IT Cyber Security For Our Financial Services Client
Since January 2020, Windows 7 Operating System is not supported by Microsoft anymore. This means any PCs still running the software no longer receive security updates, software updates, or technical support for any issues.
Many small businesses are not aware of the potential impact and implications of not running the latest software releases. Their approach? “If it ain’t broke, don’t fix it”. Unfortunately, this mindset will cause systems to be compromised at some point as there is no further maintenance available to protect their operating system from cyber attacks if they still use Windows 7.
On the upside, this Windows 7 end of life status has incentivised some of Espria’s clients to undertake a review of their IT systems.
Our client’s issue : an IT system vulnerable to threats
One of our clients has used the cessation of the Windows 7 platform to look at their complete IT infrastructure and ensure that it is as secure and reliable as it can be.
The team here at Espria performed an audit of their IT systems.
Several areas in need of improvement were identified, including:
-
- Multiple anti-virus products being used throughout the organisation but also on some machines!
- Different versions of Microsoft Office being utilised, including Windows 2007, and desktops running multiple Windows Operating Systems
- Windows Updates not being applied to all machines
- Large levels of spams received on a daily basis
- Many web browsers in use
- Administrative rights granted to users on their desktops
- Simple passwords used and shared amongst all users
- Remote user laptops only secured by simple passwords
- All users provided with remote access to the server, whether it was actually required by the business or not
Our solutions : new processes
Whilst the above was not causing any problems from an operational perspective, clearly this is not best practice as to how IT systems should be maintained.
Through the introduction of new processes and a small investment in hardware and software products, we were able to address each of these concerns within a short space of time with minimal disruption to the userbase:
-
Whilst the above was not causing any problems from an operational perspective, clearly this was not best IT practice.
Through the introduction of new processes and a small investment in hardware and software products, we were able to address each of these concerns within a short space of time with minimal disruption to users:
- We introduced a modern, anti-virus solution with central management, update services and reporting.
- We migrated all users to Office 365, ensuring that the same version of the Office product was used and automatic updates were carried out.
- We standardised Windows 10 operating system across all machines, performing in-place upgrades where possible or machine replacements where hardware was not suited to the new environment.
- We configured Windows 10 to perform updates automatically in the background to ensure that all users are on the latest security release.
- With the migration to Office 365, this has automatically provided a level of spam protection : only required emails are allowed to go through.
- We agreed with the business that only 2 Web Browsers should be used and removed non-supported products. We configured automated updates to ensure that the latest product versions are always present.
- We removed administrator rights from all users to ensure that their desktop environment cannot change so that no additional software can be installed.
- We introduce complex passwords to ensure a minimum level of characters, as well as password change enforcement every 30 days.
- We enabled encryption services on remote laptops prior to Windows starting so that the data cannot be accessed without an initial key being entered to allow the machine to start.
- We reviewed all remote user access to ensure it was restricted to only those that need it. In addition, a secure Firewall with VPN Services was installed so that remote users have to authenticate against the Firewall before they are given access to the network.
If your business is not up to date with IT security, your systems are at risk of being compromised.
So it’s imperative you remain a step ahead with your cyber security.
The Results
These steps have led to an improved IT offering for the business’ customers while ensuring the company is better protected against cyber attacks.
We will continue to review the installation every 6 months to ensure that the levels of protection and policies used remain adequate.
Reveal areas that need proactive, defensive or collaborative resource
One of our experts will review your current data risk, examine current governance and security controls.
We’re experts in building sustainable IT infrastructure that can scale to your businesses needs.
You may be interested in
What Happens to Your Printer Cartridges After You Use Them?
Is Your Printer Recycling Actually Making a Difference? Most businesses know they should recycle their printer consumables. Fewer know what actually happens to a cartridge once it leaves the office, or whether their current supplier is doing anything meaningful with it at all. A smarter approach to printer consumables Under a properly managed print service, consumables are handled with a clear process rather than left to chance: One less thing for Office Managers to manage For an Office Manager, this also removes a recurring low-value task: nobody needs to track toner stock levels, notice a…
Taking Control of Print Costs Without Micromanaging Staff
The Hidden Cost of Office Printing Print costs have a habit of creeping up quietly: a few extra colour pages here, an unnecessary duplicate print there, a job sent to the wrong printer and reprinted. On their own, none of these feel significant. Across a whole office, over a year, they add up to a real and often invisible cost. See where your print spend is going PaperCut gives an Office Manager visibility and control over this without needing to police individual print jobs. In practice, this looks like: Reduce waste without restricting staff The…
Five Printer Security Risks Most Small Offices Never Think About
5 Print Security Risks Hiding in Your Office Following on from our earlier piece on printers as network endpoints, it is worth being specific about what actually goes wrong. These are the five risks we see most often when we assess a print fleet for the first time. The five print security risks to look out for 1. Default or shared admin passwords. Many devices are still running the password they arrived with, often known publicly for that model. 2. Unsecured print queues. Documents sitting in a print queue, or printed and left uncollected in…
From AI Experimentation to Real Business Outcomes: Our Takeaways from Microsoft Frontier Tour London
This week, Pete Graham, Microsoft Business Manager at Espria, attended Microsoft Frontier Tour London alongside members of the wider Espria team to hear directly from Microsoft leaders, partners and customers about the future of artificial intelligence. Having attended Microsoft’s AI Tour last year, Pete was interested to see how the conversation had evolved over the past 12 months. What became clear throughout the day was that the discussion around AI has matured significantly. A year ago, many organisations were still asking what AI could do. Today, the focus is increasingly on how to adopt it…
Critical PHP vulnerabilities: do you know who owns the fix?
When websites and applications sit with different teams and suppliers, the first challenge is knowing who needs to act. Critical vulnerabilities have been disclosed affecting PHP, a technology widely used across websites, web applications and other software products. The technical advice is clear: identify affected systems and apply the available updates. But for many organisations, the first challenge is understanding where PHP is being used, who manages those systems and who is responsible for taking action. To help you identify potential exposure, we have created a PHP Security Checker to determine whether your systems have…
Beyond the Filing Cabinet: What Document Management Actually Saves You
Document Management for Small Offices with DocuWare For many small offices, document management still means a filing cabinet, a shared drive with inconsistent folder names, and a lot of time spent searching for the one contract or invoice somebody needs right now. DocuWare replaces that with a structured, searchable system that sits behind your everyday paperwork. What does DocuWare mean in practice? Giving Office Managers time back For an Office Manager who is often the person holding the whole administrative process together, this is time back. Fewer interruptions to find a document for a colleague,…