policy

CAMBRIDGE, MA – IBM (NYSE: IBM) Security today released findings from a study focused on the behaviors and security risks of those new to working from home (WFH) during the COVID-19 pandemic. The study shows more than 80% of respondents either rarely worked from home or not at all prior to the pandemic, and, in turn, more than half are now doing so with no new security policies to help guide them. This shift to working from home has exposed new security risks and has left nearly 50% of those employees worried about impending cyber threats in their new home office settings.

Now that more than half of the U.S. population is working from home—and a large percentage is expected to continue to do so through the rest of 2020 and beyond—many companies may be playing catch-up as they attempt to manage the security risks of rushed remote-work models. Business activities that were once conducted in protected office environments, and monitored under specific policies, have quickly transitioned to new, and potentially less secure territory. For example, customer service agents who worked in closely managed call centers are now managing sensitive customer data at home.


As a result, IBM X-Force Red has expanded its security testing practice to help companies identify potential blind spots in the work from home world and assist them in designing secure frameworks. The practice will look at key areas including systems that risk exposure of intellectual property, client and employee data, as well as collaboration tools such as video conferencing platforms, and file sharing platforms.

“Organizations need to use a risk-based approach with work-from-home models, then reassess and build from the ground up,” said Charles Henderson, Global Partner and Head of IBM X-Force Red. “Working from home is going to be a long-lasting reality within many organizations, and the security assumptions we once relied on in our traditional offices may not be enough as our workforce transitions to new, less controlled surroundings.”

No Support for Newbies Creates Opportunity for Cybercriminals
The rapid shift to working from home has also changed the ways many organizations do business from moving face-to-face meetings to video conferencing calls to adding new collaboration tools—yet the survey showed many employees are lacking guidance, direction and policies.

Sponsored by IBM Security and conducted by Morning Consult, the IBM Security Work from Home Survey is comprised of responses from more than 2,000 newly working remotely Americans. Key findings include:

  • Confident, Yet Unprepared: 93% of those newly working from home are confident in their company’s ability to keep personally identifiable information (PII) secure while working remotely, yet 52% are using their personal laptops for work – often with no new tools to secure it, and 45% haven’t received any new training.
  • Lacking PII Guidelines: More than half have not been provided with new guidelines on how to handle highly regulated PII while working from home. This is despite more than 42% of people who manage PII as part of their regular jobs now doing so at home.
  • Policy Awareness: More than 50% of respondents don’t know of any new company policies related to customer data handling, password management and more.
  • Personal (Unprotected) Devices in Use: More than 50% of new work from home employees are using their own personal computers for business use, however 61% also say their employer hasn’t provided tools to properly secure those devices.
  • Passwords Lacking Protection: 66% have not been provided with new password management guidelines, which could be why 35% are still reusing passwords for business accounts.

Expanded X-Force Red Remote Work Security Testing Practice

X-Force Red has expanded its security testing offerings to help all organizations test and strengthen their security posture and to specifically address those that are new to remote workforces. With more than half of surveyed new work from home employees lacking the training and policies needed to secure critical business operations, this expanded practice can help organizations fill crucial security gaps.

  • Remote Work Adversary Simulation: leverage X-Force Red’s Adversary Simulation services with expanded remote work scenarios designed to test the detection and response effectiveness of remote blue teams and incident response playbooks not originally designed with a dispersed workforce in mind. These simulations can include advanced attacks targeting multi-factor authentication (MFA), VPN, and Single-Sign On (SSO) portals, compromised employee laptops or remote access credentials, ransomware on employee or BYOD devices, or the robustness of remote access controls.
  • WFH Application Penetration Testing: building on the existing X-Force Red Penetration Testing program, this expanded offering will focus on testing the security and business controls of remote access applications, collaboration tools, and call center management applications for organizations new to work from home models. This includes testing all remote collaboration tools and practices, which will consist of reviewing video conference policies and practices, file sharing controls and default settings, policies to secure sensitive meetings, procedures to help remediate meeting breaches and ensuring that applications that use PII are being deployed securely. This expansion will also include increased remote delivery of these services to address new business demands in today’s climate as well as future scenarios that arise.
  • Phishing Exercises: these exercises will focus on phishing and social engineering to pinpoint remote employees’ weaknesses. X-Force Red Social Engineering testing will simulate phishing attacks on employees, conduct social engineering and open source intelligence (OSINT) activities and provide training and recommendations based on the outcomes. Employees will be trained on how to detect and respond to a range of tactics, including email and voice phishing, the use of OSINT data and more.

To download the full report of the survey results, go to: http://newsroom.ibm.com/image/IBM_Security_Work_From_Home_Study.pdf

For more information on X-Force Red go to: IBM.com/xforcered

About IBM Security
IBM Security offers one of the most advanced and integrated portfolios of enterprise security products and services. The portfolio, supported by world-renowned IBM X-Force® research, enables organizations to effectively manage risk and defend against emerging threats. IBM operates one of the world’s broadest security research, development and delivery organizations, monitors 70 billion security events per day in more than 130 countries, and has been granted more than 10,000 security patents worldwide.

Read more

Filed under Web Hosting News by on #

At the Microsoft Build 2019 Developer Conference, the tech giant is making remarkable momentum in the cloud. It has announced a broad range of innovations that will help its Azure to dominate the world of cloud computing. The three-day conference taking place in Seattle, WA, brings several new opportunities for the developers and the enterprises looking to dive into the latest cloud technologies, explore client development techniques, or discover new open source tooling and libraries. The biggest news at Microsoft Build 2019 spanned Windows, Linux, Edge browser, Fluid Framework, and more. Major announcements at Microsoft Build 2019 Developer Conference 1. Kubernetes Event-driven Autoscaling (KEDA) Microsoft is adding a number of new features to its Azure Kubernetes Service (AKS), which includes Kubernetes Event-driven Autoscaling (KEDA) and Azure Policy for AKS. KEDA is an open source component that supports the deployment of serverless event-driven containers on Kubernetes created…
Read more

Filed under Web Hosting News by on #

ST. LOUIS – TierPoint, a leading provider of secure, connected data center and cloud solutions at the edge of the internet, today announced the launch of TierPoint CleanIP™ – the company’s fully managed, next-generation firewall service.

“Increasingly, IT leaders are looking to secure their enterprises for less cost, with less complexity, greater visibility and more granular control, across users, devices, and applications,” said Rob Carter, TierPoint Senior Vice President of Product Development, Architecture and Engineering. “CleanIP responds to those needs, enabling full-feature, next-generation firewall functionality, flexibly scaling from the edge to the core, with industry-leading security and performance, wherever workloads reside.”


Leveraging the Fortinet FortiGate Next-Generation Firewall platform, CleanIP helps organizations protect against a much broader spectrum of intrusions than traditional managed firewall services and does so on a location-agnostic basis; it can be deployed across all venues, from client premises to TierPoint facilities, with public or hyperscale cloud support.

“TierPoint is a Fortinet Platinum MSSP Partner that has established a growing presence in the healthcare, financial, education, government, SaaS, communications, and enterprise markets as a leader in managed security and cloud services,” said Matt Pley, Vice President of Cloud, Carriers, Service Providers & Strategic Accounts at Fortinet. “We’re pleased to partner with TierPoint to offer customers advanced firewall services powered by the Fortinet Security Fabric and FortiGate Next-Generation Firewall.”

In addition to traditional managed firewall functions, CleanIP offers intrusion detection and protection systems (IDS/IPS); SSL traffic inspection of all encrypted content; content filtering (excluding web pages or e-mail deemed objectionable or outside of policy); network anti-virus/block malware; anti-botnet, IP reputation and application protection; VPN access with secure, multi-factor authentication; application awareness (filtering packets, to help distinguish between safe and unwanted applications); and user awareness (with granular control of applications by specific users, user groups, and user machines, limiting what can be sent and received).

TierPoint is hosting a related webinar on November 1, with Fortinet and SHI, on “Best Practices When Deploying Next-Generation Firewalls.”

About TierPoint
Meeting clients where they are on their journey to IT transformation, TierPoint (tierpoint.com) is a leading provider of secure, connected data center and cloud solutions at the edge of the internet. The company has one of the largest customer bases in the industry, with 5,000 clients ranging from the public to private sectors, from small businesses to Fortune 500 enterprises. TierPoint also has one of the largest and most geographically diversified footprints in the nation, with over 40 world-class data centers in 20 markets and 8 multi-tenant cloud pods, connected by a coast-to-coast network. Led by a proven management team, TierPoint’s highly experienced IT professionals offer a comprehensive solution portfolio of private, multitenant, managed hyperscale, and hybrid cloud, plus colocation, disaster recovery, security, and other managed IT services.

Read more

Filed under Web Hosting News by on #

CHICAGO – ServerCentral introduced its Recover Anywhere managed service powered by Veeam Backup & Replication (part of Veeam Availability Suite). Recover Anywhere is a fully managed service that enables customers to use any infrastructure or cloud platform as the restore point for their applications, data and servers. That means customers can restore data on-demand to their on-premise infrastructure, a ServerCentral Enterprise or Private Cloud, a Managed Amazon Web Services (AWS) solution, or another other cloud provider.

“People often neglect recovery. But backing up is just one part of the equation, it doesn’t do you much good if you can’t recover,” said Tom Kiblin, VP of Managed Services at ServerCentral. “We want organizations to be as confident in the recovery as they are in their backup. RTO/RPO shouldn’t be unknowns or even variables. They should be certainties.”


Everything accessible to everyone, 24x7x365, is now the minimum business requirement and Recover Anywhere is designed to keep customers always-on, regardless of their application architecture or cloud platforms. With Recover Anywhere, ServerCentral’s Managed Services team works with customers to guarantee their recovery time and point objectives (RTO and RPO) are defined and met on an application by application basis, and that their destinations for recovery and restore can meet the changing nature of their business.

“Hybrid cloud environments are the norm today, but the increased criticality and sprawl of data introduces new challenges to maintaining an always-on digital experience,” said Matt Kalmenson, Vice President of Sales and Service Provider Sales, Americas, at Veeam. “ServerCentral’s approach to availability goes beyond backup, leveraging intelligent approaches to data management and the managed service expertise needed to make Hyper-Availability a reality. We are pleased to have ServerCentral as a partner in our effort to solve the key challenges of our joint customers.”

The Recover Anywhere service includes:

  • Complete configuration & administration by ServerCentral’s Managed Services experts
  • Backup, retention and restore processes and schedule designed around customer requirements
  • Support for applications, data and complete server environments
  • Quarterly review of backup and retention schedule and processes
  • Annual testing of application, data and server restore processes

Recover Anywhere is part of ServerCentral’s Managed Backup & Recovery Service portfolio, all of which are configured, administered, monitored, and supported by the ServerCentral Managed Services team. ServerCentral works with customers to understand their data protection needs and configure the service parameters to support their unique business, financial, and technological requirements. Customers can adjust the frequency of backups, retention policy, encryption methods, data locations and restore processes to fit these requirements.

About ServerCentral
ServerCentral provides managed IT infrastructure solutions for leading technology, finance, healthcare, and e-commerce companies including Basecamp, ABN AMRO, Vizient and Shopify. Since 2000 we’ve architected, deployed, managed and scaled mission critical solutions across our global data center footprint – including North America, Europe, and Asia. Whether it’s cloud, managed services, infrastructure as a service (IaaS), or colocation, ServerCentral designs the optimal solution for each client. Learn more by visiting us at http://www.servercentral.com or contact us at +1 (312) 829-1111, sales@servercentral.com or follow us on Twitter @ServerCentral.

Read more

Filed under Web Hosting News by on #

When cloud technology first arrived, nobody was sure how significant the outcome would be on the businesses. Eventually it started creating a buzz in the market. Cloud technology has transformed in a way how a business operates, in addition to time and cost saving. This has resulted in it becoming one of the most commonly used technologies over the last decade. Right from SMEs to mid-size to a fully established business -everyone is shifting to the cloud. That’s because this technology increases scalability and serves higher performance. Cloud technology has expanded its roots in the hosting environment as well. In simple terms, to understand cloud hosting, one can refer to the policy of ‘Divide and Rule’. Your website needs some resources to run. These resources are divided across multiple machines throughout the network that can be made available as per the need. Unplanned Traffic Spikes A sudden increase in website traffic may be a good sign for your business. It ultimately will…
Read more

Filed under Web Hosting News by on #

Washington, D.C. – Any business collecting, storing, processing, or otherwise handling data containing personally identifiable information on European Union citizens needs to plan for the General Data Protection Regulation (GDPR) which comes into effect May 25, 2018.

Open-i Advisors’ new GDPR preparation service makes it easy and affordable to assess how web hosting and cloud computing providers collect, store, and use customer data. Our data consultants are experts on mapping the way your organization uses data, finding possible risks, and determining what steps you can take to mitigate risks. You’ll be presented with a document that can be either assessed by our partner lawyers or your own legal team.


We work with you to create a report that includes:
• A summary of risk points
• A map of data flows by department
• A list of suppliers and other third parties with whom the client may share data (or who may share data with the client) with their GDPR statements included as relevant
• A list of all found public privacy or disclosure statements, ready for review

“By working with Open-i Advisors, you can save time and money by packaging up everything you will need to hand off to legal counsel so that they can address your needs in as low cost a manner as possible,” says Open-i Advisors Co-Founder Christian Dawson. “Our legal partners are experts on GDPR compliance, so if you’re looking for a holistic solution we can provide that as well”.

GDPR preparation from Open-i Advisors provides data expertise when you need it, with a data-consultant led discovery process, to analyze how data is used across your organization. Our process is straightforward and simple:

Initial Compliance Check: We speak with key people at your company to assess your data privacy risks and measure your current privacy controls against the GDPR.

Data Discovery – Internal: An extensive register of your organization’s current data processing activities will be produced, along with a comprehensive visualization of the organizational data life-cycle in its entirety.

Data Discovery – External: Open-i Advisors will do a public search of statements made by your organization, including privacy policy, email submission forms, white paper submission forms, client sign-up forms, etc.

Final Compliance Check: Open-i Advisors will highlight areas of anticipated concern to consider business process changes where necessary, and to discuss with legal counsel.

This GDPR preparation service is offered for a reasonable hourly fee, which will result in a low cost for your company to gain all the insights you need to identify internal changes needed by your organization.

Find out more about GDPR Preparation for Hosting & Cloud Companies here: http://openiadvisors.com/consultancy/gdpr-preparatory-consulting/

About Open-i Advisors
Open-i Advisors is a consulting company focused on Internet-related industries. Its hands-on approach helps organizations manage their customer data and determine their optimum market focus using next-generation industry segment data gathering and analysis. Open-i Advisors industry-expert consultants offer their experience and leverage a process that includes the power of quantitative data to better understand and actualize client goals. For more information, please visit www.openiadvisors.com.

Read more

Filed under Web Hosting News by on #