Tuesday, July 31, 2012

Targeted Cyber Attacks Against Small Biz: Chat Recap

Targeted Cyber Attacks Against Small Biz: Chat Recap

Link to Small Business News, Tips, Advice - Small Business Trends

Targeted Cyber Attacks Against Small Biz: Chat Recap

Posted: 30 Jul 2012 02:00 PM PDT

Last week on July 19th we held a Twitter chat — and achieved a “personal best” for the Small Business Trends community.  Our #SMBchat made it as the top trending topic on Twitter.  And we’ve got the screenshot to prove it!  Thanks to all who participated and made it a huge success.

#SMBchat a Top Twitter Trending Topic

The topic was “Targeted Cyber Attacks, No Longer a Big Biz Problem” and we were fortunate to have two world-class security experts from Symantec join us:

Many thanks to Symantec for making the experts available and for sponsoring this chat!

As usual, we bring you a sampling of some of the interesting and insightful tweets.  Yours truly, Anita Campbell (@Smallbiztrends) was asking the questions of our expert guests and the community:

Q1: How likely is it that a small business will face a malicious cyber attack?

  • 36% of all cyber attacks target small businesses. Poll by @Symantec PDF here: http://t.co/hAhGY1xg  - @TJMcCue
  •  50% of SMBs think they're not a target for cyber attackers, but 73% have been victims of cyber attacks: http://t.co/Vr5Ym3uU  - @SymantecSMB
  • Can it be 100% likely? Isn’t it already happening?  - @DIYMarketers
  • Extremely likely. Just looking at WordPress-based sites, 78% sites old versions. All things insecure out of the box insecure.  - @dynamicnet
  • I’ve had to alert 3 clients that their Websites were hacked. They didn’t know because it’s not their homepage! – @PeggyDuncan
  • Symantec blocked more than 5.5 billion attacks in 2011, an increase of 81 percent over the previous year – @SymantecSMB

Q2: What are the most common types of malicious cyber attacks that small businesses face?

  • Interesting things happening with targeted attacks. They're becoming everyone's problem, not just govs. & enterprises – @SymantecSMB
  • My email account was hacked and I might need to stop using it because I can’t get it fixed…. – @BasicBlogTips
  • Malware comes attached in spam. But Web-based attacks, drive-by downloads: http:/bit.ly/LwyWTV are very prevalent. - @KPHaley
  • Increased data usage means everyone is challenged to apply secure processes. Threats to bigbiz = threats to smallbiz  - @ZimanaAnalytics
  • Once you get hacked, spammers use your site as the staging ground for their spam efforts. – @robert_brady

Q3: If small businesses use Macs, instead of PCs, do they need to worry about cyber attacks and malware? Why or why not?

  • SMBs using Macs must take steps to protect info: http:/bit.ly/Q2MyIc  - @KPHaley
  • I have Mac and I am not very worried after I checked if I had the Flashback malware. But I will look out for a good protection. – @Lyceum
  • Mac users as well as PC users are both targets. Just this year alone, Mac has been heavily targeted by malware and virus – @dynamicnet
  • Virtualization software for running Windows on a Mac can be just as vulnerable as a PC  - @ZimanaAnalytics
  • From a security standpoint treat your Mac like a PC, protect it.  - @KPHaley
  • Shortened links make it tough to know where you’re going to land. Malware authors love that too. - @KPHaley

Q4: What are the top steps SMBs can take to stay safe from Internet-based threats?

  • Deploy reliable security solution on both Windows and Mac endpoints. Keep security software & OS updated with latest patches. – @SymantecSMB
  • I like 7 Tips for Protecting SMB's Information: http:/bit.ly/Q2MyIc Nice overview. - @KPHaley
  • Keep site applications up to date. Use secure, unique per application passwords – http://t.co/NzZYDJpv might help. – @dynamicnet
  • Make sure you back up your website AND your computer network – to more than one device or service. – @HowardLewinter
  • Educate employees about Internet safety, train to be wary of email attachments, links from unknown sources – @SymantecSMB
  • Bad guys [are] like roaches, they run when light shined on them. Lists get out of date quickly. – @KPHaley

Q5: What is a "Comprehensive Security Plan" and how does a small biz create one?

  • SMBs first need to know what they need to protect. It's important to understand your risk and assess your security gaps – @KPHaley
  • Your security plan should include password polices, endpoint protection, secure email and Web assets, encryption and backup. - @KPHaley
  • Plan should include how when (since nothing is hacker proof) hacks, malware, etc. get in, then what (time, money)? – @dynamicnet
  • If the bad person knows you use just one centralized system.. you now made their life so much easier. Layers matter.  - @dynamicnet
  • #SMBChat is happening right now on SMB security, worth following the conversation. – @Bislr

Q6: What if despite prevention efforts, your business gets hit with a malware attack. What steps should you take to recover?

  • Encourage employees to come forward immediately if they spot a virus or malware, rather than try to resolve it themselves. – @SymantecSMB
  • Hopefully you have been maintaining a proper backup. Then you can roll back to previous. – @robert_brady
  • Assess the damage. Determine reporting requirements. Report as applicable. Recover, Debrief for what needs to improve. – @dynamicnet
  • @robert_brady Great point about backup! If infected roll back to last known good backup. – @SymantecSMB
  • 61 percent don't even have a written plan, according to @Symantec – so, do that first to have a security process.  - @TJMcCue
  • In the same thought, 1 in 10 SMBS have suffered from a data hack http://www.darkreading.com/smb-security/167901073/security/news/240003962/one-in-10-smes-have-suffered-from-a-data-hack.html  – @port80software

Q7: Passwords are a problem, especially as cloud apps grow all requiring passwords. What are some best practices?

  • Strong passwords have 8 characters or more and use combination of letters, numbers & symbols. – @KPHaley
  • People like to use the same password to access personal & business resources. Do NOT re-use passwords. - @KPHaley
  • Passwords should be unique per application. http://t.co/NzZYDJpv might help for how to create passwords. - @dynamicnet
  • Bad guys love re-used passwords. - @KPHaley
  • We require auto password changes every 90 days. Employees cannot share password info – @BasicBlogTips
  • At BARE minimum, have strong email & banking passwords different from each other & social media passwords – @CathyWebSavvyPR

Q8: If you don't have internal IT or have limited staff, how do you get help for your biz?

  • Cloud-managed security is a great option for SMBs with limited IT staff. Learn about Symantec's SMB: http://bit.ly/NfVHN9 – @SymantecSMB
  • Most infections can be prevented by adhering to organizational policy and exercising caution, so employee training is critical. – @SymantecSMB
  • Small biz with no it can often get help from chamber of commerce, fellow small biz, why even twitter. However, confirm facts. - @dynamicnet
  • Cloud-managed security is great option 4 SMBs w limited IT staff.  - @DIYMarketers
  • Make sure you’re working with an expert BEFORE you have a problem – not just cyber issues but anything that’s important 2 biz. – @HowardLewinter
Wrap up:
  • Great to see #SMBChat trending  - @michaelsharkey
  • Thanks for the #SMBchat security discussion - @NoahJS
  • We enjoyed reading all the commentary during the #SMBChat It’s great to see people connecting and discussing  - @BusinessDotCom
  • Tip: If you liked what someone said on a chat, follow them, connect later this week; cld be yr next client or biz partner!  - @CathyWebSavvyPR

See also the recap on the Symantec blog.

Note:  to make the recap easier to read, tweets above have been edited to remove redundant information, such as hashtags and answer numbers, and fix obvious misspellings.  The above represents only a small portion of the tweets — it is intended to cover key highlights for reader convenience.

From Small Business Trends

Targeted Cyber Attacks Against Small Biz: Chat Recap

Speak My Language: Getting Customers to Listen

Posted: 30 Jul 2012 11:00 AM PDT

How do you get and keep the attention of people who do not have to listen to you? I mean, life and marketing is not like grade school and your audience doesn't have to be in the room so to speak. From tutoring teenagers in voluntary summer programs to building a following online or a loyal client base, the process of communication is fascinating to me.

capture attention

How do you captivate an audience enough to get them to listen to you and buy from you?

Kristen Zhivago at RevenueJournal has a simple take on it. In ‘Why Do They Love You,” she suggests that you "have someone you trust to interview your customers." Isn't it funny how simple solutions keep rising to the surface.

So What Is The Right Way To Say It?

How many times have you run around in circles with your marketing copy, new product development ideas, and other processes inside your small business, trying to find the "right" way to do things? Who wants to put energy into things that your staff won't use and that you clients won't buy?

What if you could speak their language? What if you knew the magic words? What if you knew how to talk to potential clients?

According to Zhivago, author of Roadmap to Revenue, you learn how to talk to future clients by interviewing and listening to your current ones. The goal is to learn from successful relationships and then repeat that behavior. There is nothing like a well-placed conversation and honest feedback.

It’s Hard To Serve People You Don’t Understand 

It's even harder to understand people that you don't listen to.  Feedback gets you beyond guessing and assuming, it gets you to a place of knowing.  The more you know, the better decisions you can make.

Personally, when it comes to public speaking and training, I learned that it's not my clever acronyms, credentials or catch phrases (though they do help start a conversation) that gets and keeps my audiences' attention. In their own words it's the personal stories, authentic enthusiasm and simple and clear way of breaking things down that keeps them listening.

Before I talked to them, I assumed it was something else.

What assumptions have you made about your customers and what actions are you taking to verify your hunch?

Capturing Attention Photo via Shutterstock

From Small Business Trends

Speak My Language: Getting Customers to Listen

Xero Makes Changes to Improve Cloud-Based Accounting Software

Posted: 30 Jul 2012 08:00 AM PDT

Online accounting software company Xero has made some changes in the past few months to better help business owners manage their finances. These changes aim to improve the company's online accounting services so that small business owners can spend less time managing their finances and more time growing their business.

xero

Earlier this month, Xero integrated with ADP's online payroll platform, allowing the more than 150,000 small business owners who use RUN Powered by ADP to easily and securely transfer financial data between ADP's payroll solution and Xero's cloud-based software.

RUN Powered by ADP is a popular tool that offers improved compliance tools for payroll, tax administration and employee management. This change aims to allow both business owners and accounting professionals to manage payroll and other HR tasks more efficiently.

Xero also recently acquired WorkflowMax, a full-practice management suite that has allowed Xero to strengthen its cloud-based offerings. Since many businesses and accountants have begun switching over to online financial management systems, Xero wanted to make it easier for accounting professionals to not only manage their clients and finances, but also to deal with all of their other business functions within the same software.

WorkflowMax helps those businesses with important management functions such as tracking time, filtering job leads, generating reports, and creating invoices. With all of the added functions offered by WorkflowMax, accounting professionals can cut back on using different services for each management task, and just use one cloud-based service to run their business while easily collaborating with clients and colleagues.

Founded in 2006, Xero aims to help both business owners who want direct, real-time access to their finances, as well as accounting professionals who serve business clients. With software for everything from invoicing to online accounting, plus a wide range of available add-ons, Xero claims to be the world's easiest accounting software, and also to have everything business owners need to run a business.

Pricing for monthly plans ranges from $19 to $39 with different features for small businesses with different accounting needs.

To learn more about Xero, visit Xero.

From Small Business Trends

Xero Makes Changes to Improve Cloud-Based Accounting Software

Chick-Fil-A Comments Put Brand in Jeopardy

Posted: 30 Jul 2012 02:30 AM PDT

Chick-Fil-A president Dan Cathy has discovered what some business owners already know, that what you say and do may have an impact on your brand not only in positive but also in negative ways. Cathy’s recent comments on gay marriage have landed his business in the middle of a contentious debate. The situation can be a cautionary tale for other business owners contemplating stands on controversial issues:

A Poor Choice of Words

Playing chicken with public opinion. Cathy’s comments about supporting the “biblical definition of the family unit” have angered gay rights activists, some customers, some political leaders and, yes, even the Muppets. Of course, business owners, like everyone else, have the right to free speech, but exercising this freedom may affect your business. CBS News

Having your waffle fries and eating them too. After Cathy’s remarks to a religious news site and over the radio angered customers and political leaders, some of whom are now threatening to block the company’s expansion plans, Chick-Fil-A is trying to disengage from the debate. But the question is whether or not it’s too late. The Los Angeles Times

The Seeds of Discontent

Brand runs afoul with customers too. Lest anyone think activists, political leaders, and business partners were the only ones offended by Cathy’s remarks, a marketing research company says the Chick-Fil-A brand has taken a hit with American consumers too, since Cathy’s remarks became public. YouGov

Trouble in the hen house. What’s worse, the Chick-Fil-A controversy has even encouraged a bit of brand co-opting. Witness YouTube chef and comedian Hilah Johnson’s creation, the Chick-Fil-Gay, a do-it-yourself home version of the chicken franchise’s popular sandwich, made for home consumption to show opposition against the company’s stand. The Stir

The Eye of the Storm

Chick-Fil-A appreciation day. Meanwhile, not everyone is on Cathy’s back, and some leaders are even urging support for the values he espoused during two controversial interviews that have angered some and energized others to defend the company. Former U.S. Presidential candidate Mike Huckabee is advocating support for Cathy’s remarks and his business in a nationwide show of solidarity Wednesday. Facebook

Don’t mix business with religion. Of course, franchise expert Joel Libava points out in a recent post that the Chick-Fil-A president’s real mistake was not simply espousing a politically incorrect opinion. It’s that he made the mistake of mixing business with religion. Some say it’s unwise to discuss politics or religion with others. Maybe business owners should take the hint, too. The Franchise King

Amazon chief wades into debate. While controversy over Chick-Fil-A’s stand on gay marriage still rages, another business leader, Jeff Bezos, CEO at Amazon, has donated $2.5 million in support of a same-sex marriage referendum in Washington state. Some will question whether his stand also invites criticism from those on the other side of the debate. The Washington Post

From Small Business Trends

Chick-Fil-A Comments Put Brand in Jeopardy

Small Business Ain’t Employing Like it Used to

Posted: 30 Jul 2012 02:06 AM PDT

It's paradoxical.

While everyone from politicians to the media extol the value of small business to job creation, its share of U.S. employment has been on a long-term decline.

The majority of the private sector labor force now works in big companies, with that fraction at 51 percent in 2009, up from 43 percent in 1946. The share in medium-sized businesses is down slightly from 34 to 31 percent, while the fraction in the smallest businesses – those with less than 20 employees – has declined from 23 percent to 18 percent.

These employment changes result from a subtle, but long-term trend toward more big businesses. While big companies have never been a large fraction of U.S. businesses, and almost certainly never will, they make up a bigger fraction of companies than they did back at the end of World War II. Data from the Census Bureau and the Bureau of Economic Analysis reveals that in 2009, companies with more than 500 employees accounted for 0.3 percent of U.S. companies. Back in 1946, that fraction stood at 0.2 percent.

The growth in big businesses comes at the expense of small companies. Businesses with fewer than 20 workers made up 94.4 percent of U.S. firms back in 1946. In 2009, that share was down to 89.7 percent.

Small business won't disappear as a major source of employment for Americans. Small scale operations are effective in too many industries for that to ever happen. But, at the same time, I doubt we will ever return to the days when small business accounted for a clear majority of private sector employment.

From Small Business Trends

Small Business Ain’t Employing Like it Used to

Monday, July 30, 2012

Staying The Same Costs Too Much

Staying The Same Costs Too Much

Link to Small Business News, Tips, Advice - Small Business Trends

Staying The Same Costs Too Much

Posted: 29 Jul 2012 01:00 PM PDT

The thing about owning a small business is that you get to choose:  1.) how it functions 2.) how it runs 3.) what it looks like and feels like and 4.) who it serves.

change for the better

The choice is yours.

Of course, the details of your business could be so overwhelming that you forget that you actually did have a choice in the beginning because you're so busy doing.  You forgot that in the beginning, you decided how to market (or not market) your business, how to train your team, the way to manage and track your money. You chose, right down to choosing not to choose.

I've done that before and ended up with some kind of make-shift, knee-jerk version of a system. It's the kind of situation that can overwhelm you and drown your team.

Sometimes, it's scary to change, to innovate the way you do things. Because we tend to cling to the familiar, even when it's not all that comfortable. It's like doing your company finances on a yellow note pad, because it's familiar.  When your 10 year old business would be better served by a simple accounting database. But that means you, and your team has to learn something new — and that takes effort.

If you're willing to dive in, then innovation can show up in the simplest changes — they just have to be consistent and relevant.

Here's my question: When does it cost you too much to stay the same?

  1. When the way you consistently do things doesn't improve your bottom line or build you a better team, then it's time for a change — or at least an evaluation.
  2. When your competition can do what you do in half the time, then you need to innovate.
  3. When there's no room for down time — no vacations — not even a good lunch, then it's time for a change.

For a business to be successful for the long term, it has to be sustainable. And to build something sustainable takes effort. You have to dig up the soil and develop the strategy to support the change. You have to build, and then support the team that will help you make that change.

Change Photo via Shutterstock

From Small Business Trends

Staying The Same Costs Too Much

U.S. Government Wants Input on Burdensome Regulations

Posted: 29 Jul 2012 11:00 AM PDT

As business owners, oftentimes rules and regulations from the government can put an unwanted burden on day-to-day tasks as well as the big picture. But now business owners have the opportunity to make their concerns known to U.S. Federal government officials.

government podium

The White House is asking for input from business owners about burdensome regulations that negatively impact their businesses so that they can make necessary changes to help businesses succeed in the current economy.

Last year, President Obama ordered that all current rules and regulations be reviewed, so it can be determined which rules are working and which ones are not. As part of this continuing effort to better understand the needs of business owners and entrepreneurs, the White House is now asking for business owners to speak up about which regulations are doing more harm than good. Then the White House plans to streamline or eliminate those overly burdensome, ineffective, or outdated rules.

To achieve this task, the White House has set up a website where business owners and other individuals who may be burdened by government regulations can easily submit their comments and ideas about how to improve the system so that businesses can more easily succeed. The White House is looking for ideas from all different types of companies, from small businesses or entrepreneurs to large corporations.

Government agencies have already been working toward cutting these types of regulations, but Administrator of the Office of Information and Regulatory Affairs, Cass Sunstein, said that those who work for the government can only go so far in deciding which regulations can and should be cut, and that is why public comments will be so crucial for the next step in the process. The White House has stated that all comments submitted will be carefully read and many will be acted on.

Submit your comments about burdensome regulations to the White House.

Podium Photo via Shutterstock

From Small Business Trends

U.S. Government Wants Input on Burdensome Regulations

Judgment Calls: Analytics’ Cousin for Business Intelligence Success

Posted: 29 Jul 2012 05:00 AM PDT

Judgment CallsOver the past few years business strategy has been revolutionized by the use of analytics and business intelligence. So it is understandable that successful decision making would receive an equivalent reset.

Thankfully, one of the first books to examine strategy execution in a post-analytic world comes from a leader in business intelligence.  Judgment Calls: 12 Stories of Big Decisions and The Teams That Got Them Right, by Thomas Davenport and Brook Manville, examines the businesses that are developing smarter cultures that lead to business success.

Davenport, a leading Babson College IT  and business intelligence professor, co-authored a number of books on analytics, including one I reviewed for SBT, Analytics at Work. I requested a Judgment Calls review copy from Harvard Business Review when I heard about his latest effort.  Its 12 cases implies an analytic address to the most limiting qualities that occur with decision management.

Learning From the Collective Now Means Profits Instead of Geekiness

The authors' approach in Judgment Calls reveals decision making from a process and systematic view, called organizational judgment:

"The collective capacity to make good calls and wise moves when the need for them exceed that of any single leader's direct control."

Davenport and Manville note that four trends  that will define good judgment making have emerged:

  • The recognition that none of us is as smart as all of us.
  • Tapping not only the wisdom of the crowd but the leadership of the crowd.
  • The use of analytics to support and sometimes actually make decisions.
  • Information technology is an enabler of the first three aspects.

The phrasing of the second concept fascinated me, because it captured the sentiment of  current online human behavior.   Success with content marketing, for example, is based on leadership the crowd places on the source.  The more social shares of a blogpost or a pic imply a crowd's conference of trust on a piece of material, that the author shows wisdom in what they produce.

Judgment Calls examines 12 cases from organizations probably more diverse than the data they collectively analyze.   The organizations run the gamut from NASA, health care, and education.  The cases are grouped into 4 segments.

Most likely, the case most relatable to a small business owner  is the last one, a focus on a decision facing 1990′s beauty products start up, Tweezerman.  The example showed that:

"There is an unusual power in people with complimentary skills working together for a common performance objective."

Although large in size, organizations featured, such as Charlotte-Mecklenburg Schools, still provide useful examples to small businesses.  They display that degree analytics and business intelligence has grown such that judgment capabilities can be examined to understand high-performing organizations.

The analysis reminds that personal calls, even from experience leaders,  can be rightfully questioned:

"How can we make sure those calls are made well?  Is it enough to choose smart leaders who seem to have people's interest at heart, and trust their wisdom?  Human judgment is frail and fettered, no matter which humans the judgment comes from."

Some Leaders Challenge Data But For The Wrong Reasons

Given the above quote, I appreciated the authors' note that the world has not changed for many business execs. Many are resistant to data that says to keep learning from collective sources.  The authors share at the beginning how, despite notable advancement from analytics:

"…insecure senior execs are simply reminding themselves and insisting that only their judgment and decisions count. On social technologies, instead of figuring out how they can facilitate collaboration and group judgment, many firms still ban their usage altogether. One survey of chief information officers found that 54 percent ban all social media use at work (though it's likely that many of their employees find a way to access Facebook anyway)."

Judgment Calls makes a strong effort to raise decision making into less of an individual basis and more of a cultural practice within a team.  It makes a solid follow up to analytic books such as Jim Sterne's Social Media Metrics, Performance Marketing with Google Analytics, and of course, one of Davenport's earlier books Analytics at Work.

The authors note that businesses seeing results are:

"Consulting more people…adopting some form of collective leadership."

It's an understandable offshoot from the increase in analytics and business intelligence.  While the material in Judgment Calls focuses on large enterprises, small business readers should take note of the examples to learn how their experiences can be better handled.  After reading it, any reader’s decision making prowess will be improved.

From Small Business Trends

Judgment Calls: Analytics’ Cousin for Business Intelligence Success