Eliminating threats is impossible, so protecting against them without disrupting business innovation and growth is a top management issue.

1. Live Webinar:
Webinar Audio:
You can dial the telephone numbers located on your webinar panel.
Or listen in using your headphones or computer speakers.
Welcome!

2. Webinar DetailsWebinar Details
• Presentation is roughly 1 hour
• All phone lines are muted
• If anyone has any questions during this webinar – please type them in your
Questions Box located at the bottom of your webinar panel

3. Today’s Presenters
Rocco Passafuime
Director of Infrastructure
Net@Work
Laura Kibbe
Managing Director of Professional Services
RVM Enterprises, Inc.

4. Webinar Details
180+ Business
Technology
Architects and
Consultants
IT Road
Mapping
& Strategic Planning
Business
Process Review
Ecosystem
BI, Analytics
& Reporting
Cloud & IT
Managed Services
ERP/
Accounting
Web Development
& e-Commerce
Sister Company
Payment
Processing
SWYPE
Sister Company
CRM &
Marketing
Automation
HRMS/
Employer Solutions
Document
Management
Nonprofit
Solutions
Managed Print
Services
Sister Company

5. Webinar Details

6. What is a Data Breach?
• Incident where information is stolen from a system without
authorization
• Victims are typically large companies and data stolen tends
to be sensitive, proprietary or confidential (Customer lists,
credit card numbers, etc.)
• Financial and reputational damage as a result of a data
breach is significant.

8. How Do They Happen?

9. Inadvertent Invitations
Sometimes data breaches are not directed into he company
iteself:
• Lost or stolen devices
• Malware infected [personal devices that connect to the
company’s network
• Employee sharing of information and files with friends (e.g.,
“let me borrow that PowerPoint?”)

10. Financial Cost - Ponemon Cost of Data Breach Study
Who? 383 Companies, 12 countries
Damage? Average cost is $4 million
Trend? 29 % increase since 2013

11. Sources of Breach

12. Who Are The Targets?

13. How Can You Prevent a Data Breach?
• Training
• Encryption
• Intrusion Detection and Prevention
• Content Filtering
• Vulnerability Assessment
• Patch Management
• System Monitoring
• Backup

14. Webinar Details

15. What is BYOD?
Bring Your Own Device refers to the policy of allowing
employees to purchase and integrate their own devices
into a corporate network
While businesses benefits like effifcicny and employee
satisfaction arwe real, IT departments find it difficult to
balance changing technology landscapes and face new
security concerns.

16. Benefits of BYOD - Company
• Enhanced employee productivity - immediate access to work when
away from the office
• Employees are much more likely to protect and care for their own
devices. This equates to decreased expenditures due to damaged or
stolen devices and data loss.
• Device ownership costs shifted to the employee rather than the
employer.
• For Gens Y and Z, 50% expect the same technology to be available at
work as at home.

17. Benefits of BYOD - Employee
• Efficient – carry 1 device instead of 2
• Consistency – because it’s one device, you can save settings and
documents, pictures all in one place
• Choice – employee picks which type of device they want (iPhone,
Galaxy etc.) so they are happier

18. Best Practices
• Clearly defined written policy with signed acknowledgement
• Training on policy
• Good mobile device management solution
• Smart passwords
• Monitoring and security reporting

19. Webinar Details

20. • Deceptive Phishing
Email messages that claims themselves as recognized sources and
asks for your personal details, verification code or even to make a
payment.
 Scam objective -To trick the user into providing personal details to
access his bank account.

21. • Spear Phishing
A Sophisticated version in which the sender uses available
information to direct his request at you.
 Scam objective-Directly targets you for acquiring all your bank
details or any other data.

22. • CEO Fraud
Phishers use an email address similar to that of an authority to
request payments or data from others within the company or an
organization.
 Scam objective - To transfer the money directly from victim to
cybercriminals.

23. • Pharming
Scam in which a hacker hijacks a website’s domain name and uses it to
redirect the visitors to some other site.
 Scam objective-To intercept and steal online payments

24. • Dropbox Phishing
A Scam that looks real and claims to have come from a Dropbox
requests the user to click on the link to secure their account details or
to share a downloaded file.
 Scam objective-To install malware on victim’s PC.

25. Preventing Phishing Leaks
• Strong internal firewall management
• Refuse to provide your personal details
• Report suspicious emails
• Use strong anti-virus software

26. Webinar Details
Malware

27. Malware is a malicious software that gets installed in
your device and performs unwanted tasks.
Mainly designed to transmit information about your
web browsing habits to the third party

28. Types of Malware
Viruses Trojan Horse
Spyware Spam
Adware Rootkits
Scareware
Worms

29. Viruses
• Software that replicates itself and spreads by
damaging and deleting the files.
• Virus enters your device via attached images,
greeting, audio/video files , downloads etc.

30. Spyware
• Spyware is a program that gets installed without the
user’s permission.
• It monitors the user’s activities on the internet and
transmits that information to the third party.

31. Adware
• Software where advertising banners are displayed while any
program is running.
• It automatically downloads to your device while browsing any
website
• It is used by companies for marketing purposes

32. Scareware
Software that is designed to trick the user into buying
or downloading unwanted software.

33. Worms
• Malicious program that make copies of itself on
local device, network shares etc.
• They make the working of your device slower.

34. Trojan Horse
• A Trojan Horse is a program containing malicious or
harmful code.
• Entering a computer, it performs various tasks like
corrupting files and sending out personal information.

35. Spam
• Method of flooding the internet with the copies of the
same message
• It is for the purpose of advertising, phishing, spreading
malware etc.

36. Rootkits
• Software hidden deep inside your device which
remains undetected.
• It transmits all your sensitive information

37. Webinar Details

38. Are the systems in place enough?
• Most companies have robust IT security systems in place at a macro
level – looking for hackers etc.
• The employee armed with a simple laptop and a thumb drive does
the most damage.

39. The Dilemma
• There’s an inherent tension between giving employees access to the
highly confidential trade secrets they need to do their job and locking
down the information’s use to prevent theft.

40. What is an employer to do?
• Clearly document policies and controls: Acceptable Use etc.
• Conduct fraud and awareness training for all employees
• Conduct regular information security audits
• Implement strict password policies
• Enforce delegations of authority and access to information (only allow
access to what is needed to perform the job)
• Institute stringent access controls. Backup and recover processes
• Shut down unauthorized data exfiltration means: USB, Bluetooth, media
cards, etc.
• Institute a formal insider threat response plan

41. Webinar Details

42. What Is It?
• Type of malware that restricts access to the infected computer system
and demans that a user pay ransom to get access to the files
• How does it restrict access:
• Encrypts files
• Locks system access
• Crashes system
• Disrupts and annoys – opening browser windows, displaying pornographic
images

43. What’s Bitcoin
• Internet currency
• Like a casino chip, “coins” have no intrinsic value but they can be
traded for real value when you leave

44. Why Bitcoin for Ransom?
• Bitcoin converst directly into local currency
• Low transaction fees
• Faster than checks, wire transfers, and, even credit cards
• Because not government backed, lightly regulated
Bitcoin solves the problem with a fast, untraceable
payment system that makes ransoms much easier to
pay—and for cyber criminals, much safer to collect
without getting caught

45. Any Questions?
Please type in
your questions

46. Thank You For Attending!
Connect with
800-719-3307
www.netatwork.com
netatwork.com/blog
Net@Work YouTube
Follow us on Twitter: @netatwork_corp
Follow Net@Work on LinkedIn
Follow Net@Work on Google+
Follow Net@Work on Facebook
For More Information Contact Your Net@Work Account Manager
Or Contact Us using the information below:
Rocco Passafuime | Net@Work
Director of Infrastructure Sales
(P) 646-517-6093
(E) rpassafuime@netatwork.com