Category: Disaster Preparedness

The Importance of Cyber Security Training

In today’s digital age, where technology has become an essential part of our lives, ensuring the security of our online information has become more crucial than ever before. With cyber threats and attacks on the rise, it is vital for individuals and organizations to invest in comprehensive cyber security training. In this blog article, we will explore the importance of cyber security training and why it should be a top priority for everyone.

Protecting Confidential Information

One of the main reasons why cyber security training is essential is to protect confidential information. In our increasingly connected world, we store sensitive data, such as financial information, personal details, and business data, online. Without proper training, individuals become vulnerable to malicious attacks, such as phishing scams, data breaches, and identity theft. Cyber security training equips individuals with the knowledge and skills necessary to identify and prevent such threats, ensuring the protection of confidential information.

Mitigating Financial Losses

Cyber attacks can have devastating financial consequences for individuals and organizations. The cost of recovering from a cyber attack, including restoring compromised systems, investigating the breach, and compensating affected parties, can be significant. By investing in cyber security training, individuals and organizations can minimize the risk of falling victim to cyber attacks, thereby avoiding potentially crippling financial losses.

Safeguarding Reputations

In today’s hyper-connected world, reputation is everything. A cyber attack not only compromises the security of your information but also tarnishes your reputation. News of a data breach or cyber attack can spread like wildfire, damaging the trust that customers, clients, and partners have in you. By taking proactive measures and investing in cyber security training, individuals and organizations can safeguard their reputations and maintain the trust of those they interact with.

Staying Ahead of Evolving Threats

Cyber threats are constantly evolving, with hackers employing new techniques and strategies to breach systems and access sensitive information. Cyber security training ensures that individuals and organizations stay up to date with the latest cyber security practices, emerging trends, and new vulnerabilities. By staying ahead of evolving threats, individuals can better defend themselves against attacks and organizations can maintain a robust cyber security posture.

Building a Culture of Cyber Awareness

Cyber security is not just the responsibility of IT professionals; it is everyone’s responsibility. By promoting cyber security training, organizations can build a culture of cyber awareness among their employees. Ensuring that employees are equipped with the necessary knowledge and skills to identify and report potential threats reduces the attack surface and strengthens the overall security posture of the organization.

Conclusion

In a world increasingly reliant on technology and interconnectedness, the importance of cyber security training cannot be overstated. From protecting confidential information to mitigating financial losses and safeguarding reputations, cyber security training is crucial for individuals and organizations alike. By investing in comprehensive training programs, we can enhance our ability to identify and prevent cyber threats, ultimately creating a safer digital environment for all.

If your company is one of the 47% of companies that plan to add or change their cybersecurity solution this year, then contact us for assistance.

[Portland Tribune] What can hackers do with stolen DMV information?

Farmhouse Networking was recently approached by the Portland Tribune for comment on the hack of the DMV. We were quoted in their article published yesterday. Here is our full advice:

What to do post DMV hack?

The breach that effected the Oregon DMV was part of a larger hack of the software known as MOVEit. The exploit of the vulnerability in this software was used to gain access to over 3.5 million Oregonians information including:

Name
Home and mailing address
License or ID number
Last four digits of Social Security number

This information can be used by hackers and other darkweb criminals to assume the identity of those whose information has been compromised and perform identitiy theft activities like applying for credit cards or tax fraud. Anyone with an active Oregon ID card or driver’s license should begin monitoring their credit report and look for any suspicious activity. If suspicious activity is found they should immediately call the following to freeze their credit and take actions to reverse the damages done:

Equifax: equifax.com/personal/credit-report-services or 1-800-685-1111
Experian: experian.com/help or 1-888-397-3742
TransUnion: transunion.com/credit-help or 1-888-909-8872

If your company is concerned about the possibility of a similar breach, then contact us for assistance.

The Negative Effects of Repeated Power Outages on Computer Hardware

Power outages are a common occurrence in our area. While they may seem like a minor inconvenience, they can actually have a significant impact on your computer hardware. In this article, we will explore the negative effects of repeated power outages on computer hardware.

Hard Drive Failure

One of the most common negative effects of power outages on computer hardware is hard drive failure. When the power goes out, it can cause the hard drive to stop spinning abruptly. This sudden stop can cause the read/write head to crash into the disk platter, resulting in physical damage to the hard drive. In some cases, the hard drive may become completely unusable, leading to data loss.

Data Corruption

Power outages can also lead to data corruption. When the power goes out, any unsaved data in your computer’s memory is lost. This can cause files to become corrupted or damaged. In some cases, the entire operating system may become corrupted, making it impossible to boot up your computer.

Power Supply Damage

Finally, power outages can cause damage to your computer’s power supply. When the power goes out, it can cause a surge when the power comes back on. This surge can overload your computer’s power supply, causing it to fail. In some cases, the power supply may even catch fire, leading to a potentially dangerous situation.

Conclusion

In conclusion, power outages can have a significant negative impact on your computer hardware. From hard drive failure to data corruption, and power supply damage, there are many potential consequences of repeated power outages. To protect your computer from these negative effects, it’s important to invest in a high-quality uninterruptible power supply (UPS). These devices can help protect your computer from power surges and other electrical disturbances, ensuring that your hardware remains safe and functional.

If your company is not protecting its computers from the damaging effects of power outages , then contact us for assistance.

Our New Email Analysis and Education Tools Helps Keep Your Employees Safe

As you know, we take cybersecurity and the protection of your accounts and data very seriously. That’s why we are always striving to provide you with tools and resources to help keep you and your employees safe from cybercrime.

The most common threat we are seeing is phishing messages delivering malware or stealing credentials. Even though your company might be protected with spam filtering, there are instances where these malicious messages could still appear in your employee’s inboxes. And it’s important we both arm them with as much education and resources as possible to understand and identify these phishes.

We have a new tool that we’d love to demonstrate for your or talk more about. It’s called Catch Phish, and it’s an email analysis and training tool. It connects right to your employee’s Outlook as a clickable application on every message. When clicked, the tool quickly, but safely, scans the important details of the message to find potential threats such as suspicious links or attachments, sender details, or message details such as threatening language or deactivation scares.

This tool is included in our cybersecurity training packages and can help provide the much needed cybersecurity education to all levels of staff.

Do you have 30 minutes to talk about reducing your risks with Catch Phish and our other cybersecurity awareness training tools, then contact us for assistance.

Cost of Insuring Your “Digital” Employees

We were discussing the price customers paid for their monthly maintenance of computers and the comparison was brought up about insurance costs. As a business owner with employees, it is necessary these days to offer health insurance as part of their compensation package. If the company has vehicles that are used for business, then the government mandates that they be covered by minimum amounts of insurance. These costs are then built into the price the business owner then charges their clients for products or services.

Insurance Statistics:

According to Business.com, the average cost of health insurance for a single employee was $645 per month and $1,850 per month for a family.
According to NerdWallet.com, the average cost of car insurance was $179 per vehicle per month.

Questions:

So what about the “digital” employees of the company, aka the computers and network equipment that make business possible. How much are business owners paying to “insure” these assets? What are businesses willing to pay to make sure that their computers and network don’t have a sick day? Does the cost of insuring them include preventative care? Who does the business call in case of an accident or breakdown in the middle of the day? Does the cost of insuring include on-site service or transport to a service center?

If your company wants to keep their digital employees healthy and insure them from accidents, then contact us for assistance.

Synology Active Backup Restore to Hyper-V

Prerequisites:

Make sure Hyper-V Host has CPUs than the combined total of CPUs for all servers being restored as these static until after the VMs are completely restored. If there is not enough CPU resources then the VMs will not boot.
Make sure Hyper-V Host has more than the combined total of RAM for all servers being restored as these settings are static until after the VMs are completely restored. If there is not enough memory then the VMs will not boot.
Create a SET NIC Team on the server (if you have multiple NICs)
- Open Powershell as administrator
- User the New-VMSwitch command to setup an external virtual switch to connect to for live connections
  - New-VMSwitch -name “SET team” -NetAdapterName “NIC1″,”NIC2” -AllowManagementOS $True
  - The AllowManagementOS is needed if you are using the same NIC team to access the VM host
Setup secondary Internal vSwitch to allow for testing before deploying
Setup Synology LUN targets for each VM to be restored. Make sure that they are big enough to hold all the full uncompressed size of the entire thick provisioned hard drives for the entire server.
Connect each LUN to the iSCSI Initiator on the VM Host. Make sure to bring them online, initialize them, and give them a drive letter. Synology needs this because it uses the SMB protocol to transfer the files during restore.
Make sure to allow the File and Printer Sharing app through the Windows firewall and open port 5986 to allow HTTP traffic for WinRM to allow Synology to query the Hyper-V settings.
Add the Hyper-V Host to the Active Backup for Business app.

Synology Active Backup Restore to Hyper-V

Open the Active Backup for Business app
Click on the Physical Server tab on the left
Select the server and click the Restore button
Select the point in time to restore from
Choose Restore to Microsoft Hyper-V
Choose Full Virtual Machine Restore
Change the Restore Name
Select a folder on the Hyper-V Host to place the configuration files
Select a folder on the Hyper-V Host to place each of the restore VHD files
Select a Virtual Switch on the Hyper-V Host to connect the VM to
Confirm the settings by clicking on the Done button.

After:

The VMs will boot with a single NIC and no network settings. Keep them offline and add additional NICs as needed to match the original setup. Then configure the NICs as before upon reboot. Make sure to connect to Internal Test Switch for initial steps.
Check hardware configuration of CPUs and RAM to determine if adjustments can be made. In particular, the RAM settings can be changed to startup, minimum, and maximum to allow for distribution of resources to VMs that have heavier workloads.
Boot VM to make sure it is functioning correctly. (first bootup can take upwards of 15 minutes)
Convert the VM from Gen1 to Gen2
- Download Windows 10 ISO – https://www.microsoft.com/en-us/software-download/windows10
- Add Windows ISO to IDE controller as CD
- Set boot to CD in VM Settings
- Boot VM to repair section of CD
- Boot to command prompt
  - diskpart
  - list disk (Make boot disk is in 0 spot)
  - exit
  - X:\>mbr2gpt /validate /disk:0 (select proper disk)
  - X:\>mbr2gpt /convert /disk:0
- Create new VM with Gen2 setting
  - Give the VM a name and Store in appropriate iSCSI LUN drive then Click Next
  - Select Gen 2 and click Next
  - Give the VM as much startup memory as needed and Use Dynamic Memory then Click Next
  - Select the Internal Test Switch and click Next
  - Select an existing hard drive and point to boot drive that was converted to Gen 2 then click Next
  - Click Finish to create
  - Modify to match old VM
    - Check Dynamic RAM settings to make sure the Max / Min is set properly
    - Check Hard drives and add additional as needed
    - Turn off Secure Boot function
Boot new Gen 2 VM and configure static IP address.
If booting successfully then delete Gen 1 VM
Turn of old server as needed
Change Gen 2 VM to use SET Team vSwitch
Test connectivity to network resources.

If your company is looking to migrate from physical to virtual servers, then contact us to make the transition easy.

Small Office Server Virtualization

Expand Server Storage - Clackmas County, OR

Had a client recently who had a smaller office network (they have up to 6 concurrent users) with a server to process orders from their website using a software called StoneEdge. This software is SQL-based database with a Microsoft Access front-end. It was time to upgrade their server to new hardware and cost was definitely an issue based on their size and order volume. In this case we chose to use a Synology device to act as the virtual machine host and create a new virtual server on the host. Here are some details:

Server Build Specifications

Synology RackStation RS1221+
Synology M2D20 – M.2 SSD Adapter Card
2x Synology SNV3410-400G – 400GB NVMe M.2
2x Synology D4ECSO-2666-16G – 16GB DDR4 2666 MHz ECC SO-DIMM Memory Module
4x Seagate 4TB IronWolf Pro 7200 rpm SATA III 3.5″ Internal NAS HDD

Picked the Synology based on the expandability of RAM to 32 GB, the capability to use cache drives, and storage growth over time. It also has a 4-core 2.2 Ghz Ryzen processor which was plenty based on their old servers CPU usage.

Basics of Setup

Assembled parts
Installed Synology OS
Setup HDDs in Synology SHR2 RAID
Added M.2 drives as cache
Installed the Virtual Machine Manager app
Created a VM with the max CPU available and max Memory available
Uploaded the ISO for the server OS
Installed the server OS
Setup the StoneEdge application
Migrated data

This build did not increase performance dramatically, but it did allow them to spend about half the cost of a full server to accomplish the same purpose. It also reduced costs by using the Synology for backup of the server locally and into S3 storage in the cloud for redundancy.

If your company is looking to move their servers to a virtual environment or into the cloud, then contact us to start the process

Zero Trust – Software Patching

This is the seventh in a series about the concept of Zero Trust, which means in the IT sense that you trust nothing and always verify everything surrounding and connected to your network. Today’s discussion will be on software patching.

Software Patching

Software patching is a neccesity because no person who writes code is perfect and hackers are actively looking for these mistakes. The hackers find the mistakes and then develop ways of using these to exploit the software, computer, or whatever else they can gain access to. The only way to combat both the mistakes and the exploits is to discover them before the hackers do and patch the hole in the software. This patch can however lead to unforseen consequences to the software, so a plan for testing and deployment of patches is needed to avoid unexpected downtime to businesses.Here are some questions to ask:

Do you know all of the hardware and software on your network?
Do you check for hardware, operating system, and other software regularly?
How do you check for updates, patches, or upgrades to software?
How do you install these patches? Is it automated?
Are these patches tested before installation?
What happens if a patch causes problems?
Do you have a log of all installed updates?
Are any systems or software on your network no longer supported for updates?

If your company is going to use full disk encryption or has compliance requirements that you need consulting for, then contact us for assistance.

Surviving a Flood

Had a client walk into their office to find it flooded with an inch and a half of water on the ground and it got me thinking about what could be done to mitigate the risks associated with this sort of “Act of God” at the office.

Can’t Stop the Flood

It goes without saying that there is no way to realistically prevent a flood besides the usual preventative building maintenance that most businesses are not in control of anyways. It makes sense then to choose an office space where the owner is into proactive repairs on the building, even if it costs a little extra per month. It would also be good to talk to your business insurance provider to make sure that such Acts of God are covered. Clean-up and recovery though usually covered by the building owner can get expensive if your contract doesn’t cover it.

Prepare for the Worst

Practically speaking it may not be possible to keep computers out of the water in a flood. At this particular client we did have the computers up on blocks just in case of this very thing. All network equipment should also be in a safe place, ideally in a locked cabinet high off the ground.

Recovery can happen

If the worst does happen, the first thing to do is shut off the electricity to the building. After that take careful inventory of all that is plugged in and remove it from electrical outlets. If equipment is wet, keep it unplugged for a couple days in a dry environment to make sure it is free from moisture. Once sure it is dry, plug in the equipment and test whether it will come back online. If anything was submerged in water, it is best to plan on replacing it as most water has minerals in it that will stick to components in the computer and could cause and electrical short.

If your company is not ready for the worst, then contact us for assistance.

Zero Trust – Backup

This is the third in a series about the concept of Zero Trust, which means in the IT sense that you trust nothing and always verify everything surrounding and connected to your network. Today’s discussion will be on the backup of important data.

Backup

Backup is a way of creating multiple copies of your important data and the systems that house them. This has become a necessity thanks to acts of God (unforeseen physical disasters), acts of employees (accidental or purposeful destruction of data), and acts of malicious hackers (ransomware or malware). Here are some questions that you should be asking yourself:

What data or systems are being backed up?
How often are these backups being performed?
Are your backups protected from natural disasters (offsite and redundant)?
How long are backups being stored?
Once expired are they securely removed?
What is the process for recovering files, emails, workstations, servers, applications, databases?
Have you tested your recovery process lately?
Do you know how long it will take to recover?
How will business continue until systems are restored?
How will you merge new information into recovered data once restored?
How often do you test your recovery process?
Is the recovery test process automated?

Take time to think about these questions and decide where changes can be made to better protect your IT investments, or contact us to do the thinking for you.

Category: Disaster Preparedness

The Importance of Cyber Security Training

Protecting Confidential Information

Mitigating Financial Losses

Safeguarding Reputations

Staying Ahead of Evolving Threats

Building a Culture of Cyber Awareness

Conclusion

[Portland Tribune] What can hackers do with stolen DMV information?

What to do post DMV hack?

The Negative Effects of Repeated Power Outages on Computer Hardware

Hard Drive Failure

Data Corruption

Power Supply Damage

Conclusion

Our New Email Analysis and Education Tools Helps Keep Your Employees Safe

Cost of Insuring Your “Digital” Employees

Insurance Statistics:

Questions:

Synology Active Backup Restore to Hyper-V

Prerequisites:

Synology Active Backup Restore to Hyper-V

After:

Small Office Server Virtualization

Server Build Specifications

Basics of Setup

Zero Trust – Software Patching

Software Patching

Surviving a Flood

Can’t Stop the Flood

Prepare for the Worst

Recovery can happen

Recent Posts

Archives

Categories

Category: Disaster Preparedness

Protecting Confidential Information

Mitigating Financial Losses

Safeguarding Reputations

Staying Ahead of Evolving Threats

Building a Culture of Cyber Awareness

Conclusion

What to do post DMV hack?

Hard Drive Failure

Data Corruption

Power Supply Damage

Conclusion

Insurance Statistics:

Questions:

Prerequisites:

Synology Active Backup Restore to Hyper-V

After:

Server Build Specifications

Basics of Setup

Software Patching

Can’t Stop the Flood

Prepare for the Worst

Recovery can happen

Backup

Recent Posts

Archives

Categories

Evaluation Signup