Cybersecurity and Compliance

Shadow IT is any technology used by employees that your IT department doesn’t know about. That would never happen to us, you may say — but you’re probably wrong. According to Gartner, most companies hugely underestimate how much shadow IT their employees are using. And that’s a big problem, because what you don’t know about, you can’t secure. Outsourcing your…

Phishing is one of the biggest security threats to Xantrion’s clients right now. Small and midsize businesses are low-hanging fruit for attackers because they have more worth stealing than an individual, but fewer security safeguards than a larger business. What’s more, phishing attempts, or social engineering attacks, are becoming more frequent and more sophisticated. The harder they are to spot,…

Cybersecurity used to be primarily a concern for IT departments at large companies to tackle through technology — but that’s no longer true. Today, even small and midsized companies need to worry about the ramifications and repercussions of cybercrime. Cybercriminals are increasingly sophisticated, relentless, highly skilled, and well-funded. Their exploits are often targeted, automated, and even sponsored by nation-states with…

Spending on cybersecurity hit an all-time high in 2017. Unfortunately, so did the frequency of cybercrime — proof that tools alone aren’t enough to keep your sensitive information safe. In fact, employees who inadvertently give hackers access to the company computer network are one of the leading causes of data breaches. If you don’t want your employees to be the…

We have observed that increasingly sophisticated cyberattacks are being directed at the on-line banking systems of our clients. In particular, targeted attack mechanisms which are either new or which have been modified so they are not recognizable to antivirus software. This new cyberthreat requires changes in cybersecurity practice to ensure that you are not victimized, suddenly discovering that criminals have…

New technologies have emerged that allow unprecedented efficiency, freedom and functionality e.g. cloud services, mobile computing, etc. However, they also introduce new risks that are harder to control and have higher impacts when something goes wrong. Technical measures, such as data backups and virus protection, are important for maintaining cybersecurity. However, they are only a part of the puzzle. They…

Few issues in the last several years have been more bewildering and frustrating for organizations than government rules regarding the security and retention of electronic data. More than one organization has probably wished there was a way to comply, in one fell swoop, with all the regulations, from the Sarbanes-Oxley Act to the Health Insurance Portability and Accessibility Act (HIPAA)…