3-legged table

As if what you do matters

/in /by

United We Stand

Organizations look to IT professionals for tools and services to protect them from cyberthreats. But IT can only get them so far. Two-thirds of the way, in fact, according to the CIA (Confidentiality, Integrity, Availability) Triad. The National Institute of Standards and Technology calls the CIA Triad “the fundamental guiding principle of cybersecurity.”

End-User Responsibility

According to Gartner 69% of end-users violated their organizations’ cybersecurity practices the past year. So how do we counter this trend? Eric Sokolowski president of Bryley education partner Knowledgewave advocates a “drip-drip” method of Security Awareness Training … [4 min. read]

Read more
MSP 501 2023

Bryley Systems’ 9th MSP 501 Award

/in /by

MSP 501 is an IT industry signifier that recognizes the MSP (managed service provider) industry’s highest operational efficiency and business models. The MSP 501 award is based on a sixty-point audit to verify the fitness and stability from which independent IT providers can serve their clients with dependable IT.

With its detailed questionnaire (over sixty areas of scrutiny) and the requirement to have financial results certified to the auditors, the MSP 501 award helps benchmark which MSPs are fit to earn their clients’ trust … [3 min. read]

Read more
136 castles

2,742,354,049

/in /by

That’s $2,742,354,049 lost to Business Email Compromise in the US in 2022

That number is eight times the population of the United States. If you stacked that number of dollar bills like a giant deck of cards and laid them horizontally, it would take you more than a day to drive that distance.

Unless you’re aware of the continually evolving cyber-threats, how can you make the most informed decisions about how to protect your organization?

As Bryley partner Barracuda describes them, Business Email Compromise (BEC) attacks are audacious. The over 2.7-billion-dollar losses suffered via BEC far outstrip the money lost to ransomware – in 2022 there were $34 million dollars in reported ransomware payouts. And to pull off a BEC attack takes a lot more know-how and investment than ransomware does – Ransomware-as-a-Service can be found cheap – it’s like subscribing to a cloud service – on the dark web. BEC actors are stealthy, manipulative and tend to go big, to make it much harder for employees to suspect them … [5 min. read]

Read more
Working on a ski lift

Making Hybrid Work

/in /by

When workers are remote they pose a greater risk to your organization’s data because home networks are less secure and employees do not as closely follow security protocols, per Ponemon Institute’s Data Exposure Report

In a hybrid work environment, where employees work from wherever, it’s critical to prioritize security. And communicating security’s importance to your employees – and their adoption of good practices – is crucial. It was a lot easier to have everyone in the office connected directly to a server without relying on the convenience of the internet – but with hybrid privilege comes hybrid responsibility. … [4 min. read]

Read more
Dollar bill illusion

What Bryley’s Learned About Minimizing Ransomware

/in /by

“Turn on syncing?” the browser asked.

“Syncing” tells the browser to allow stored credentials to be available across a person’s devices. And, why not? Sounds convenient.

Well, maybe the browser account password was phished. Or maybe the browser password had been reused from some other, previously compromised account. Whatever the exact reason, syncing turned out to be a problem when the personal browser account got hacked.

And the real problem was that a work login was found by the criminals among the passwords stored by the browser – and these work credentials were used to steal company data and lock the company systems with ransomware.

It’s easy to say the person shouldn’t have had a work login in a personal account. True enough, but what’s the reason someone would be doing that anyway? What things could the business management have done to have prevented this scenario from unfolding? [6 min. read]

Read more
Tiger

What Is Bryley Security Operations Center?

/in /by

As supply chains’ compliance tightens, as cyber-insurance coverage qualifications grow, as industry and governmental bodies increase their criteria for data privacy, consider Bryley’s SOC offering: Because Bryley SOC can monitor a business’ cybersecurity 24/7/365, threats can be identified and responded to quickly, sometimes before any harm is done. So Bryley SOC can satisfy many compliance concerns … [4 min. read]

Read more