So it didn’t work with your newest employee, in fact it didn’t work out would be an understatement…they left under quite a cloud! 

A recent Symantec study states that “half of the employees who left or lost their jobs in the last 12 months kept confidential corporate data and 40 percent plan to use it in their new jobs.”

You’ve got the work laptop/computer back, but have they deleted things?

How do you know what they were doing and looking at before they left?

They used their own devices for work, do they still have their work material?

What to do when employees don’t leave on the best terms

The vast majority of staff finish employment and move on with no issues. But occasionally people leave in less harmonious circumstances, or they are just plain dishonest. We’d like to cover off on some of the basics to ensure that your risks are minimised for if, or when, this happens to you.

Importantly, it makes a big difference what systems you use and how you are set up, so keep that in mind. For the purposes of this simple article, we assume you are a small to medium kiwi business, with a fairly simple IT setup, using one of the lower-level Microsoft 365 licences for your email document storage and sharing.

Set up the employee properly when they join and have proper security

To get the best outcome when an employee leaves you need to start when they join the company. 

Practice ‘need to know’ access to systems and data:

• People only get access to what they need for their job
• This includes ensuring your work, documents, emails, etc are protected by permissions appropriate to the user. If they don’t need access, they don’t get it!

Set up an off-boarding system

The obvious (we don’t want to tell you how to suck eggs with your HR, but people sometimes don’t do these things, or forget) things to do when the person leaves:

• You probably have an induction process when someone joins, but do you have an off-boarding process for when people leave? 
• Ensure the off-boarding process is promptly followed. 
• Ensure the off-boarding is responsive enough to handle an employee disappearing at no, or very little, notice.
• Promptly close off email and other systems access.
• Promptly close off remote access.
• Take back company owned devices.
• Ask specifically if there is any company data in their possession and if so, make a plan with them for retrieving it.

The not so obvious things

Of course IT being the mysterious being it is to most of us you might not consider the less obvious things to do:

• Don’t let people use personal devices for company work – give them the tools they need, and ensure those devices are properly set up by your IT.
• Setup your business so that ALL work data/information is only ever stored in company systems. Do not allow people to save work anywhere else. Make sure they have a company owned folder they can save drafts and working documents to, if this is needed.
• Have remote wipe enabled, meaning you can remotely wipe the data from any devices they have accessed. The next time they connect to the Internet, the data is wiped.
• Review activity logs; these are detailed, but can give you a picture of what the person was up to.
• If they delete emails or files, systems like 365 and Dropbox Business keep files for a ‘retention’ period and during this time you can restore them.
• Use a company password manager such as LastPass so that people actually don’t know their passwords, so if they leave you (or your IT support) remove their access and they can’t get into anything.

Use technology to protect your organisation

If you are on a lower level 365 licence, such as Exchange Online, Business Basic or Business Standard, then talk to your ITA partner about the benefits and costs of moving to a higher licence with more security features such as 365 Business Premium. For example, configure 365 to prevent bulk downloading of company data, etc.

In Summary

Put in place protections now, so that you have them there before you have a problem. Once the person has left, it is often too late. In general, these suggestions are a good place to start with ensuring your business is protected. 

If you need a hand with any of these steps get in touch with the team at IT Centre

Passwords made simple!

Let’s be honest. Remembering passwords on top of the million other things to do in any given day is a lot.  Are your team’s passwords fairly similar across multiple online accounts? It’s okay, you are not the only business.

Most people reuse their passwords over many different applications, and have one or two passwords only.  With the increased need for security, however, there are now much better ways to protect your accounts and provide additional layers of security.

Nowadays almost all online services, banks, social media, shopping have added a way for your accounts to be more secure.

Here we help you to understand MFA and 2FA plus introduce you to LastPass to manage your passwords.

What is MFA and 2FA?

Maybe you’ve heard of the term MFA or 2FA and are slightly confused. Let us help you break what this is and why you need it.

MFA = Multifactor authentication

2FA = Two factor authentication

In the old days!

In the old way of doing things you signed in to your online accounts in a process called ‘authentication’. That included a basic login and password. For example

• Login = Matt@olddays.co.nz
• Password = Matts dog or Matts birthday (something that Matt could remember easily and something that Matt used across all of his accounts)

Multifactor Authentication (MFA), however, works by adding additional layers of security to your online accounts.

This provides a “second” thing – what we call a second “factor” – to prove who you are.

Yes, the first layer remains as your username and password, however now you can add another layer of protection. For example:

• An additional password, or a PIN.
• A code accessible through your smartphone, or a secure USB key.
• A fingerprint, or facial recognition.

How does MFA work?

What this additional level of protection does is helps to ensure that you are who you say you are when logging into your online account.

So even if someone gets your user name and password, and logs in with your credentials, they will be stopped!

You will get an immediate notification on your phone to indicate that someone is trying to login to your account.

You can then decline the authorisation, locking them out. This also tells you that your password has been guessed, so you know to change your password.

How do I get MFA?

Many of your current apps will have an MFA feature that you can turn on. For other things like email, you can enable MFA.

This may mean talking to your ITA provider so that we can assist you to help turn on your Microsoft 365 MFA feature.

Once it is turned on, you and your team will need to use MFA before you can next access you emails/Teams and other applications.

Make sure that everyone is ready for this and knows what to do. It isn’t hard, but like with all changes, its best to ensure that you have support from the rollout.

What about Passwords?

1.Can I re-use Passwords?

Reusing the same passwords across multiple accounts is not a safe idea as it creates an opportunity for credential stuffing attacks.  A credential stuffing attack is one where leaked credentials from one site/service are used on another site/service to see if they work.  It would be like using the same key for your car and your house.

For example, if you use the same password on your online bank account and Facebook, an attacker can easily breach both of your accounts even though you may not have reused the same password on your email account.  This potential harm this practice can cause may be a monetary loss, data loss or loss of sensitive personal details.

Here at the ITA we recommend that you update your password after every three months, unless you have been the victim of a cyber-attack, then you should change your password immediately. This ensures that if your credentials are breached, then they are not able to immediately breach other accounts also.

2. How strong is my password?

Password strength is a big topic of discussion.  You know the drill, you must use lower and uppercase letters, use numbers, use special characters, make sure it is long.  But even after all this effort, your password can still be weak!

You can test your passwords out before you use them at https://www.passwordmonster.com/ or https://password.kaspersky.com/. This information gives you feedback about the strength of your password, which should help you to strengthen your password choices:

(Note:  Your password is not collected or stored at either of these websites.  They are well known secure sources of information that you can trust)

3. Should I use a Password Manager like LastPass?

Yes, it is definitely best practice to use a Password Manager.

Password Managers allows you to keep track of your passwords without having to remember them.

The advantages of a password manager are:

• A password manager can generate for you long, complex, unique passwords across different sites and services
• A password manager reduces the need to remember your passwords
• A password manager is good at spotting fake websites, so they can alert you to a potential phishing attack
• A password manager can generate new passwords whenever you need to update your credentials
• A password manager can sync your passwords across all your devices, so you’ll have them with you regardless of what device you are using to login.
• A good quality password manager is a safe, trustworthy and highly recommended security tool.  Known trustworthy tools such as LastPass can be trusted to protect your account logins.

LastPass is a free or paid personal password manager for an individual, however, if you want to protect your business, you need LastPass Business.  We can help you specifically with this.

In conclusion:

Having MFA or 2FA is an essential these days, and so is having decent and unique passwords. For practical reasons you need to have a business password solution in place to ensure your team are password secure.

Here at the IT Centre, we can help you to simplify this process, and provide you with support to easily and effortlessly apply these tips. If you would like to discuss your specific needs, please feel free to reach out to us here.

How a Managed Service provider can help your business

In IT we love to use fancy jargon, and Managed Service provider or MSP is no exception.

In this article we will break down what an MSP is, how it can help your business, and use some real-life examples of businesses, like you, who have made the switch to an MSP.

Firstly, what is a Managed Service Provider???

In a nutshell an MSP is your ‘outsourced IT Dept’ that provides proactive IT support. An MSP provides preventative measures, detecting most issues long before they become a problem.

The mission of an MSP is to protect your business from costly downtime and ensure that business continues seamlessly.

What is the break-fix model of IT support?

In contrast the ‘break-fix’ model of IT support is when you call an IT company when something breaks, and they come and fix it, on an adhoc pay by hour model. There is no ongoing support or preventative security measures taken. This is a bit like the ambulance at the bottom of the hill.  

Top advantages of an MSP for your business:

We become an IT partner to your business: As an MSP we are interested in understanding your entire business. We see ourselves as a business partner who wants to help your business to succeed and grow. This is quite different from the ‘break-fix’ model. We anticipate a long-term working relationship with your business.  

Proactive IT Support: As an MSP, our mission is to keep your business technology safe and available, and to anticipate your needs and requirements. This means minimum costly down time, and maximum business continuity.

Knowledge of your needs: As we have a long-term relationship with your business, we become closely acquainted with your IT systems, and your personnel. Because of this we understand how the parts make up the whole, rather than just offering a quick short-term solution, which may be costly in the future.

Cost savings: By outsourcing your IT management to us, you get a well-informed IT department on your team, without the cost and responsibility of training, recruiting, and retaining staff.

Case-Study

“An IT Alliance member had a company who was reaching out to them on a ‘break-fix’ basis. During Covid the IT Alliance member reached out to them to discuss becoming their MSP. They sat down and discussed what this actually meant, the services that the MSP offers, and the priority that is given to MSP clients. The client has been using them as an MSP for over two years now, and happily sings their praises, saying that having an MSP has revolutionized their business. No more waiting for IT support, no more downtime and so much more alignment”

So, what does an MSP actually do?

Remote Monitoring: An MSP proactively monitors, patches, and updates your software on an ongoing basis with 24/7 monitoring. This is all done in the background on an ongoing basis and requires no input from you.

Security: As an MSP we constantly review your systems to identify and address vulnerabilities. We can keep up with system updates, software patching, antivirus and more. It would be difficult for any business to keep up to date with all the daily security alerts. With an MSP this is all taken care of and is one less thing to worry about, so you can focus on your business.

Optimising hardware: An MSP provides information on optimal hardware that synchronises across your business. This includes laptops, desktops, and mobile devices, plus your network and servers.  We can work with you to understand your growth requirements and work on the best timeline for your budget.

Strategic advice: As IT is our passion, we hear about a myriad of tools that may be of benefit for business goals. We share this advice with you, rather than you having to research or find out how you can optimise technology for your needs.

Regular reviews: As an MSP client, you are a priority which means that we schedule in regular proactive reviews. No more waiting on the phone to talk to someone to get IT support.

Business Continuity and disaster-recovery strategy: Nowadays it is crucial that you have a solid data-backup plan. We can help you with this process and ensure that everything can be efficiently restored should the need arise.

So what do I do now?

So now you have an overview of what an MSP is, and how they can help your business. The next step is talking to the team at IT Centre about your specific needs. Please feel free to reach out here for further advice. 

More then just that flashing box, lighting up like a disco in the corner of the room, routers play a particularly important role in keeping your business safe, and your data secure, as well as creating efficient, and safe remote working conditions.

Here we look at the role of the router, and what you can do to ensure you have the right one for your business.

Think of your router like an important Traffic Officer only allowing approved content in and out of your business.

The difference between an entry level router and a higher quality router, provided by IT Centre is a lot. Sometimes it pays to think outside the box, and not just take the router provided for free in the box.

Top reasons why you need a good quality Router:

• Determines the speed with which your internet will work.
• Speed determines the productively of remote workers.
• A good quality router means that multiple people can work remotely at once.
• Ensures you can connect to the office remotely.
• Controls what sites are allowed to be accessed during work hours.
• Allowing access to other content to protect data loss from staff.
• Adding additional security features from software such as intrusion protection.
• Prevention from attacks like denial-of-service attack, designed to cripple your router, or make it just give up and let hackers in.
• Keeps your business safe from Cyber-attacks
• Ensures that accidental clicks from staff on content does not cause a security issue.

Security and Routers:

 When it comes to security, it is a good idea to take preventative measures. This is where the best secure routers come in. A router with built-in security controls and services that monitor your network around the clock is going to save you a lot of potential headaches. With your router protecting your area of coverage, your devices and your network safe.

SECURITY TIP

“You must always change the factory default password for the router and ensure that the firewall and other security features are in fact enabled”.

Ever been confused by the codes that come up when you go to log in to your network?

WPA2 and AES are the best settings to secure your Wi-Fi from hackers. Remember that if a hacker is able to breach your network, they could steal important information, like bank details, or even your identity.

We strongly suggest against using an open network. An open network means you won’t have a password, so anyone can have access to your Wi-Fi and all of your devices.

Make sure to apply WPA2 to your router for improved protection of your online information.

In Conclusion:

Routers can be complex and can create harmony or havoc depending on the route you choose to follow. Buying a router with the highest security is crucial to protect your network.

Remote working conditions are the new normal, which means that many of us may need to upgrade our home routers too.

By speaking to The IT Centre, you could find quick connectivity and security gains with an upgraded router.

To save time and money and to make sure that you have done all that you can to make your business feel free to reach out to us here.

With the increased need for security, and rising Cyber Security threats, it is imperative that all businesses have a strong password management system.

80% of data breaches are caused by weak, reused or stolen passwords

A password management system is able to store encrypted passwords online making digital security accessible and simple for businesses to manage the passwords for all employees.

In today’s world, most businesses have dozens or even hundreds of passwords for different employees with different accounts, profiles, and applications.

#1. Generate secure, fool-proof passwords

With 80% of all data breaches happening because of weak passwords, having a password management system is crucial.

If you want to ensure your data safety, you must use complex passwords that include a combination of letters, numbers, symbols, and uppercase/lowercase.

A password management system will automatically generate fool-proof passwords based on your specification. This ensures you always create extremely secure passwords, thus avoiding hacks.

This also prevents your employees using generic and basic passwords such as their dogs name, or date of birth, and lets the password management system create a unique password that has all of the factors required for high security, including symbols, upper and lower case, numbers.

Let’s face it, it is much harder to hack KiUR&*!RTQ then it is Snoopy1222!

#2. Eliminate employee password reuse:

With a password management system, passwords are automatically updated and renewed. This ensures employees practice good password hygiene.

#3. Manage passwords from one place:

There is nothing worse than trying to keep tabs on every employee’s passwords. When a staff member is on leave, the last thing you want to do is try and find the post-it note they left with the login details.

Similarly, if a disgruntled employee leaves and takes their passwords, this can create an unnecessary headache.

With a password management system, you can easily give every user their own personalized vault, while maintaining oversight of all passwords with an admin dashboard.

#4. Protect your sensitive data:

Keep everyone’s credentials, notes, and information safe using the password management system.

#5. Admin functions make managing passwords a breeze:

Have multiple employees working on a particular app? No problem. With a good password management system, you can securely share credentials where employees and clients require access and organize shared credentials by Groups.

Admin functions may include (depending on the system you use):

• Instantly add and remove team members.
• Safely share passwords with others.
• Give each employee their own vault for safeguarding passwords.
• Store digital records: WiFi logins, software licenses, employee IDs, and more.
• Set security controls and restrictions based on your team’s needs.

#6. Notification of a data breach

A password management system will constantly monitor all of your email addresses and sends instant alerts whenever it suspects that your data has been compromised. This allows you to act promptly and change all the necessary passwords, thereby preventing your information from being used by hackers and identity thieves.

#7. Multifactor authentication for employees

Another feature available in most password systems is multifactor authentication. This provides a second layer of security to verify the user’s login, usually in the form of fingerprint verification, one-tap mobile notifications, SMS codes, etc. This can be used to ensure the highest levels of security in businesses.

Which password management system is right for you?

There are a number of password management systems available. Finding one that is easy for your team to use, economical and with a long track record is imperative.

To find out more information about which system is right for you, please contact us here

A cheat sheet to help you make the most of your subscription

Written by: Peter Marshall, Voicecom Technologies

If you have Microsoft 365 for business, we want to make sure you’re making the most of it. You’re already paying for the subscription so why not take advantage of a whole suite of integrated applications that can streamline your workflows?

While remote work has been a key driver for Otago businesses to adapt the way they work and assess the systems they use, along the way they’ve realised that these apps not only offer remote capabilities but also the opportunity to integrate apps and business processes to allow them to better serve customers, streamline work, and improve employee productivity.

Four apps you’re paying for but missing out on

Microsoft SharePoint – SharePoint can seem overly complicated because it can offer so much. But it doesn’t need to be so scary. You can start small and use more functionality as needed or as you grow. Basically, it’s a platform that offers content management and collaboration. It helps with reducing duplicate files, gives you remote access (needed more than ever!) and allows you to work on the same document at the same time. Find out more about SharePoint here.

Microsoft Power Automate – Microsoft Power Automate allows you to automate workflows across applications. You can use it to connect email and instant message alerts, synchronise files between applications, copy files from one service to another, collect data from one app and store it in another, and much more. Templates are available to get you started. Efficiency is key for sustained success across businesses and Power Automate assists this by simplifying workflows with the automation of repetitive tasks.

Microsoft Forms – Forms allows you to create shareable surveys, quizzes, and polls in just minutes. You can then invite others to respond to it using almost any web browser or mobile device, see real-time results as they’re submitted, use built-in analytics to evaluate responses, and export results to Excel for analysis.

Microsoft Planner – A simple, visual, task management app that helps remove chaos from the team collaboration environment. You can create multiple task lists associated with different projects or set up daily to-do checklists.

Other apps to take advantage of.

Microsoft Teams – a chat-based workspace that integrates people, content, and tools into a single platform. Find out more about Teams here: https://ita.co.nz/microsoft-teams-more-just-video-conferencing

Microsoft OneDrive – OneDrive is essentially an online folder system for file storage. Similar to SharePoint however SharePoint offers much more in the way of collaboration. You might use OneDrive to save your personal drafts and then move them to SharePoint when you’re ready for collaboration.

Microsoft Lists – Helps you track information, organise your work and easily share with others. Lists are simple, smart, and flexible, so you can stay on top of what matters most to your team. Track issues, assets, routines, contacts, inventory and more.

Microsoft Stream – Your central destination for your business video content. It’s like an internal, secure YouTube for your business. This is the perfect place to keep things like training videos or marketing content for staff to easily access.

Microsoft Sway – Sway is a cloud only story-telling application similar to PowerPoint but provides more narrative options than a slide show.

Microsoft Whiteboard – A digital version of the traditional whiteboard that allows collaboration and brainstorming with your team in an interactive and engaging manner.

Microsoft MyAnalytics – Uses your data to provide insights into two of the key factors in your personal productivity: how you spend your time and who you spend it with. MyAnalytics takes a look at your everyday work patterns, finds areas that could benefit from your attention, and provides you with the tools to achieve more thoughtful use of your time.

Microsoft Power Apps – If your business needs a specific app to do a specific job, this is what PowerApps can do. Using simplified development techniques and with the help of your IT expert, you can create sophisticated applications using features, procedures, and processes found in Microsoft 365.

If you want to find out more about how any of these Microsoft 365 applications can benefit your business, contact us today on +64 3 443 5499. If you’d like to visit or email us, you can find our details here.

How a proactive approach can save you money and mitigate risk
Written by: Phil Strang – Technology Partners

Do you find yourself so caught up in other areas of your business that you tend to only manage your IT when things go wrong or it becomes an absolute must?

This is called reactive IT Management. With it, brings a mountain of stress, disruption and blown budgets.

A proactive approach to IT management doesn’t have to be difficult or expensive. In fact, it can save you money and keep you focused on doing what you do best.

This is where a Managed Service Provider steps in. They’re not just the guy you call in for computer repair, they’re essentially an extension of your team. An MSP is there to support you and ensure the IT side of your business is efficient, cost-effective and low-risk. Let’s look at some of the benefits of proactive IT management and why businesses in Otago might want to move away from a more reactive response.

Preventing blown budgets

Large, unexpected IT bills can often be avoided with a good plan in place. A Managed Service Provider can help prevent the unnecessary cost of fixing things by implementing a plan with regular, scheduled maintenance. Additionally, they can give you the tools to effectively manage your IT life cycle, forecasting hardware and software upgrades. With a fully prepared life cycle, IT budgets can be planned in detail for years to come. Everything from printers to operating systems can be prepared on a tightly controlled schedule. Adopting an IT life cycle is a great way to eliminate unwanted surprises and make the most out of your IT budget.

Productivity / Minimal disruption

There’s nothing worse than when you get halfway through the day and you realise you’ve spent most of it troubleshooting or dealing with an IT issue. Can you imagine how frightening the numbers would be if you calculated the total number of hours lost due to IT-related disruption? A Managed Service Provider’s core purpose is to lessen this disruption and would likely pay for themselves rapidly. An MSP often does routine maintenance outside of hours so when you log in the next morning, you’re good to go! They’re your Clark Kent, unobtrusively making things happen in the background and quickly embracing their capes should anything big arise.

Knowing your business

Something stops working at the worst of times and you find yourself giving an IT technician your full operational history to help you both connect the dots of where things went wrong. Sound familiar? The great thing about an MSP is that they get to know your business, and more importantly, have a detailed documentation process. The team will get to know your business and you’ll often be dealing with the same technicians who know you and your systems. Having an intimate knowledge of your site’s configuration and a detailed service history means they’ll spend less time troubleshooting and more time working on the job. Familiarity when working regularly on a system means clients are not paying for a technician to relearn the basics for each job or call out. As an added bonus, when you partner with an MSP, the charge is often much less than the hourly rate of one-off call outs.

A practical and trusted approach to technology

In the technology space, there are changes and updates left, right and centre, often leaving you overwhelmed. This leads to you either falling behind with your IT services or purchasing things your business may not need. A Managed Service Provider is across all things IT, so you don’t have to be. You have the option to meet on a regular basis to discuss and review appropriate changes or updates that should be considered to your IT infrastructure. They know what’s happening in the industry and can guide you according to your specific needs. They’re not about telling you that all your computers need to be updated with the highest spec and most expensive models. In fact, an MSP will get to know how you operate with an audit and provide you with a plan on where you can best spend and save money. They’re about plans with priorities and delivering a solution according to budget.

If you’d like to find out more about how a Managed Service Provider can help you move from reactive to proactive IT management, contact us today on +64 3 443 5499. If you’d like to visit or email us, you can find our details here.

Big-business quality IT for SME’s
By Delia Gill

The IT Alliance are a group of nationwide partners that banded together to offer businesses high-quality, flexible support with a local touch. They are small enough to feel part of your team but backed by a bigger organisation and network of support. It doesn’t matter if you’re located in Otago or on the road across the country, they have the infrastructure set up to ensure you’re covered with all things IT.

Your Local Partner

How great is it that technology allows us to remote in and help clients at the drop of a hat? Although remote support is an excellent tool, sometimes an on-site visit is what you need. After all, it might be a little too much to expect Frank from accounts to troubleshoot why his keyboard isn’t connecting to his docking station, which isn’t connecting to his laptop, which is only connecting to one of his two screens, which seem be missing some cords?…you get the idea!

All of the partners in the IT Alliance pride themselves in providing, fast, high-quality local support. They’re focused on building long-lasting client relationships and working with you to ensure IT is strengthening your business, not obstructing it.

Nationwide Support

As a group of 12 independent IT companies across New Zealand, the IT Alliance work together as a group to deliver products, projects, training and support throughout New Zealand. Regular meetings during the month are held where specialist knowledge is shared among members and then passed onto clients from a local source.

Having partners that can reach the entire country means there are no limitations to servicing your business. Whether you’re travelling and need help, or have staff based around New Zealand, they can provide you with flexibility by supporting you no matter where you are.

Flexible and Responsive

The issue with partnering with a single, large IT company is that you can often get lost in the noise. Partnering with a member from the IT Alliance means you’re getting the benefits of small and local but also the access and knowledge of big and broad. Smaller and local offers agility, with the capability of changing and adopting new technologies at a faster pace, bypassing lengthy procedure. Additionally, you’re not paying a premium to support a single large organisation that has substantial overheads to cover.

Collaborative Knowledge

A collaborative approach is critical with the fast-paced nature of the IT space. The IT Alliance team are backed with a wealth of knowledge and varying specialties. This means they each bring something unique to the table and can share the most important information with each other rather than wading through the sea of updates and changes the industry consistently presents. The core purpose of the partners coming together frequently is to brainstorm, explore all points of view, share experiences, stretch perspectives and challenge the way things are down. All with the objective to ensure the best possible IT solutions are offered to their customers.

If you’d like to find out more about how the IT Alliance works or can help your business, contact us today on +64 3 443 5499. If you’d like to visit or email us, you can find our details here.