Entreda Blog

by Sid Yenamandra

Motivation:

A couple of folks have said “Don’t just tell me the time, tell me how the clock is built”. This is counter-intuitive and so I thought it would be a good idea to give you an inside look into the architecture of the Entreda Unify platform (www.entreda.com/technology), especially given all the talk about drones at CES 2016. Unify is the customer facing brand while ACE is the internal name for our product.

Cybersecurity Policy:

Some major strides have been made in how enterprises (both large and small) draw up their cybersecurity policies. The key objectives of the policy-setting phase for any organization are:

Ensure that the written cybersecurity policy meets the requirements of a specific regulation, or information security framework

Capture the existing plan of record for cybersecurity policies and procedures in an enterprise

Outline contingency, incident response or risk mitigation plans                    

Policy Compliance, or Policy Assurance:

So, the next phase is a much more interesting one and that’s policy compliance, or as some folks call it - the policy assurance phase. Let’s first define what this phase is NOT. The policy compliance phase involves way more than just continuously testing the established policies. As data becomes abundant in the world of infrastructure technology, cyber risk analysis and resulting action becomes quite complex to handle manually. Specifically, the decision-making process becomes prohibitively challenging as resources are at a premium for compliance, legal and IT departments in highly regulated industries or geographically distributed enterprises. So, these types of enterprises are best advised to develop a policy compliance “brain” or an automated system to ensure active policy compliance.

Remember, cybersecurity compliance is not an offline activity but rather an inline one.

So, What is ACE?

This automated system, we call an autonomous cyber-compliance engine, (or ACE) is a “software organism” (my term) that automatically does all of the following items (flawlessly):

Understands regulatory requirements from relevant information security frameworks and regulatory mandates,

Draws up standardized governance polices

Verifies compliance 24x7 on all infrastructure assets under management

Triggers remediation work flows through smart integrations with infrastructure security applications

Generates compliance reports

Here are some of the key components of this automated cyber-compliance engine (ACE).

1. Cybersecurity Agents or Sensors:

Lets just say the data agents or sensors gather information about the security posture of the infrastructure under management, which may include devices, users, network traffic and stored data. In some cases, these agents could utilize existing end-point, network protection or SIEM systems but in reality, these sensors would need to be broader in scope and inclusive of historical user behavioral patterns. For instance, ensuring that all devices are patched is good to know but more useful would be to know what’s the frequency of patches applied to the device and does the user, or device get patched when patches are available or only after being prompted 8 times. Time and frequency reference is an important consideration to build proper context.

2. Data pipeline or the nervous system:

A real-time data pipeline to ensure that all data gathered is classified and then routed error-free from the agent to a centralized hub for additional processing. Classifying data is an important consideration as high priority or time-sensitive data needs to be locally processed while other data routed to a centralized hub for additional processing.

3. Correlation, Deep Analytics and Scoring or the “central processing unit”:

This is where all the magic happens. Policies and regulations are encoded for the correlation engine to process and then applied to the data. The rules engine verifies functional and contextual compliance to the encoded rules. The result of the rules engine is compared to historical user behavioral patterns or 3rd party crowd-sourced analytics. In short, compliance is NOT a simple binary result but instead scored based on a number of risk factors that are taught to the system.

4. Remediation Work flows, or the functional parts -- “rotors”:

Based on the results compiled by the correlation and analytics engine, remediation workflows are triggered ranging from specific actions to simple alerts and notifications. Remediation work flows and integration with existing infrastructure cyber protection systems is crucial to ensure real-time action resulting from all the complex processing conducted by the central processing unit.

5. Reporting, Visualization or user interface :

The user facing reports and data visualization component is the perhaps the most visible attribute of the system. This includes all the user facing alerts, notifications, regulatory compliance reports or audit-trail and real-time dashboard.

About me

Sid is the Co-founder & CEO of Entreda (www.entreda.com).

Sid has over fifteen years of software and hardware technology expertise spanning cyber-security, enterprise cloud infrastructure and software applications for financial services and other regulated industries. Sid led a program to accelerate Suite B cryptographic algorithms in hardware as specified by the National institute of Standards and Technology (NIST) and as used by NSA's Information Assurance directorate in solutions approved for protecting National Security Systems (NSS). While studying at Berkeley, Sid worked on software projects involving foundational internet and open source protocols widely used today to connect servers on the web, deliver email or transfer files securely and efficiently. Sid holds dual bachelor of science (B.S.) Degrees in Electrical Engineering and Computer Science from UC Berkeley.  

2015 will certainly be remembered as the year of cybersecurity, and equally as the year of cyber in-security.  While there have been many cyber incidents ranging from state-sponsored ones to ransomware, cybersecurity will certainly be etched in our hearts and minds for some time to come.  On the positive side, there has been a lot of chatter about security analytics technologies covering end-points, applications, virtual servers and networks. No surprise that cybersecurity companies received over $1.2B in funding during the first six months of 2015 (Source: http://www.csoonline.com/article/2968438/security-industry/investors-pour-billions-in-to-cybersecurity-firms.html)

Well, I have a slightly different take on this matter. In chatting with CISOs in regulated and un-regulated industries, it has become quite obvious that the weakest link in the fight against escalating cyber threats or, Advanced Persistent Threats (APTs) is still the USER or staff and more specifically, user psychology.

To play this out further - What’s the point of procuring the latest and greatest cybersecurity technology, if your staff doesn't use it? This would be analogous to someone purchasing the latest security system for their house with no enforcement mechanism to check who's coming in through the front door. And, to take this one step further, a thief disguised as a utilities maintenance worker or, your substitute babysitter enters your home, shuts off the main power to the house and ransacks the place...  Sound familiar?!

The simple question is: How do you ensure that your staff (both employees and contractors) are following the rules before you provide them keys to the kingdom, such as network access?! This problem is further exacerbated in a Bring Your Own Device (BYOD) world, a contractor work force, or just a geographically distributed team where users simply don’t want to follow policies set by the CISO. Furthermore, how do you ensure that the 'good' users are positively re-enforced to continue following the rules? In the same vein, how do you make sure the 'procrastinators' are reprimanded, in some way?

In tech speak, this would be Governance, Risk, Compliance (GRC) meets cybersecurity technology and in the example above, identity management. 2016 promises to be the year for a much more holistic view on cybersecurity. At Entreda, we are excited to be part of this microcosm...

Have a healthy and secure 2016!

About me

Sid is the Co-founder & CEO of Entreda (www.entreda.com).

Sid has over fifteen years of software and hardware technology expertise spanning cyber-security, enterprise cloud infrastructure and software applications for financial services and other regulated industries. Sid led a program to accelerate Suite B cryptographic algorithms in hardware as specified by the National institute of Standards and Technology (NIST) and as used by NSA's Information Assurance directorate in solutions approved for protecting National Security Systems (NSS). While studying at Berkeley, Sid worked on software projects involving foundational internet and open source protocols widely used today to connect servers on the web, deliver email or transfer files securely and efficiently. Sid holds dual bachelor of science (B.S.) Degrees in Electrical Engineering and Computer Science from UC Berkeley.  

by Sid Yenamandra

With all the chatter of cybersecurity these days, the Chief Information Security Officer (CISO) is certainly garnering a lot of attention. Needless to say, CISOs have a great responsibility of identifying vulnerabilities in their enterprise IT strategy. CISOs have to lay out a clear strategy of remediating these cybersecurity vulnerabilities before it’s tool late while simultaneously boosting IT productivity and let’s not forget, reducing capital expenditure (CAPEX) and operating expenditure (OPEX). However, this post is LESS about CISOs.

With increasing regulatory oversight and spot audits in industries like financial services, it concerns me that the role of Chief Compliance Officers (CCO) is NOT talked about all that much or, as I like to call it Chief Information Governance Officers (CIGO). Navigating through regulatory land mines, chief compliance officers bear the burden of managing risk by balancing regulatory policies with daily operations of a firm (and without adversely effecting firm productivity, of course). Needless to say, the cross-functional nature of the role spreads from regulatory affairs to cybersecurity enforcement to social media compliance. Well, it goes without saying that TIME is the scarcest resource on their planet. With manual checklists, excel spreadsheets and lot’s of paperwork involved, the role is akin to certain personality attributes like attention to detail, superior time management, multi-tasking ability and a keen sense of intuition. And, let’s not forget - stress management.

While many firms have functional roles that include a chief compliance officer, chief operating officer, chief technology officer, chief information security officer, chief risk officer, VP of regulatory affairs etc. The smaller firms can’t afford that luxury and therefore one spirited individual in the management team is assigned the task of handling these tasks, in most cases. Needless to say, the role of the compliance officer is challenging by itself and routine context switching creates cognitive dissonance for the common person. While it’s true that CIGOs have the challenge of working in the shadows, it’s keeping the firm compliant and out of the newspaper as their reason for being.

Let’s look at the task of drafting a cybersecurity policy framework for a firm and some of the challenges with this specific activity for CIGOs. Again, this is a crucial activity for most firms and CIGOs have to work with legal teams as well as their IT staff to draft a policy that addresses regulatory requirements and captures the existing information flow at their firm. A number of critical challenges come up. For instance,

1. Compliance Officers and IT teams speak different languages: As a pseudo-IT person myself, i can safely say that IT teams tend to live in a world of putting together a bundle of “best of breed” products to secure a firm’s infrastructure. However, with this comes quite a bit of complexity. Highly effective IT teams produce volumes of log and security event data from their favorite Security Information and Event Management (SIEM) tools. However, someone then needs to translate this data in to plain english for consumption by mere mortals or in this case, compliance teams and senior management. Guess who get’s the task of driving this?

2. "Compliance is NOT cybersecurity": Many technocrats propagate that compliance is not the same as cybersecurity (Translation - compliance is “basic" existence while cybersecurity is a much "higher state of being"). While this may be true, it's the subtle undertones of this comment that i take issue with. Let me explain- If compliance does not equal to cybersecurity solutions then that would mean that any good and efficient cybersecurity program would automatically encompass all that a compliance team needs, as a consequence. So, let’s take a simple example - A regulator or compliance officer asks an IT manager to pull up the last 10 WiFI networks each of the firm’s employee’s had connected to from their laptops in the next fifteen minutes. That would be easy, right? 

3. Policy enforcement checks and automation: So, a cybersecurity policy framework is drawn-up but now on to the hard part. How does a CIGO put a process in place to ensure continuous compliance? No firm wants to see a cybersecurity compliance manual that is out of date, or worse not followed. Again, whose responsibility is that? Do you rely on employee or IT teams self-reporting? What proof exist to substantiate the firm's compliance claims? 

4. Education and Security Awareness: CIGOs have to ensure that the staff is in complete agreement with the policies and stay compliant. Let’s face it, cybersecurity is a dry subject for most business people. Its a "non-revenue" generating activity and who’s got time for that?! Again, the CIGO has to ensure that everyone takes time out of their busy day to understand all the policies and agree/sign-up to follow it. 

5. Contingency Planning and Incident Response: It’s great to hope for the best but planning for the worst is the daily mantra for most CIGOs. Putting together a contingency planning and incident response protocol is no easy task either. It requires firms to keep up with regulatory and client reporting requirements as well as ensure that the firm has a team of resources on ready five to assist with damage control.

About Me

Sid is the Co-founder & CEO of Entreda (www.entreda.com).

by Sid Yenamandra

This post is going to take a slightly different tone than all my previous blog posts given the seriousness of the matter and besides, it’s cybersecurity awareness month. As many of you have probably read, the SEC recently fined a St. Louis based investment firm $75,000 for failing to implement a firewall, encrypt its client data, and for not establishing any procedures to respond to a cybersecurity incident, a clear violation of the commission’s Safeguards Rule adopted in 2000 under the Securities Act of 1933. In case you are thinking to yourself, I can handle $75,000 in fines. Please note that the fine of $75K is just the beginning of what is to come to this firm in the ensuing months and years. Reputation damage, loss of clients, law-suits…. need I say more.

So, here is what happened:

R.T. Jones, an investment firm that handles approximately 8,400 client accounts and about $480 million in assets, established agreements with a retirement plan administrator and various retirement plan sponsors using a managed account called Artesys. When potential investors elect to enroll in the Artesys program, they are asked to enter personally identifying information (PII) into this website, along with their investment objectives, and are then matched with a particular portfolio from among those offered by one of the retirement plan sponsors with which R.T. Jones partners. In order to verify that a prospective client is eligible to enroll in the Artesys program, their personal information is compared against the personal information of thousands of eligible participants provided by the retirement plan sponsor partners, which was stored on R.T. Jones’s third-party hosted web server. Thus, even though R.T. Jones had substantially fewer than 100,000 clients at the time of the breach, its web server contained the data of more than 100,000 individuals. Now, from 2009 until its system was hacked in 2013, the investment firm failed to implement a firewall or encrypt any of the data contained in this third party server.

Here are 3 reasons why this is so important for financial firms (or any firm that is handling PII) right now. 

1.    There is a 300% increase in number of attacks this year against financial services firms, according to Websense Raytheon.

2.    SEC/FINRA and State-boards have increased their scrutiny of financial firms. SEC recently unveiled Phase 2 of their branch office cybersecurity exams (https://www.sec.gov/ocie/announcement/ocie-2015-cybersecurity-examination-initiative.pdf).

3.    Clients are increasingly getting concerned about identity fraud and monetary losses due to negligence on the part of financial advisory firms.

So, what can you do to stay on top of your game?

1.    Document your cybersecurity policy and procedures.

Adopt written cybersecurity policies and procedures. And, don’t forget to revise the policy periodically. Work with experienced compliance firms, or your compliance attorney to draft up a written cybersecurity policy. Make sure your cybersecurity policy accurately depicts the workflow of your firm. I can’t say how many times I have seen firms talk about having a cybersecurity policy but these same firms have never actually reconciled their written policy to their existing work flow. Not a great place to be! And, please make sure you have an incident response strategy section in your policy (more on this topic in point #3). 

2.    Enforcement strategy. This is where you need to have a strategy

to enforce your cyber security policy. It’s great to have a nice cybersecurity policy, train your staff and hope for the best. But, under the current environment of heightened cyber threat and regulatory oversight, it pays to be super pro-active about enforcement. “95% of cyber attacks are due to human error on the part of employees and contractors,” according to IBM. Designate at least one individual within your firm to periodically check-in with your staff to ensure that all policies and procedures are being met. This can take the form of spot audits, or just get your employees to send out a status report periodically. The famous quote, “Trust, but verify” is the best policy here.

3.    Breach planning and incident response strategy. 

So, you have drawn up a cybersecurity policy. You spent months working on this and reconciling it to actual implementation. You have even delegated a set of tasks to ensure that the policy is being enforced on all your employees and firm’s IT assets. Are you done? No.  In fact, you are not even close. You need to spend time to figure out what your protocol is going to be in case of a cyber attack. Do you bring in an experienced cybersecurity firm to be the first responders on the scene? What happens if an employee suspects a breach? Who does the employee call or escalate the matter to? Do you have written record of all incidents in the past? How did you resolve them? How did you handle client communication? Did you report the breach to the proper authorities?  “Over 81% of firms have experienced some sort of a data breach and don’t know it”, according to McKinsey.

4.    Annual Vulnerability and Penetration tests. 

The OCIE, a division of the SEC clearly stated in its September 15th, 2015 guidance that all financial firms should do a vulnerability assessment and penetration test, atleast once a year. So, what does this entail? At the very least, hiring a third party firm to evaluate your cybersecurity policy and implementation to discover any potential security holes. Better yet, a targeted penetration test, commonly referred to as a black box test. It is advised to not use your existing IT firm to perform these tests. Why? Well, for the simple reason that this would be like getting the fox to guard the henhouse.

5.    Security awareness training for staff and vendors. 

Make sure you set aside some time at least once a quarter to review the security policy and procedures with your entire staff. I am sure most employees will have lots of questions and this will give the management team a chance to understand the concerns and hopefully address them. Accountability is critical in these matters and certainly having periodic meetings with employee’s forces the issue.

6.    Invest in cyber insurance. 

It is highly advised that all firms dealing with some sort of PII get cyber insurance. And, NO your E&O insurance does NOT cover data breaches. Also, please read the fine print in your cybersecurity insurance policy. See my blog post on this subject here - https://www.linkedin.com/pulse/article/thinking-cyber-insurance-watch-out-5-exclusions-sid-yenamandra

So, how much time and energy should you invest on this front?  We’ll discuss this in upcoming blog posts.

by Sid Yenamandra

A team of cyber bandits plan a sophisticated attack on a famous Las Vegas casino. They tap a boy genius who happens to have designed the world’s strongest security system that protects the safe at this famous casino. They get the plans to the security system and figure out a way to break-in. It’s dangerous but possible. Using another experienced hacker they begin the process of systematically figuring out the vulnerabilities in this security system. It turns out the security system has a kink in its armor and that it needs to get a software update every night between 2 and 2.30am ... Wait this is from the movie Ocean’s Twelve. Oops ... wrong story. Back to the real-world.

This was the press release from the SEC last week, in case you missed it. http://www.sec.gov/news/pressrelease/2015-202.html

Completely ignoring the Hollywood story above, let’s review the facts of the SEC story.

Chinese hacker breaks into a server of a Investment Advisory Firm and 100,000 customer accounts are compromised

The Financial firm gets fined $75K for violating the “safeguard rule” and not adopting any written cybersecurity policies, procedures or response workflows to protect their clients PII from unauthorized access or security breaches

More specifically, the firm had

No disk encryption on server

No firewall

No risk assessments conducted or vulnerability tests

Wait, What?!!! Yes. Not some sophisticated hacker gang that steals from the Bellagio in Las Vegas. This was a Chinese hacker gang that just hacked into an unsuspecting financial services company. The financial firm suffered monetary damages and lost customer information but it lost something far more than that. Yes, TRUST.

And, the press release that SEC issued last week made it clear that the SEC intends to use them to make a point.

This is NOT Hollywood. Cybersecurity threats are real and if businesses think it’s not going to affect them, think again. SEC has stepped up it’s efforts to pro-actively audit firms.

Clearly, this case was completely avoidable. With these kinds of stories hitting the headlines, I hear from a lot of firms that they are confused about what to do.

Here’s what the firm should have done:

The firm needed to establish a written cybersecurity policy

It needed to figure out how to enforce the cybersecurity policy on its devices, networks and applications especially the one that had access to PII

The firm needed to periodically revisit it’s policies and procedures and re-concile them against their actual implementation

Hired an independent IT firm to conduct vulnerability and risk assessments

Adopted a cybersecurity response plan that clearly state what they would do if they were breached.

Trained their staff on all processes and procedures

Act 1

We have all thought about this before signing up or renewing our Webroot, Symantec or McAfee endpoint protection subscription.

Your mind starts to run its optimization algorithm by first asking: Is end-point protection of any sort really required? I mean I have all my data in the cloud and my end-point is nothing more than a dumb device that I use to access the internet. In fact, most of my work is being done on my galaxy tab these days. I can save $25.00 per year on this single user subscription and that will fund an extra cup of coffee at Philz, every month.

Well, let’s replay just one of these benign thoughts for a moment

"My end-point is nothing more than a dumb device I use to access the internet.”

Guess, what?! Ignoring the extra cup of coffee logic for a moment, accessing the internet is where it all begins.

Here are 7 questions you should really be asking yourself:

1. Is my device unlocked or an android device?

2. Does my device have an external drive or a USB port?

3. Am I accessing a secure Wi-Fi network?

4. Do I use dropbox or any other file-sharing app?

5. Does my device support bluetooth

6. Am I responsible for or accessing data with any Personally Identified information (PII) on it?

7. Do I need to prove that I am running my business in a cybersafe manner?

If the the answers to any of the above questions is YES or don’t know, you need endpoint protection. Or, if you didn't know that cybersafe is an actual word, then you definitely need endpoint protection. And, not just your grandma’s end-point security. You need something a lot stronger. The type you might need a prescription for. Forget about the extra cup of coffee a month. In fact, you may need to reduce your caffeine intake by 5 more cups a month.

Let’s dig a little deeper into the reasons behind each of the 7 questions described above.

1. Recent studies have shown that 99% of cyberattacks against mobile devices are against android and unlocked mobile devices. While, no operating system is immune, hackers are able to exploit apps installed on your devices  or a simple text message to inject malware that could wreak havoc on your devices. Check out this link.

2. Hijacking a USB port is become one of the most clever hacks of all time. Remember the state sponsored stuxnet worm (state sponsored stuxnet worm). Still don’t believe it, just watch this demo video and presentation from last year’s black hat conference:

3. When was the last time you checked if your mobile device was connecting to a secure Wi-Fi network. It just seems to remember the last 10 networks you accessed and automatically connects you to the internet at your favorite coffee shop or the airport. Well, did you know that Wi-Fi man-in-the-middle attacks are one of the oldest hacks in the play book? This type of attack has existed almost from the time, the concept of Wi-Fi was invented. Here is a simple tutorial on how to conduct a simple man-in-the middle attack that you can find on the internet. Scared, yet?

4. While dropbox remains to be one of the most widely used filesharing apps out there. Many people have also heard of dropsmack. A piece of malware invented to steal files from dropbox. Take a read.

5. Bluetooth remains to be highly vulnerable to simple attacks. While the damage caused by bluetooth attacks tend to be lower grade, still it’s never fun to see your beloved devices getting hijacked.

6. Now, if you are in the business of managing or accessing data that could be potentially detrimental to a client or could expose private information, do I need to say more?

7. In many regulated industries such as Finance, healthcare or government, you have to be able to prove at all times that you are conducting business in accordance with a written cybersecurity policy. Moreover, you need to have documented proof to this effect.

Now, for some good news. There are solutions to these problems that if implemented correctly, can save you a lot of time and money.

Even with a plethora of cyber attacks and related news articles inundating our inboxes and twitter feeds, we still see firms and business owners not spending enough time on cybersecurity matters.

The reasons range from sheer confusion due to information overload to simply not investing enough time discovering and addressing vulnerabilities in information security practices specific to their industry.

To re-iterate the point here, making cybersecurity an important operational priority can make all the difference in keeping you cyber safe, not running afoul with the regulatory authorities and ultimately keeping you out of the newspaper.

While remember that there isn’t a cure, cyber security preparation is all about instituting control measures. To use a crude analogy, control measures could be very much like getting ADT security for your house or placing a “Beware of dog” sign on your side fence (even if you don’t own a dog) to create a deterrent against break-in’s (PLEASE NOTE: I would not advocate any business to take a chance and bluff because a hacker can easily figure if any vulnerabilities exist within a few clicks).

Another, trend we see is businesses feeling a false sense of security after passing an IT compliance audit. Remember…

Cybersecurity needs to be a 24/7 activity and it matters more than cyber compliance.

So, even if your firm passed an audit recently, your next cyber attack could be just days away. Remember the statistic : 80% of accidents happen within 5 miles of home.

Exhibit A:

We recently spoke to a firm that contacted us after they became a victim of a cyber attack. Here is what we learnt - 2 out of 15 computers were not updated to the latest operating system (OS). So, what’s the big deal there?! Well, one device happened to be the conference room laptop accessible from a guest WiFi network with weak passwords and an attacker simply used brute-force techniques to gain control of that machine. Over time, elevated administrative permissions and gained access to the firm’s shared drive. The attacker then proceeded to take control of some client data stored on the shared drive and left a ransom note on a splash page for the employees of the firm to find when they tried to access the client data on the compromised shared drive. Could happen to anyone, right?!

Now, for the aftermath. First of, the firm’s head of operations only discovered this clever plot after a few days. Please keep in mind, this firm is NOT some big corporation like Target or a Sony but a growing small business trying to do good by their clients (Good Ol’ Main St. America). The firm did not have any written procedures of their information security process. No disaster recovery plan or any sophisticated cyber threat monitoring system. Two years from the last vulnerability assessment and just weeks after a Broker-Dealer cybersecurity audit. So, after the panic had finally died down and the client informed, the firm decided to change some things around. The firm did have cybersecurity insurance but when they read the fine print (much to their dismay, I might add) found that they hit many of the exclusions listed in the policy. Now, the blame game begins... The good news was that the business was lucky to survive this incident because had the attacker decided to impersonate a client and fraudulently transfer funds, the firm would more than likely have shut down. All diplomacy aside,

Would you trust your money with a wealth management firm that can’t manage it's own assets?

Here are the top 5 things to learn from their experience. Feel free to ignore at your own risk!

1. Procrastination could cost you your business. 

Make sure to spend enough time exploring vulnerabilities in your information security process and infrastructure technology (IT) workflow. In order to get an objective opinion on the state of affairs, a firm would be best advised to hire an expert to come in and do this. Make sure you get specific recommendations to fix any items discovered as part of the security assessment. It is good to find problems but problems with no solutions are pointless.

2. No written cybersecurity policy or disaster recovery plan. 

Make sure your firm has a written cybersecurity policy as well as a disaster recovery plan. While it pays to be pro-active on cybersecurity and hope for the best, it’s smart to plan for the worst and prepare a detailed disaster recovery plan. Now, its great to have a nice written policy but if no one follow’s it or, if you are unable to enforce it, the whole activity is meaningless. Spend some time to institute a process to re-visit your cybersecurity policy, train your staff and research tools that could be used to automate your cybersecurity enforcement process. (Tip: Check out www.entreda.com)

3. Guard administrative privileges to your networks and IT assets like treasure. 

Even if you purchased super-sophisticated authentication and authorization tools, or your IT person sold you on using an Windows Active Directory (AD) framework, please make sure to audit your group policy settings as well as user privileges.

Whether you are an organization with 10 employees or 10,000 employees, it is important to limit administrative access to those employees that really need it. The default should NOT be to grant administrative privileges to every employee but quite the opposite. Invest in audit and monitoring tools. The $50 per month you end up spending here would be a pittance compared to what you will spend defending yourself against regulatory action or client law suits.

4. Coulda, woulda, shoulda. 

This is the part I hate the most. You had an opportunity to address an issue but you chose not to and soon after you wished you hadn’t. I am sure this happens to all of us in life. Well, when it comes to cybersecurity, this could be disastrous! Don’t let that happen. It is better to invest in some tools right at the on set and institute a pro-active cybersecurity monitoring and remediation system because once again, the extra dollars spent here could go a long way in deterring a cyber attack. Also, who knows ... if you manage money, you might even pick up a new client that happens to be in the cybersecurity space because the client is highly impressed with your pro-active cybersecurity posture!! (Why not?!)

5. Increase coverage. 

(Please Note: Mobile devices for the purposes of this post are mobile phones, tablets and ultra-books. Yes, I have added ultra-books in there as they can be used like tablets).

I had a very interesting conversation with a financial firm during a sales call the other day. I asked one of the principal’s at the firm,

"What is your Bring Your Own Device (BYOD) policy?"

Here is the response  I got - “Well, we take cybersecurity very seriously at this firm,” he said.

"We don’t allow anyone to use laptops, tablets or any mobile devices for work around here.” he added.

Yes, he said laptops as well. In other words, this firm only allows the use of desktop computers. And, believe me this was not the first call I had taken where I had heard similar comments.

In fact, another prospective client of mine added:

“we don’t trust the cloud, laptops or any of these cell phone devices with our data.”

And, I thought to myself, "WOW, you folks are absolutely right!" but on the other hand, this kind of abstinence must require a lot of discipline. A type of discipline that can only be compared to that of Tibetan monks who stay away from all the temptations that the rest of us common folk can’t do without. PLEASE NOTE: All this is coming from a person (me) who cannot stay away from his phone for more than hour.

A number of “dumbfounded questions" were racing through my head at this point. Starting with:

Why on earth would you restrict your employees from embracing all the conveniences mobile devices have to offer, why??? For instance, anywhere, anytime access to your data; work from a coffee shop; text messaging so you don’t have to talk to annoying customers and the list goes on…

You mean you never access email on your phone?

How do you enforce this policy on your employee’s devices? How do you know, if they have cheated? 

I am sure that I am not in the minority when I get this strange feeling of emptiness after being away from my phone for over an hour. I think it’s pretty safe to say that a good portion of the "free world" uses mobile devices for both work as well as personal use. So, the question is how do you practice good cyber safety on your mobile devices? Furthermore, how do you make sure that the personal use of your mobile device does NOT affect your corporate data and applications?

Here are 12 simple ways to protect your mobile devices

Passcode is a must - For starters, please use that 4 digit pin code for your mobile devices. If you accidentally leave your mobile device somewhere, you have created some complexity for those prying eyes. Most of the recent mobile devices support biometrics or fingerprint access. So, making sure that the touchID is enabled would be a fantastic idea.

Self-destruct after 10 try’s -  After multiple failed attempts to enter the login credentials, you must have the device set to auto-delete all the data. This can be scary but trust me a life saver if someone is trying to hack into your mobile device (and hopefully not your 2 year old kid). And, 5 try’s is too little!

Encrypt your devices - Enable encryption of data on a mobile device. In case of the iOS devices, this is already enabled by default. However, if you have a jail broken iPhone or an android device, you will need to ensure that the device is set in a mode so that the data is encrypted. This goes for laptops as well.

VPN is a good idea - Check to see if the phone has ever accessed a non-secure Wi-Fi network. Ideally, you should use a Virtual Private Network (VPN) service for accessing the internet. Especially, if your mobile phone remembers the Wi-Fi at the local coffee shop and you continue to transact business over that connection without ever checking to see if it’s WPA2 secure. Good idea to look into software solutions out there that can detect a non-secure Wi-Fi connection and automatically start a VPN session (contact me, if you want some ideas here)

App inventory check - Inventory of all apps installed on the mobile device is an important item to look at. The reason being you want to maintain a white list of authorized apps on your mobile device for your firm. You don't want unauthorized use of 'black listed' apps in your corporate network. You should be auditing this periodically - monthly, if not weekly. Check to see if Dropbox, Box or any other type of file share app is being used. The reason being these could be conduit’s for any malicious activity or malware. Pay close attention to what apps have access to your data on your mobile devices. For example, some mobile apps will request permission to see your photos or your phone contacts. Make sure you are careful and selective about which apps have access to what data.

Remote Wipe - Remote wipe capability needs to be enabled on your mobile devices. So, make sure that the "FindMyPhone" function is enabled on your mobile device. If your mobile device gets lost or is stolen, this can be a life saver. Keep in mind this function will only work when the mobile is turned on and register’s with the network. So, make sure to enable the feature that says, wipe immediately upon network registration.

No cameras, please - This may seem extreme but a lot of firms want to shut down the use of a mobile device camera as long as they are within their corporate network. This may be a good idea particularly if you are worried that employees might be taking photos of data or scanning docs using their mobile devices for personal use.

Device backup - Make sure your mobile device is backed up from time to time - weekly, if not daily. Enable alerts to the user and system administrator, if this has not been done.

Screen-lock enabled- Screen lock settings need to be set-up so that it prompts you to re-login after a set amount of time. Preferably, 2 mins in case of a phone and 15 mins in case of a laptop-type device.

Latest OS updates - This goes for any device but especially mobile devices. Make sure that you are up-to-date with the latest software. Besides cybersecurity, it might improve the performance of the device as well. From time to time, OS updates contain bug fixes, performance improvements and security updates.

Check your phone logs - Ideally you have a way to log when your mobile device was actually used. Check the phone activity log from time to time to make sure that there isn’t anything amiss here. You can do that directly in the phone or from your monthly billing statements.

Bluetooth connections - More recently, a number of hackings have occurred using bluetooth connections. So, check to ensure that the bluetooth connections or pairings from your mobile devices are with legitimate peripheral devices. If you don’t recognize one of the devices on your bluetooth connection log, feel free to delete it from the list permanently.

July 7, 2015 

First off, let me state upfront that I will be using Anti-virus and Anti-malware software interchangeably even though they have two entirely different purposes.

Let me start by saying that a week does not go by where we don’t hear about another data breach or a hacking incident. Talking about cyber crime these days is like talking about the weather in San Diego (sorry, had to throw in an Anchorman movie reference and I grew up in San Diego). These incidents are affecting institutions that employ thousands of people with IT systems and processes that are rather sophisticated… ahem … most of the time, anyway.  I am talking about Fortune 500 companies or certain government agencies such as the IRS, USPS and others.

As I try to educate some business owners in regulated industries (financial services, for instance). I often still hear from enterprising business owners, the following:

“I am secure and compliant. Thanks. ”

“No more PC software, please.  I just bought Norton Anti-virus and I am fine.”

“All my data is in the cloud. So, who cares about my PC anyway. I have no data on it.”

“Its not my problem!”

Well, sorry to be a bit blunt here, AGAIN.

WRONG..

WRONG…

WRONG, again.

And, Seriously?!

With all due respect, please do your research, or ask an expert. With all the processes and systems, if our government is NOT secure, guess what? As a growing enterprise, you are extremely vulnerable. And, please don’t say, it’s not going to be you because you are too small.

The Department of Commerce’s National Institute of Standards and Technology, says in the past two years there has been  

"a relatively sharp increase in hackers and adversaries targeting small businesses."

Now, if you are saying to yourself, I GET IT. I know that I could be hacked so that’s why I have the best anti-virus and anti-malware software installed on my devices and besides, all my data is in the cloud protected by a fortune 500 company. 

You mean the type of company that has all the IT systems and processes that are rather sophisticated?! HINT – please see paragraph 1 (I hope you see the paradox depicted here). I will reserve my comments on this topic for another blog post...

Let’s not worry about things that are outside our control.  Let’s start with what is.  Now, let’s first establish the fact that end-point security is extremely important even with all your data in the cloud. (Please see my blog post-  https://www.linkedin.com/pulse/article/4-reasons-you-need-end-point-monitoring-your-apps-cloud-yenamandra)

Here are 3 reasons why your anti-virus software is NOT enough to keep you and your PC or MAC devices secure.

1. Got UPDATES?

One of the most common issues, we see in the field is simply the fact that the installed anti-virus software has actually never been updated.  The way anti-virus software programs work is that they scan your PC or MAC and pick up virus signatures. Now, the virus signature database needs to be updated in order to keep up with new viruses being written each day, around the world. 

Now, what if your anti-virus software is up-to-date but by your OS is NOT? Well, that introduces other problems. If a virus or malware is able to stay undetected and exploit OS level weaknesses, it may be able to do other things so as to kill your anti-virus scanning process or change user level permissions.

Bottom-line, make sure your PC, MAC OS as well as your anti-virus software is updated.

2. POLY-WHAT VIRUSES?

There are just too many viruses out there. Ever hear about Polymorphic viruses or viruses that mutate. In simple terms, these viruses change their behavior and therefore make it difficult to be detected. Just ask the simple question, if your anti-virus software could catch all viruses why do you still hear about new viruses?!

3. The Cloud is the new PC

Attacks may be sourced from other areas but affect data on your PC/MAC devices. What if your virus was in your dropbox folder, or exploited a vulnerability in the dropbox file-sharing service. Well that was precisely the purpose of the dropsmack service. Without going into too many details here, it exploited a vulnerability in the dropbox application and just waited for some unsuspecting user to open an infected file and it raged havoc on the machine it was installed on and any dropbox user that was part of a workgroup (and BTW, remained un-detected by anti-malware software for quite some time).

You might be saying… Thanks for all this but what’s the solution?!

With the increase in business conducted over the internet the security of the sites you visit should be something that you verify.

June 30, 2015 

What should you be looking for?

Is the connection between your computer and the site secure ?

How can my browser help me determine the safety of a website ?

How can my anti-virus help ?

How can I tell if I am being re-directed to another site

Are there additional checks I can do if I am unsure ? 

What tools are available to help me ? 

How can I tell if I’m using a secure website? 

Check for Secure Socket Layer (SSL)

Before you make a payment or share sensitive information online you need to be sure the website is secure.  When on the web you’ll notice that the website’s address probably begins with Http://, meaning the site is using Hypertext Transfer Protocol.   However, this site does not have an added security layer.  If you are going to provide financial or sensitive personal information that URL (Web page address) should begin with Https://. Here is an example:

If you visit a few shopping sites, you’ll notice that the security layer is added when you are asked to enter sensitive information.  As your access other site you’ll notice that a variety of Http: and Https: addresses. These may change based on the function.  So if you are making a purchase, be sure that you are on a secure (https://) address.   In other cases, e.g., you bank’s site the security layer should always in place.  Any easy rule of thumb is that if the information you are providing is sensitive and should be secure look for the “s” at the end to the http.

The reason that https: is not used at all times has to do with performance.  There is overhead with using the secure socket layer or (SSL) so, it security is not required http: is used.

Check for the “Lock” icon

There is a de facto standard among web browsers to display a "lock" icon somewhere in the window of the browser (NOT in the web page display area!)   Here’s an example using Google, other site may display this information in a different location.  Note the Green lock icon.

Clicking on the green lock provides the following information about the website.

In general terms, a click or double-click on the lock icon will provide the site's security information.  This is important to check this because some fraudulent web sites are often designed to imitate the lock icon of your browser!  If in doubt, it is a good idea to test the functionality built into this lock icon to verify the functionality.

What does your browser say about the site?

One way is to check for the Secure Sockets Layer (SSL)-encryption.  You’ll know a site is secure if it has a green padlock icon in the address bar, just before the URL.

You can also search the company’s on the Better Business Bureau’s website.  You’ll be able to see reviews, complaints and even the grade the BBB has given the company.

Your Virus Protection software may help as well

Depending on the virus protection software being used there are checks that are done by many of these applications to verify the security of websites. The tool bar on the website show below has a tool (in this case provided by Norton) that helps identify the safety of the site.  In this example we are using https://www.linkedin.com/company/entreda.

The browser shows that the website is safe.

Some browsers help as well...

The Site Identity Button is a Firefox security feature that gives you more information about the sites you visit. You can quickly find out if the website you are viewing is encrypted, if it is verified, who owns the website, and who verified it. This should help you avoid malicious websites that are trying to obtain your personal information.  The Site Identity Button is in the Location bar to the left of the web address.

When viewing a website, the Site Identity Button will be one of five icons - a gray globe, a gray warning triangle, an orange warning triangle, a gray padlock, or a green padlock. Clicking on these icons will display identity and security information about the website.

Gray globe 

A gray globe indicates:

The website does not supply identity information.

The connection between Firefox and the website is not encrypted or only partially encrypted and should not be considered safe against eavesdropping.

Most websites will have the gray globe, because they don't involve passing sensitive information back and forth and do not need to have verified identities or encrypted connections. It applies to websites served over HTTP (not encrypted) or HTTPS (partially encrypted).

Note: If you are sending any sort of sensitive information (bank information, credit card data, Social Security Numbers, etc.) the Site Identity Button should not be a gray globe icon.

Gray warning triangle

A gray warning triangle indicates:

The website does not supply identity information.

The connection to this website is not fully secure because it contains unencrypted elements (such as images).

Orange warning triangle

An orange warning triangle indicates:

The website does not supply identity information.

The connection between Firefox and the website is only partially encrypted and doesn't prevent eavesdropping.

It implies that you've previously allowed the mixed active content served over HTTPS to be displayed for the website despite the risks.

Reloading the website will block back certain HTTP requests to lower threats, change the icon to its previous state (gray globe for mixed passive content and gray padlock otherwise) and display the content mixer shield icon. For information about the mixed content block, see How does content that isn't secure affect my safety?.

Note: If you are sending any sort of sensitive information (bank information, credit card data, Social Security Numbers, etc.) the Site Identity Button should not be an orange warning triangle icon

Gray padlock

A gray padlock indicates:

The website's address has been verified.

The connection between Firefox and the website is encrypted to prevent eavesdropping.

When a domain has been verified, it means that the people who are running the site have bought a certificate proving that they own the domain and it is not being spoofed. For example, Facebook has this sort of certificate and an encrypted connection, so the Site Identity Button displays a gray padlock. When you click on the padlock, it tells you that you are actually connected to facebook.com as certified by VeriSign Inc. It also assures you that the connection is encrypted so no one can eavesdrop on the connection and steal your Facebook login information that way.

However, it is not verified who actually owns the domain in question. There is no guarantee that facebook.com is actually owned by Facebook the company. The only things that are guaranteed is that the domain is a valid domain, and that the connection to it is encrypted.

Green padlock

A green padlock indicates:

The website's address has been verified using an Extended Validation (EV) certificate.

The connection between Firefox and the website is encrypted to prevent eavesdropping.

A green padlock plus the name of the company or organization in green means this website is using an Extended Validation (EV) certificate. An EV certificate is a special type of site certificate that requires a significantly more rigorous identity verification process than other types of certificates. While the gray padlock indicates that a site uses a secure connection, the green padlock indicates that the connection is secure and that the owners of the domain are who you would expect them to be.

With the EV certificate, the Site Identity Button assures you that paypal.com is owned by Paypal Inc., for example. Not only does the padlock turn green on the Paypal site, it also expands and displays the name of the owner in the button itself.

Screenshots from URLVOID 

Screenshots from Sucuri

Checks you can do on websites

Routine Checks:

HTTPS

Lock Icon 

Browser Info 

Site Identity (verified by trusted 3rd party)

Connect (secure/level of encryption)

Visit history 

Hover Over Link (look in lower corner of browser for site)

If Questionable:

Use Link Scanner (URLVOID or MYQOT) 

Safety Scan Report (check non-green items) 

Check Shortened Links (Sucuri) 

Blacklisted 

Malware

Malicious Javascript 

Drive by downloads 

Anomaly detection

IE-only attacks 

Suspicious redirections 

Spam

12 Questions to Ask Before Accessing Any Website 

1. What are your security policies?   

It is very easy to promise of good security, but what are the actual policies and procedures in place to make good security a reality? How do they prevent attacks and malware? How do they handle threats? How do they mitigate actual attacks? 

 2. How do you monitor (privileged) access to data?  

Segregation of duties and the associated accesses must provide sufficient access to the data required to allow employees to efficiently perform their duties but, they should not have access to data that they do not need. All accesses should be granted based on a need to know. 

3. How do you know if sensitive data leaves your network? 

This is a very important question that is difficult to answer even if data loss protection capabilities are in place.  Often sensitive data is compromised careless employees having these data on a computer system, tablet, smartphone or thumb drive that is lost or stolen or sharing sensitive information without the proper safeguards.  This can be through email or storing and sharing information using cloud storage applications. (e.g., Dropbox) 

4. Do you offer SSL (HTTPS)?  

If your site requires usernames and passwords, such as for e-commerce or for blogs, it’s vital that those communications are secured from eavesdroppers using HTTPS. 

5. Do you back up?  

Knowing whether and how your data is backed up, and how long it will take to restore, allows you to understand the impact of a compromise of your website. 

6. How do you detect threats and report compliance across domains? 

Having the capability to detect a threat and take countermeasures is extremely important.  Automated detection and compliance reporting are really essential. 

7. How do you handle security breaches?  

In the event of a security breach of your website, the safety of your visitors depends on how and how quickly the provider notifies you. And you need to be sure you can reach the provider if you notice a breach before they do.  

8. How do you regularly test your website for vulnerabilities?  

Everyone with a website should be testing their website regularly to make sure that it is up to date on patches and that the website has not been subject to tampering or attack.  As a minimum this should be done annually. 

9. What security measures are in place?  

This seems like a no-brainer, but you would be surprised to find some hosts have very little security in place. Does your host monitor for suspicious activity? What types of attacks do they have software installed to protect against? 

10. Secure transactions   

Uploading, downloading, and web transactions should be secure. For that, you will need a secure transfer method, such as SFTP, and the ability to secure web purchases or information submission, such as SSL. While nearly all hosts offer some form of SSL support, it may cost extra. Many, however, do not offer SFTP and still rely on the unsecured FTP. 

11. How do you involve key internal and external stakeholders in security matters?  

Often overlooked, it is very important to involve key stakeholders in the security strategy planning and execution.   You will need their support to roll out your plan and to get everyone to attend annual refresher training sessions. 

12. To what extent have you rolled out an identity program? 

Entreda Joins Intel Intelligent Systems Alliance (ISA)

Cloud-managed Appliance Innovator Powers Unify Platform on Intel Processors

August 26, 2013: San Mateo CA:

Entreda Inc. today announced that the company has been accepted as a General Member of the Intel Intelligent Systems Alliance (ISA). The Intel Intelligent Systems Alliance is a global ecosystem of 200+ member companies that provide the performance, connectivity, manageability, and security developers need to create smart, connected systems.

"The Intel-powered Entreda Unify Platform is purpose-built to transform the way business users---from SMB's to enterprise branch offices---deploy and consume must-have IT services---from networking to security to failsafe backup/recovery and more," said Sid Yenamandra, Entreda CEO. "With our Unified Services Management (USM) appliance platform---all premise-based services are cloud-managed, auto-installed and continuously monitored, enabling IT to focus on new initiatives---not infrastructure maintenance. Entreda is committed to Intel processor innovation for our end-to-end product roadmap and we are pleased to have been accepted as a member of the Intelligent Systems Alliance," Yenamandra added.

About the Entreda Unify Platform Entreda's USM platform---Entreda Unify---is a game-changer for SMB and branch office IT---and for the appliance OEMs and IT-as-a-Service (ITaaS) providers that engage these markets. By consolidating a broad spectrum of must-have infrastructure functionality in a zero-touch, self-configuring appliance form factor---100% cloud-managed, monitored and supported---Entreda enables SMB 'nano-enterprises' to focus on new initiatives, not the maintenance of yesterday's single function infrastructure and IT silos. We call it 'Cloud Outside the Box'.

Entreda's USM platform can be customized to serve the needs of:

Appliance OEMs: OEMs seeking to expand their product families in SMB and enterprise branch office markets can deliver cloud-managed appliance solutions with Entreda Unify;

Cloud Services Providers (CSPs): CSPs seeking to offer hybrid IT-as-a-service to their SMB and branch office customers can grow incremental revenue with Entreda Unify;

Global IT Distributors: Distributors in non-North American geographies seeking to offer language-localized editions of Entreda's family of products can open new markets with Entreda Unify.

About Entreda: Entreda provides next-generation Unified Services Management (USM) infrastructure and applications to SMBs and enterprise branch offices---streamlining and future-proofing their operations. All Entreda Unify appliances are 100% auto-installed, cloud-managed and continuously monitored, and can be customized for OEM and IT-as-a-service (ITaaS) partners. Entreda is headquartered at 155 Bovet Road, Suite 406, San Mateo, CA 94402.

Entreda is headquartered at 155 Bovet Road, Suite 406, San Mateo, CA 94402.

Find out more at http://entreda.com or email your information request to [email protected].

With all the talk of HIPAA/HiTech Act compliance lately and penalties for non-compliance by 2015, we thought we would provide some insight into some basic steps, "Nano Enterprises" can follow to be prepared for what's coming... In essence, modernize the aging IT that small businesses have all gotten used to. For more details on the HIPAA laws, check out this link: www.gpo.gov/fdsys/pkg/FR-2013-01-25/pdf/2013-01073.pdf

One of the primary goals of “HIPAA compliance” revolves around the concept that sensitive data needs to be protected at all points in a network. This goes not only for premise-based infrastructure but also cloud computing platforms. 

Here are 5 guidelines health-care providers and business owners grappling with HIPAA need to follow: 

1. Access Control:

Granting varied levels of access to patient information is critical when it comes to protecting data. By employing access control policies, you can limit users and devices that have access to your patient’s information, reducing risk of leaking sensitive data.

2. Secure Remote Access:

With the many choices of mobile devices such as laptops, tablets and smart phones, it is very simple for employees to have access to your worksites systems. Make sure each device is secured while enabling traceability of end-users that access your systems. A virtual private network (VPN) provides, secure, permission-based remote access to your data and adds a layer of authorization/access control to your network. VPNs also enable traceability of end user access to your networks and applications.

3. Protect Networks:

Securing the locations where patient data is stored is extremely critical. Also, implement security measures that protect against breaches of confidential information such as firewalls and anti-virus software. Hardware-based firewall services and web content filtering protect your network against breaches by hackers while enabling authorized traffic and regulatory compliance for your staff.

4. Adopt End-to-End encryption:

When sending any sensitive data out of your network it is crucial that the data is always sent encrypted. And remember when storing patient information in the cloud, it is also mandatory that it is encrypted while transferring.

5.  Disaster and Recovery Back-up Plan:

Be proactive and have a 2-tiered or failsafe disaster recovery plan that includes off-site back-up in addition to premise-based backup. Practicing continuous data back-ups both locally and off-site can ensure that in the event of a disaster or breach, you can recover the information quickly and get your business running smoothly again with minimal disruption. Periodic data restores from off-site repositories is crucial to ensure that the data integrity is in fact maintained and the business can bounce back from a disaster rapidly.

Fortunately, with new advancements in cloud-based technologies, it is now possible to implement many of the features defined above (and as required by HIPAA) in a single platform. Entreda’s Unify 5n1, is an affordable, cloud-powered, Unified Services Management (USM) platform that liberates health-care providers and small business owners from a host of product silos while streamlining and future-proofing their operations. Unify 5n1 provides a comprehensive set of core infrastructure services including WiFi access, VPN & firewall, automated backup, cloud-based disaster recovery, and more in a single, easy to set-up platform. All Entreda Unify 5n1 features are fully accessible via an icon-rich Unify IT Self-Service Console - enabling health care professionals and business owners to manage their IT operations with the same ease of use as a modern consumer smart phone.  Here is a link to learn more about Unify 5n1.. www.entreda.com/unify5n1

http://www.entreda.com/calc/calculator.html

Here is the updated RoI calculator...

Changes include:

* New assumptions on offsite backup based on market feedback

Introducing Unify 5n1 - A revolution in SMB IT...

  Entreda Unify 5n1, is an affordable, cloud-powered, Unified Services Management (USM) appliance that liberates SMBs (& enterprise branch offices) from a host of product silos while streamlining and future-proofing their operations.

Unify 5n1 provides SMBs with a comprehensive set of core infrastructure services including WiFi access, VPN & firewall, automated backup, cloud-based disaster recovery, and more.