it. As we increasingly rely on it, any disruption in service will normally cause employees to be less productive and your company to lose money. Any slowing down with your Internet can be just as bad, if not worse.

Have you noticed that from time to time the Internet is a lot slower than it should be? If so, this could be because something is hogging all the bandwidth, which is the rate at which data is transferred in and out of one connection. Here are six of the most common bandwidth hogs.

1. YouTube. If you allow employees to watch YouTube or connect to other streaming services, and they are using it frequently, you’ll notice a significant decrease in overall Internet speed. Some companies have noted that 40 staff using YouTube will account for over half of the total bandwidth usage.
2. FTP sites. Some companies run FTP sites that host essential files that employees can download. When more employees are downloading/uploading files to the FTP site there’s less bandwidth available for other operations, so the Internet will be slower.
3. P2P. P2P covers a large number of aspects including video conferencing and sharing of files via programs such as BitTorrent. All P2P services use an incredibly large amount of bandwidth when in operation, slowing the Internet to a point where speeds from 10 years ago were faster.
4. Online backup. Backing up essential files will capitalize bandwidth leaving very little for other operations. It’s a good idea to conduct backups after office hours to minimize interruptions.
5. Encryption. In certain industries regulatory bodies require a certain level of encryption, or for companies to take certain steps to secure data. Any extra encryption or security features will slow sites down, however this usually cannot be avoided.
6. Spam/Virus/Malware. As many scams aim at stealing information the main way this is done is by sending the information over an Internet connection, that is your Internet connection. If you have viruses or other security threats you can guarantee that your Internet will be slower.

If you notice your Internet is slowing down at certain times, it’s a good idea to check and see if any of these six bandwidth hogs are in action. You can:

• conduct a virus scan to look for malware;
• ensure your computers aren’t backing up and if they are schedule the backup for later;
• turn off or block any and all sharing services, and schedule video conferencing for times when bandwidth isn’t needed by other functions; and,
• limit the bandwidth assigned to YouTube and other streaming services.

Before you tinker with any network connections though, it’s best to contact an expert . We may not just be able to help, but potentially provide an even better solution for you, speeding up your connection and your business success.

Business continuity - the act of ensuring that business activities are available at all times, including during disasters - is a practice all businesses, regardless of their size, should be implementing in their organization. While many businesses backup their data and think that they’re protected, they will find that during times of disaster they aren’t.

Here are five things you should be doing, aside from backing up your data, to ensure you're ready for anything.

• Where to work. One of the first things you should consider is where you're going to work if your office is inaccessible. Hotels, convention centers or other office buildings are viable locations. Whichever location you pick, you should pick at least two different places, as far apart as possible. You should also be sure to inform your staff and include maps of the routes to the locations you’ve chosen.
• Replacement equipment. It’s incredibly important that you know exactly what equipment you use and how integral it is to operations. For mission critical equipment (equipment your company absolutely can’t work without) you need to have a plan in place as to how you can quickly replace lost equipment, the cost of it and replacement time. For less important equipment, you should have a couple of vendors in mind.
• Communication systems. During adverse business conditions it’s vitally important that you and your employees are able to communicate both with one another and with your clients. You should look into a communication system that’s flexible, can be established wherever you are and allows you to keep your numbers. VoIP is a great system, telecommuting is another option as well.
• Coordinate staff. You’re staff drive your business, without them, your business likely won’t be able to run. With the continuity plan you develop, it’s important that you have hard and soft copies of the plan that are accessible to all staff, and staff know their role in the plan. When your plan is enacted you need to contact your staff and ensure that there aren’t any problems.
• Access to critical documents. If you have a good backup location, can set up equipment quickly and staff know their roles you may think your plan is perfect. You’re missing one key element: access to documents, employees won’t be able to work without them. It’s important to ensure that you can access your data backups, which means you should probably keep copies offsite and in the cloud if possible.

A continuity plan is important, hopefully you’ll never have to enact it. Nevertheless, you should plan for the worse. If you’re unsure of where to start, or feel your current plan is inadequate, please contact us.

Studies and news reports are showing a marked increase in the number of small and medium-sized businesses that are being targeted by hackers. One major reason for this is their general lack of security systems, making them very vulnerable to theft.

In physics, there's a concept called 'the path of least resistance'. The meaning is plain enough – objects that move in a system take the path where they will encounter the least challenges and hurdles in order to quickly move to wherever they are going.

Apparently, the same principle applies to hackers nowadays. Instead of targeting larger firms for that big 'score', hackers are now considering it more feasible and much easier to victimize smaller firms and companies, even for a much smaller amount of money.

Why is that? First, smaller companies generally have much more vulnerable IT systems. Security is minimal or average at best, and the hackers don't get as much heat or attention when compared to trying to breach the much more complicated, state-of-the-art security systems of bigger firms and businesses. Take a small newsstand business in Chicago: cyberthieves were able to install a Trojan in the cash registers which sent swiped credit card numbers to Russia. When the jig was discovered, Mastercard subsequently demanded an investigation – at the expense of the business owner – and the proprietor had to shell out a hefty $22,000.⁽ⁱ⁾

A survey in the United States reveals that more than half of small or medium-sized businesses believed that they ran no risk of being victimized by hackers, and less than half of the respondents had security systems in place.⁽ⁱⁱ⁾ That looks like a path of least resistance, as far as hackers are concerned.

The loss of a few thousand bucks may not be much for a big business, but it can make a significant dent on the profits and sustainability of smaller organizations. And in the case of implanted viruses that steal credit card information, your reputation can also take a big hit. So if you want your business to stay truly safe before it's too late, please contact us so we can discuss options and blueprints to make your business secure.

References: (i) and (ii)

Business Continuity Planning (BCP) - a plan on how to keep your business operational during any adverse conditions - is an important process that every small business should implement. One of the major aspects of this is where you should backup your business’s data. Having a backup of your data is like an insurance plan for your company, with it, you’ll be able to keep operating during adverse conditions.

Here are the three main types of backup you can utilize in your company.

1. On-site backup. On-site storage is the practice of keeping a backup of your data in the same location that the original data is stored. If you have an external hard drive that you back your computer onto and it stays in the office, this is a form of on site storage. The main advantage to this is that if you need to restore a system, the data is right there and the backup can be started immediately. The main disadvantage is that if there’s a disaster, your backup data will most likely be gone.

2. Off-site backup. Off-site storage is similar to on-site storage, typically using the same form of hard drive to backup your data. The main difference is that drives are stored in a remote location, away from your business. The upside to this method is that if something happens at your physical location, your data is safe. The downside to this is that it takes time to travel to the storage location, retrieve the data, backup your system and take it back.

3. Online backup. Online backup utilizes the Internet to allow you to backup your data. The backups are kept on hosted servers (the cloud) and can be accessed through an application. The main pro of this method is that you can quickly and easily recover your data from any location, as long as you have access to the Internet. The downside is that if you have a lot of data, backups will use a lot of bandwidth, thus slowing your Internet speed down.

Regardless of the method, you should be backing up your business data at regular intervals. The best solution is to backup your data using all three methods. Use on-site for short term data storage (less than 1 week), off-site for monthly, and online as your main backup. That way, if one goes down, you have it covered. If you’d like to start backing up your data, or would like to know more about the different methods, please contact us.