COVID-19, Cybersecurity & Working from Home #WFH - #PFCwebinar #WebinarWednesday / HealthChoice

00:00

hi everybody we still have some folks joining but I think we are going to get underway you know if I can you should be able to keep admitting people as they were joining the waiting room so if you wouldn't mind taking over that that would be great and and yeah we'll get things underway so welcome everybody who is joining us to PFC as webinar Wednesday for April 8th today the topic

00:30

of discussion is cyber security and you working from home edition my name is Jonathan I cover the IT needs for the organization odd foundation has primarily reporting to CEREC the counseling Foundation of Canada Lawson Foundation and Lane Law Foundation I also do IT consulting for nonprofits and small business so I've been asked to present today on the cyber security trust your organization might face and I base my presentations on a series of talks I gave recently out Foundation has I

01:02

have covered topics that will help you both while working from home and when you return to the office please post your questions in the chat as they come up and we'll be monitoring them and I'll cover them to the best of my ability at the end of the presentation hello Bonjour le monde je m'appelle Jonathan is just the administrative system a foundation house Mel C de Roos when des new or old we unfortunately that is the only French I'll be speaking today but all that you may proceed from here Thank You Jonathan

01:34

Petrovic Tuesday Tuesday on a traditional special celestial security substance it on the telly Travel amplify see news urban fella Jonathan don't follow the concocting MPT with natural suji I am in a shillelagh the learning and partnerships director of PFC based in Montreal for those non members joining us PFC is a network of grant makers all across Canada we'd love to hear from you following the

02:04

presentation of Jonathan we'll have some time dedicated Q&A s you can send us these questions at any time often say or in English and I will be monitoring the French questions in particular on Jose Ripa the guest on Jose Arjun attend some problem just to let you know that a recorded version of this webinar will be available as well as his slides of the presentation both in English and French after the webinar and we will also be

02:34

sending you a post webinar survey to gather some feedback from participants nobody else's phone - I'll have found you a been a four-car some damper the ho - of the Doudna participar say choc a POC - Johanna Johanna webinar a well ours which weighed in on comm Bienvenue and jonathan it's a given before Thanks thank you ok so a quick overview the items to

03:11

cover today we'll talk about cloud hosting at your organization and the various forms of that takes data backup of your computer we'll talk about email security especially in regards to phishing attempts at your organization some suggested antivirus software that you can use we'll talk about password management both for yourself and again across your organization Wi-Fi and networking while you're working from home we'll talk about your operating systems that you'll be using and updates

03:44

to them we'll talk about disk encryption as well as physical security of your devices so to start things off with our beautiful star wipe here - Charlton Heston in Planet of the Apes 1968 asking us where's the data in this film Charlton Heston's character Colonel Taylor is told the question isn't so much where we are it's when we are well we know when we are of course but where is our we're going to adjacent data being stored and where exactly is the

04:14

cloud about a bit let's think about our email and data cloud hosting I'm good to identify what email service you use whether that's good Google for business Microsoft Office 365 or another as well as what cloud storage service or services you might be using that can look like Dropbox Google's Google Drive or others if you're unsure of the cloud service you use how you access your email is usually a good clue so for example if you go to gmail.com

04:48

for your email your organization is likely using Google often you use all the available products from a cloud service so in this example you probably also use Google Docs for file creation and Google Drive for cloud storage if you use outlook and office comm for your email you likely use Microsoft Office 365 products and there from Microsoft onedrive for your cloud storage there's also services like Dropbox and box that are sometimes used instead of or in addition to your organization's cloud

05:19

storage host as these are less platform specific and again if you if used Roo Dropbox that's usually pretty obvious by accessing Dropbox comm and using the Dropbox your website USA will almost always be hosted separately from whoever's hosting your email to find out where your website is hosted it's about to figure out where you log in to update your website so if you log in to your website your address org slash wp-admin then you're using WordPress if for example you log in to your website via

05:56

Squarespace calm them yeah you guessed it you use Squarespace for your hosting there is a resource light at the end of this presentation help with identifying your hosting service or services and a take home worksheet will be provided as well to help with that so let's talk about minimizing risk for your cloud hosting providers now that you have a better sense of where your data is stored WordPress and other website builders offer the ability to have many users with varying permissions you should generally have to administrator accounts for your

06:30

WordPress or website builder but all your other staff members should have fewer abilities so for example you can allow staff members to create WordPress posts but not necessarily to delete them or to add WordPress plugins or other things that could cause damage to see to the second point on the slide it's best practice to register for services like your domain name provider so for example GoDaddy or Namecheap with a general organization email like info at your organization so that any renewal

07:02

notices or other alerts go to an address that all your staff can easily access the general organization email also won't be deleted like a staff members might be when they leave your organization so again you won't be missing any important alerts for the third point you've probably received a two-factor verification code at some point but if you're not familiar with the security feature which is now widely offered including on Google and Microsoft Office 365 two-factor verification allows you to set a trusted phone number in addition

07:34

to your password so that phone number will receive a unique code anytime your email and password are used to try to log in to a new device so even if your password is compromised or just by an attacker the attacker cannot sign in to access your data without that code finally for the last point download local copies of your cloud data when possible in other words you want to save your data to your device in addition to the cloud that way if your cloud service provider experiences an outage or a

08:04

failure you can recover your data easily the desktop applications for Google's G Drive Microsoft onedrive Dropbox Apple iCloud Drive and many others offer this ability following Danah backups so creating documents within your cloud service is always ideal but what about the other documents that you might create locally on your computer or even other downloads like PDFs the ability to restore files via

08:35

Google Drive is great but it can be time-consuming to redownload documents one by one this is where a backup app comes in handy because it can allow automated downloading of the contents of an entire hard drive especially in the case of a lost or stolen device or a failed hard drive cloud backup out light Backblaze work in addition not not separately from your cloud service and backup all user data automatically and frequently we've just talked to a whole head about

09:07

the cloud let's go over some terminology servus if i create a document on my ipod and then i later change it and delete it from my mac document is also deleted on my ipod the deletions propagate with a cloud backup app like doc plays for example it keeps that document for me even after deleting it from any of my devices then even often sometimes offers version control so even if I haven't deleted the document I can revert to an earlier version of that this also brings up what I call the FedEx solution and I have another great

09:45

animated slide for you to enjoy here so cloud backup outs are great but cloud backups can get very big since they're backing up the contents of your computer hard drive these can be hundreds of gigabytes and this can cause you issues with downloading the entire contents of a failed hard drive or the hard drive level lost or stolen ways fortunately many services offer mailing a hard drive with your data to you which in many cases can happen overnight via FedEx while the equivalent download of that data could take days or even weeks especially when you're working from home

10:16

potentially slower residential connection the inverse is often also possible initial backups of your computer can be quite large and so that initial backup can be mailed with what's called a feed drive - cloud backup providers like back ways to minimize what's over what's uploaded over your home internet connection move on from the cloud and talk about email security along with some nice drop-down examples here including at the lower right an example that I actually

10:49

receive myself we've been seeing more and more cases of easily identified but hard to block phishing attempts like the ones featured here the domain that an attacker stems from is often easy to spot as being a size of your organization assuming you're looking if you aren't looking or if your email client isn't displaying the from email address and only showing the name the email can appear to have arrived from your CEO your president etc the email domains that are used are often Gmail Hotmail

11:19

Yahoo etc that offer free sign up and these domains cannot be blocked on a large scale without blocking the entire domain itself which is not desirable as you likely have stakeholders clients or even personal contacts that use these domains as well I'm blocking that domain would block those messages that you want fortunately the quick fix for this that I've tried to highlight it with these two banners Google's G squeeze Microsoft Office 365

11:54

and others offer the ability to append or prepend messages sent to your domain with a banner based on the sender's email address for example at Zurich we incorporated OneTouch banner to the end of our emails that we receive allowing us to quickly identify when a message isn't from a CEREC or other trusted domain that's the pink example at the bottom on the screen in front of you the yellow banner in the email the top was in an email I received recently where the person that I was emailing had

12:26

a similar set up their organisation let's talk about some safe practices for potentially viewing Beauty emails we're already starting to see a rise of attempts like the examples in on this screen due to the coronavirus work from home flatten the curve effort and vigilance is key to stopping this drug in many cases hackers have found that social engineering like using a throwie email with the display name of your CEO it's faster than creating a virus so here's the same spam email on both my

13:04

Mac at the left and my iPhone on the right both running Outlook claiming to be from the CEO of the Lawson foundation who I obviously email frequently on the Mac left the sender's email is displayed by default but it's not on my phone but to check you can just tap the sender's name fortunately I have my banner indicated at the bottom displayed on both devices as our banner is added to all of my organization incoming emails so I've highlighted a few other

13:34

giveaways on this email that you'll see other giveaways would be the centrum iPhone signature which Marcel does not normally used also the default signature is actually sent from my iphone this example just says sent from my phone minor errors like that can give away an otherwise convincing email and they're good things to watch out for so now that you've received a suspicious email message or even a run within your browser what do you do no oral inhalator

14:12

no or a little interaction with this message is obviously preferred but if you open one of these messages how should you mitigate risk malwarebytes is an application that's free to download on any of your devices and I encourage you to try it out after the webinar ends and a link is provided in our resource slide however Vyse is a lightweight cross-platform application so that's Windows Mac OS and on mobile that can run constantly in the background or as needed if you've followed a suspicious

14:41

message or link and you're worried so we're going to move on to password management here's a comment from a series that I like called xkcd so this trip is highlighting the sort of absurdity of passwords that are easy for computers to guess but also hard for humans to remember so of course many websites do require numbers capitals and special characters but a key phrase like the one that's indicated here and much easier to remember than a word like in the top example with troubadour where

15:17

letters have been replaced by numbers or other characters hopefully that's a fun example of this and we'll just leave it up for a moment so once you've developed a strong key phrase to use what about storing your passwords memorization is great but how do you keep track of dozens of passwords without repeating them that's where lockers like the services LastPass and one-pass can really handy organizations can use these lockers to share login credentials without

15:54

necessarily sharing a password between staff members the password remains obfuscated but is still entered and can be used to log in this allows you to finally get rid of the not very secure sticky note or notebook page with all your scribble down passwords to follow on that one hack you've likely heard of is in recent years is databases being exposed of many major companies you've likely received a spam email and being shocked to see it includes the password that you recognized this is because of service you use like Dropbox Equifax and

16:26

guy who for example was hacked while you had an account with them and your password was exposed if you use that email and password combination elsewhere other services you use are also at risk so again the idea behind these lockers is to create one strong password for the locker which sent vegans recording any existing passwords to your services and can also generate new strong new passwords I'll also note that one password which I've mentioned here is offering a free one-year subscription

16:56

for families or teams of up to five and the link for that is included at the at the end of this so you can even get started with all these programs for free for Wi-Fi and network security at the home there's a few things to cover most households will have home internet but some condos and apartment buildings have shared connection when you are working from a private home internet connection it's still best practice to have a password protected wireless network which most providers will now guide you

17:30

through when you set up if you're in a condo or an apartment with a shared wireless or wired network at the best practice to purchase the VPN subscription to be content that your device is secure you've probably heard a VPN but just to go over what that is it's a virtual private network they give you online privacy and an amenity by creating a private network from a public internet connection VPNs mask your Internet Protocol IP address to your online auctions are virtually untraceable most importantly

18:02

VPN services established secure and encrypted connections to provide greater privacy than even have secured wireless network one thing that I'll know here is that VPNs are typically device specific connecting on your laptop will not secure your smartphone connection and vice versa so that's just one thing to remember now that we're seeing a spike in home internet use and long distance communication on video called and the like all networks and services are being strained by the increasing traffic you

18:38

may have seen that Netflix and YouTube have imposed streaming quality restrictions for example if you're finding your frequent connection issues at home it's worth considering using a wired Ethernet connection to your laptop or your desktop computer and disabling video for your video calls never possible and choosing audio only so we're going to talk about the two major operating systems you are probably staring at one of those operating systems right now whether that's Mac OS or Windows Apple's Mac OS operating

19:14

system typically receives security updates for three years from the release date of each major version and Mac OS receives a new major version every year and it's always a free upgrade which is a good way of encouraging installation Microsoft Windows 10 is the current version of Windows and is receiving regular updates well Microsoft is not adaptive with major Windows versions their support does last far longer windows 7 support ended on January 14th of this year and windows 7 received support for ten years

19:46

that being said if you have any instances of Windows 7 home or even when you're about at the office you should be updated to Windows 10 so that new security patches can be installed following on that will talk about disk encryption on your computer password protecting your computer is a good start both out an encrypted disk most computers are at risk of data that if physical access to the computer is gained obviously this is more of a concern once we're back at the office once we're you know working from a

20:20

co-working space a coffee shop but it's always some worth having this discussion as well many computers including both desktops and laptops can be physically open easily and how the hard driver moves and plays in an enclosure and can have data compromised without logging in with your password whatsoever the solution to that is disk encryption and both major operating systems offer their own built-in just encryption on the Mac that's called File Vault and on Windows that's called BitLocker when I

20:52

previously offered this session at Foundation House I did a demo where I was able to copy a one and a half gigabyte file in about 15 seconds from an unencrypted computer to put that size in context the Documents folder on the computer I'm presenting today from is 11 gigabytes so this could easily be copied during a bathroom break if my computer was unlocked to lock your screen if you're leaving your computer unattended you can do it really quickly on both operating systems with the two keyboard shortcuts that I have listed on Windows

21:22

that's hitting the Windows key and L and on a Mac you hit ctrl command Q to quickly lock the computer to your password screen I'm here but even if your device is encrypted it can still be at risk and replace and replacement is expensive to you and your organization fortunately many pcs offer locking slots and the company Kensington offers solutions for both Windows and Mac computers to lock them if you're not familiar a lock slot is a physical slot on your computer that connects to a cable lock so you can

21:59

tether your computer to your desk or to summer that you're working if you don't have a locking flood or a locking solution a locking file cabinet is always a good way that may be available to quickly and safely store your laptop you so hopefully I'm being rushing things much here but for my last slide I thought that we would talk a bit about the zoom platform because it has been getting a lot of publicity not all of it good in the last few weeks as we've been

22:33

working from home obviously this webinar is being delivered on Zoom what are the privacy implications for these video calls doom does have a history of being fast respond to security flaws and speaking to the second point on the slide they work directly with Apple on the webcam flaw that I described last summer that changed the dangerous code that was involved and modified doom access to the computer's webcam if you're using zoom meetings a simple fix for stopping

23:03

unwanted access to your zoom call is to add a password and a waiting room to your meeting which can be added when you're creating the meeting or edited afterwards if you'd like about extra security it's also important to keep both the zoom app and your operating system security up-to-date by installing the record frame and pouches from doom windows and apple to follow along along with the third point here Jim how is being staying on top of security issues that are being raised by the tech

23:33

community and have recently decided to freeze any new feature releases for the next 90 days and they're instead focusing on trust safety and privacy issues on the Zune platform that being said other audio and video platforms do exist as well of course Google Offers those hangouts and duo whatsapp and facebook Messenger are available from Facebook there's slack apples FaceTime Skype and teams from Microsoft Microsoft and discord is available as

24:04

well so obviously a multitude of options are available for you or for your team so thanks for sitting through this so far and again hopefully I haven't rush anything too much I'm going to start going over your questions in the chat box so if you think of any now feel free to ask them and I'll try to start going through things while I start having a look I'm going to bring up the first of my two resource slides these are some

24:38

tools for helping you identify your excuse me yes you are going to be sent a copy of these slides I just saw question pop up I'm to answer that so the first of these three points on the resource slide helps you identify your organization's domain host which we talked about in the first you slide the second point is talking about adding a banner to your incoming emails you can identify those phishing attempts really you believe these two are for hiding the

25:10

banner to microsoft office 365 account and to Google accounts if your organization is using one on the to the last link on the page is to a neat service called have I beam cone comm this website came about after what was at the time the largest double ever single breach of customer account which happened to Adobe all the data on that website comes from breaches where data was exposed to people that should not have the ability to view it and that may

25:42

actually help you identify if you've received one of those scary messages that included a password of yours it's probably listed on this website along with your email I'm going to leave this resource slide up for now and I'm just going to jump into the chat and start having a look at some other questions so the first question is about saving passwords to the Google Chrome via the browser I'm guessing it's not very safe but it's so convenient I don't know that

26:23

it's entirely unsafe to store your passwords directly to Google Chrome in that scenario those it's it's worth noting that almost always those passwords are also being saved to your Google account you'll probably see that notice when you're you'll probably see that notice that stated into your Google account when you elect to to save them that being said because those are all either saved directly to your computer

26:55

or to your Google account I think a password manager is still a better way of saving those passwords because the password managers are more multi-platform then your Google Account would be so I wouldn't I wouldn't necessarily say don't say passwords to Chrome but I would say if you're considering that I would say if you're considering saving them to Chrome to instead just start using a password manager like one password and again what better time to

27:27

start using one password then now when you can get a one-year subscription to it before I go to any other questions I'll just skip to my second resource slide that includes the one password promotion and some other helpful links for you directly to some of the services that I mentioned the bottom link is the link to the free one-year one password promotion that I mentioned it's a long link so if you just Google one password

27:57

and canva camb a you'll find that and be able to find out doniphon yep just one question about you know the different resources that you're sharing with us today are they free or do we need to subscribe in any way and are the free versions if they exist good enough or do you recommend us actually subscribing and paying for the service that is a good question and not something that I've highlighted here um

28:30

some of these are free some of these are are paid sorry to skip backwards for a second all of the services listed on this resource light are free looking up for your domain domain host is is freely available information adding the banner to your incoming emails is a free thing to do um you don't have to pay Google or Microsoft extra for that and has I been coned is a free online database to access I think I

29:03

mentioned it earlier but just to reiterate malwarebytes does have both free and paid tiers the major distinction between the phrase free and paid here is that the free version of malwarebytes regardless of platform has to be run manually so you as the user have to be remembering to do that the paid version of malwarebytes does have the option to run constantly so that provides some out of security for you

29:34

back plays and other cloud backup products are not free you know a company somewhere has to be paying for four servers to host your data so those are not going to be free that being said a backup option that I actually didn't didn't suggest in my slides but is a another option to do in addition to our cloud backup service is built into your operating system on your Mac that

30:06

service is called Time Machine on Windows the service was called backup and restore again those are built into your operating systems for their free and all they require is an external hard drive to backup - I've used both of those on both of the operating systems I find they both work really well all they basically require is you keeping your external hard drive plugged in or you know plugging it in from time and they will provide an alert if your if your backups out of date but those

30:37

are solutions that I recommend using in addition to a cloud backup software the reason being that in the case of unfortunately you know a catastrophe at home if your computer and your external hard drives are at home and say for example there is a robbery or a fire and those two items are destroyed both your backups are gone and that's why you want to also be using a cloud backup product like backwoods maximal thanks I made you to follow both right yep well know you

31:10

can go ahead I just had a question that I received in private that I wanted to share with you but you can go ahead and let me know when you're ready yeah I'm sorry just going to cover for the the VPN services that I've listed here those are again both paid VPN products with that being said one thing that I will add when we send when we send these slides out to everybody is that the web browser opera which probably some folks are familiar with actually recently

31:40

started adding a built-in VPN service to the browser which is actually really nifty it's not necessarily as full featured as a paid product but it is a really good way where you know right now when we're mostly working from home off of a secure private network and don't need a VPN we don't really need to be paying for a VPN product but once we're at some point more at an abode in the world and you again still don't always need a VPN a free service like the Opera browser might be a really good way of

32:12

using a VPN for free so yeah if you want to go ahead with your question that would be great yes so we did get a question about sharepoint you know a lot of our organizations actually use SharePoint to manage their files and documents and so the question is if data is all on SharePoint do we need to backup SharePoint in in theory no in practice yes the reason so for those for those who aren't familiar SharePoint is a cloud data

32:52

hosting from Microsoft and in some ways is kind of the predecessor of Microsoft onedrive in a lot of ways though it's more powerful than onedrive which is why it's still in a lot of cases heavily used I would say the the only case of data failure for SharePoint would be some kind of catastrophic failure or attack on Microsoft and that is where on

33:23

one of my earlier minimizing risks lies I I talked about this event where keeping local backups of your data is best practice whenever possible for those familiar with it SharePoint is generally pretty heavily accessed through a web browser but there are ways on Windows to to manually backup your your SharePoint data and for one organization that I work with I actually was able to using Microsoft Windows fully download all of their SharePoint

33:53

data and and migrate all of it to onedrive and that organization also uses shockwave so doctors are keeping multiple copies of all their data so hopefully that answers the the SharePoint question yes thank you um I do see another question if I I'll share it with you and you can provide it inside there are two questions they're sort of related and they mention VPNs and so the first one is my

34:26

organization's VPN makes my internet connection and opening any file very slow is there a way around that or do I just have to be patient and the second one is we are all working remotely with VPN sorry last question oh but from VPN but they're thinking of having to Google Docs to more easily share and work on files we can access all files now it's just slower is it safer to remain

34:56

on TBN I have to know a little bit more about your your organization's setup but from the sound of it you're likely using the the VPN to access your organization's more local locally hosted data which is I would say a perfectly viable way of doing it with the cost of a slower connection due to VPN which is one of the drawbacks that you will

35:29

experience while using a VPN product which is to put it very simply because your data is being protected more that added protection is in turn making your connection a little bit slower is the simplest way of thinking about it with that being said I think it is worth considering moving to a to a cloud service like Google Docs but if you were to do that and are using an existing VPN

36:02

product the major thing I would I would say is making sure that two step therapy two factor verification is turned on for for all of your users when they're accessing Google locks to help out a level of security there and unstop any attackers so hopefully that that helps a little bit there because I know that it sounds like a few people have been complaining about the speed of VPNs and it is the big drawback to that to that sure that

36:33

yeah thankfully so there's another question on you know the online meeting platforms webinars such as zoom WebEx goto meeting do you have any recommendations as to which one to choose considering what happens you know the whole story behind zoom lately do you have any preferred method so one of my organizations we've actually started using slack for both audio and video

37:03

calls pretty heavily I they shock is also a very popular office messaging platform and I would say has definitely also usage has been on the rise since we've all been working from home as well so if your organization is not as comfortable using using zoom or is not using zoom at all stock as a platform worth considering you might even already be using fax my

37:37

organization we already were but we weren't really leveraging the audio and video calls which are a big part of it we having more and it's been working great for us not being said if your organization is using Google for business as we discussed throughout the presentation Google Hangouts and Google duo are really good system to be using and if your organization is on Microsoft Office 365 it's worth checking out Skype

38:07

which is also because being around shortages in is multi-platform or Microsoft teams Microsoft has really been pushing really hard lately and adding a lot of futures to so it just it just goes to more what what platform your organization is using for their cloud service on their cloud email hosting but slack Skype and Google Hangouts would be my top suggestions for ultra for alternate platforms the

38:37

drawback - for example like Apple FaceTime is it is Apple only a person on their Mac cannot save time somebody on a Windows PC right thank you so we I have another question here is Google Drive safe all our documents are stored in the cloud and are regularly backed up on a physical hard drive yes that is I love that that is like the ideal use case for for backing up the

39:10

sort of tech community rule of thumb for your data is if you only have one copy of your data you don't have a copy of your data right if if you are working off of your computer exclusively and you have no backup software if your computer crashes data is potentially gone forever or you're looking at potentially thousands of dollars in paying a professional data recovery which is not ideal to go over my resource slide here

39:40

Backblaze is $60 US per year for unlimited backup for one user so that cost you know if you have a large organization may not be feasible but for smaller organizations is really worth that peace of mind of knowing that a cloud provider has a reliable copy of your data and again you want to whenever possible be using that in addition to a cloud thinking service like Google Drive

40:14

but it sounds like from that question which I think I can also see here it sounds like you are both automatically copying our files to to Google Drive on the cloud and manually downloading those choices with the hard drive that's ideal again I love that good work and is that like how do you actually do that you need to do that every time you save a document or her or do you backup on a regular basis on the hard drive you local god they would probably be doing

40:45

that just not like manually on a regular basis especially with Google Drive but I mentioned earlier the desktop applications for for all these products so back up and think from Google is the desktop application that's sort of the the desktop version of Google Drive that software allows you to store your Google Docs files locally on your hard drive and then if you're also using a service like Backblaze you're getting a third

41:17

copy of your data so two different cloud providers have a copy and you're your own local computer as a copy of that if you want to take that another step further if you have a Mac and you're also using time machine you hopefully have four copies of that data and the chances of all four of those copies failing simultaneously are obviously extremely low because they're all being being saved differently yeah so something like that would be an ideal use day yeah I think I have a lot of

41:48

work to do after this webinar um yeah it's a lot of things to think about so another question is about mail merge services someone is asking they used yet another mail merge I'm not familiar with that once or twice and sometime after we noticed some phishing emails were sent using one of our email accounts do you have an insight about the safety of mail merge services I'll be honest my

42:19

knowledge of this is not huge I guess that would be serious I'm definitely not familiar with with that particular product unfortunately but I guess I would be curious about is this product yet another mail merge is it requiring your full email credentials to operate it sounds like it didn't may have been and that could have been being what happened as we were talking about in the in the

42:50

slide about hacking and accessing the database of companies that have been compromised it's also entirely feasible that you use yet another mail merge at some point it all worked fine and then that company was later hacked and their database of customer email and password were exposed and if you also used if that was your your email password then it's totally fusible that somebody got your password that way but I'm just not

43:22

familiar with that particular product to answer definitively I think as a general statement mail merge services are safe to use and just you know get an idea of the product you're using get an idea of what credentials they require for you to use them and just how long the company's being been operating is all good information to have yeah well the the person actually does confirmed that they did ask for the emails to be able to use the service so that that's not necessarily a red flag

43:53

on its own but I definitely could be how how something was leaked right right so we have a colleague here asking for recommendations to back up SharePoint and also should we back be backing up Salesforce data yes in general I know that filters does offer data export tools I don't know that that's a particular part of the platform I

44:24

believe you can just do that through your administrator settings on Salesforce so again that is good data to to have on hand another thing to think about with really any service like this is in a lot of cases it's it's bigger targets that are being better being attacked rather than you know smaller organizations so it's totally conceivable that Salesforce could be attacked on a large scale and there's

44:55

several different attacks forms of that can take and you know if you are then experiencing potentially an extended outage of your of the Salesforce platform an expert of that data is really good to have on hand even if it's just Excel spreadsheets or CSV files so that you can you can have a copy of that that you're potentially working from and even using with a with a different provider having worked with the expert

45:28

feature on Salesforce a little bit in the past I do believe they offer an automation for that so you can set that to be daily weekly or monthly to have download link sent you of your of your Salesforce data just I think I covered it already but the the SharePoint data can be a little more difficult to download but just accessing SharePoint through a browser there are options to to download your data and it's definitely good to even if you're doing

46:00

it manually do that if you're if your organization's still uses SharePoint how heavily are exclusively at least every month if not on a weekly or bi-weekly basis I would say and yes so that ability is built into the SharePoint through the browser Thanks so I have a question actually so a few days ago I was checking the PFC Facebook you know page and I realized that some

46:31

someone had created additional PFC pages and I'm wondering if it's related to the fact that we're now connecting to our Facebook account from with our computers from home is there a way that you know the security was a little bit less robust and so it's a lot for people to create these copies of our picture it is yeah it is feasible and with with most of the ways at least that I'm aware of

47:02

that that Facebook allows page creation now it's almost always tied to an individual space excuse me Facebook account you you cannot necessarily make just a paid a Facebook page for your organization without it being being linked to basically you know Jonathan's personal Facebook account and if my personal Facebook accounts password is password one-two-three-four somebody getting into to my facebook account Ben has access to

47:34

to potentially modify delete or you know otherwise tamper with my organization's Facebook related pages and you know that is really going to those in some cases socially engineered messages or or even recycling passwords between different services you know I could have the strongest password in the world but not be using a password manager and just recycle my password everywhere if I you know have that written on a sticky note

48:10

on the lid of my laptop and you know I walk away from my laptop in a coffee shop somebody can easily copy that down and have access to a lot of stuff that I don't want them to have access to so that's we're starting to use a password manager a password Locker comes in really handy and I'm not even using that password manager to generate new secure passwords for all of your existing platforms it is really crucial all right

48:41

thank you I think we've covered most of the questions were actually all of them at least from my side great and yeah I'm just going to treat them as well so like Steve had a question when you say you're working remotely on VPN are you conducting two organizations that work from home and that accessing your files like that Laury Laury looks like she responded yes to that but a VPN that is definitely one

49:12

use case for VPN but in some cases it is it's not a VPN is not accessing your files on your organization's network but it's it's accessing files securely on your organization's cloud service so VPNs are good for both of that disco is a popular VPN that's typically used for your organization's network the ones here on my resource slide are more general VPNs that are meant for both consumers and for larger organizations

49:46

so hopefully that answers that and then yeah I think that brings us all up to date like you said yes I think we've we haven't received any questions in French so I would encourage that it we still have a couple of let's say three or four minutes and while we are waiting for the boobs I went ahead I'll just go back to my first resources slide just give any folks we're looking at that to clarify

50:19

as well if you're adding those banners to your email you can make the message say whatever you wanted to say you can color code it so it matches your logo they are they are really really nifty visual warnings to be adding but generally you want them in like a brighter color like pink or yellow so that it's really obvious to your staff what they're looking at and that it doesn't blend in with signature box and my kind of thing you okay I think I think they're ready to go and and you make all the changes that

50:55

you've suggested it's a little bit overwhelming I have to say Jonathan because I really realize now that you know what we were taking for granted while working from an office we need to think about right now again and really reinforce the security from our homes so it's a bit of a challenge yeah and I mean like you know as I said at one point of the presentation hopefully this isn't overwhelming but as I also said this is this is not these are not things

51:28

to stop doing necessarily one tour back at the office this is a lot of this is just general best practice and you know I would say if anything just working from home brings it up more but you know using a password manager is handy and in general and I have a lot of folks who who I now have using a password manager of some kind and they just absolutely swear by them now a lot of it is you know sometimes a bit of work to start using some of these products that we've

52:00

been discussing but then once you start using them you you can't imagine not using them which I think goes for a lot of things and just helps your security overall quite a lot yeah the famous learning curve all right yeah so I think we're yeah I think we have we have no more questions any final thoughts Jonathan before we close the webinar no no again thank you for for joining and

52:32

hopefully this would be helpful to everybody I think we pretty much exactly had our time here and as we've said we have the size will be available still have access directly to those to those resource slides and we do have kind of like a worksheet for you to fill out if you want just for yourself out to send us for that both you and potentially the rest of your staff in your organization are all on the same page about what different

53:02

providers you're using what password managers you might be using backup services all that kind of thing God will all be send out and I'll just coordinate that with with PFP great thank you so much Jonathan it was really informative very helpful especially also the all your insight and the resources that are on the decks that we will be sharing in the follow-up email as Jonathan just mentioned in English and French because we have also translated the presentation in French we will also

53:35

be sharing the recording of this session I just wanted to thank you all for participating and wanted to let you know that we do have what we now call webinar Wednesday is every week at 2:00 p.m. so stay tuned for our upcoming webinars you will be getting additional information through our weekly digest or on our website and please do not hesitate to provide us any feedback to continually improve our learning opportunities and

54:06

sessions thank you so much thank you Jonathan bye all right

COVID-19, Cybersecurity & Working from Home #WFH - #PFCwebinar #WebinarWednesday

Table of Contents

More in Lectorium

SMALL BUSINESS

SENIOR PRESCRIPTION COVERAGE

DENTAL COVERAGE

SENIOR VISION COVERAGE