Tag: finance

Today we celebrate 10 years in operation! Thank you to our clients and everyone who has supported the mission since inception.

In May, I earned the CompTIA Security+ certification. Passing the exam validates the baseline skills necessary to perform core cybersecurity functions and pursue an IT security career.

This year the Securities and Exchange Commission is proposing a new rule to require broker-dealers, clearing agencies, Municipal Securities Rulemaking Board, national securities agencies and other associated parties to address cybersecurity risks through policies and procedures, notification of a significant incident reporting detailed information to the Commission when applicable, and public disclosures that would improve transparency with respect to cybersecurity risks and significant cybersecurity incidents. Comment period ends 6/5/23. *See the FederalRegister.gov

In 2021, for the first time the Department of Labor Employee Benefits Security Administration issued cybersecurity guidance for plan sponsors and fiduciaries regulated by the Employer Retirement Income Security Act of 1974 (ERISA).

An information security policy may be a high goal for the solo entrepreneur but it is clear maintaining sound business practices now includes securing your online activity.

CyberSecurity Tips for Entrepreneurs

1. Create a password policy
   • Use strong passwords
     • Change your passwords periodically – including email
     • Don’t use the same password twice
     • Never share passwords of any sort
2. Use antivirus/malware software
3. Patch your operating systems and applications in a timely manner
4. Harden your browser security settings – Cybersecurity Infrastructure Security Agency – Securing Your Web Browser
5. Learn to recognize phishing
   • “The IRS doesn’t initiate contact with taxpayers by email, text messages or social media channels to request personal or financial information. This includes requests for PIN numbers, passwords or similar access information for credit cards, banks or other financial accounts.” irs.gov
6. Use a secure file sharing service
7. Sign and/or encrypt e-mail
8. Adjust your servers email filter sensitivity
9. Block unwanted senders of email and STOP unwanted SMS
10. Backup and encrypt files and drives periodically

Resources

Department of Labor Employee Benefits Security Administration, Cybersecurity Guidance

Federal Register, Securities and Exchange Commission Proposed Cybersecurity Risk Management Rule

Federal Trade Commission Do Not Call list

Federal Trade Commission Cyber Insurance Tips

Cybersecurity Risks and Privacy Rules Add Pressure on Boards, WSJ

P.S. For those who may be interested in attaining an entry level position in cybersecurity, professionals are in high demand. (ISC)² is offering their Certified in Cybersecurity certification free through their One Million Certified in Cybersecurity initiative. Become a Candidate today.