Cyber Monday is no more – in an uncertain economy, post-Thanksgiving online holiday shopping has increased since coined in 2005 and now lasts for one month with more than 50% of all online spending taking place during working hours¹.  What does this mean for your business?  A large decrease in employee productivity, a boost in bandwidth consumption, and one of the most popular times for cybercriminals to attack your secure data.

Lost productivity can mean big bucks for your company, reducing employee output to a mere 60%².  A survey by CareerBuilder states that more than half of the 4,000 respondents polled intend on shopping online while at work with one third of those planning for more than one hour each day, in addition to the two typical hours daily already reported by respondents (time excludes lunch hour and scheduled breaks).  If you do not have a Web-use policy or Internet Acceptable Use Policy (AUP) in place, one is necessary to help report, monitor, and prevent employee Internet abuse in addition to protecting your company from legal liability.

Downloading malware is another risk as employees use the Internet for personal reasons. Spyware and malicious code are big threats to company networks as they can consume bandwidth and compromise security.  Recent studies show that company networks are being infected with spyware and malicious code most often through employees surfing the Web; with the holidays increasing that risk, these threats make it imperative for companies to enforce an AUP to protect their networks. Wavecrest Computing suggests that companies monitor and/or filter employee Web use in order to better protect themselves from security threats. In addition to the inherent risks associated with hacking your online security – loss of company reputation, destruction of company data, and the downtime employees face while systems are restored – the costs to mitigate attacks are extraordinary and rising each year.  This year, U.S. companies are expected to spend more than triple the costs spent in 2006³.

To ensure these threats do not happen to your company this holiday season, run through our checklist and remember to check it twice!

• Install all applicable system and program updates to avoid malware from infiltrating any system frailty that could have easily been patched with an update.
• Create a Web usage policy and clearly communicate it to your employees.
• Be cautious prior to clicking on links to different websites particularly those found on social networking sites as they’re often a hotspot for malware.
• Avoid the use of pirated / illegal software as many contain malware.
• Never open email attachments from unknown senders and make sure to scan attachments you do decide to download.
• Make steps to consistently back up your computer in the case that malware wipes your hard drive clean.
• Monitor servers and security devices 24x7x365 for security issues and require preventative actions be taken on security threats in real time – this is where we come in!

CyBlock can be set up to block Web access by categories and by hour so employees can access shopping sites on their lunch break or after hours. This approach can help sustain morale while minimizing the risks associated with online shopping.  With Cyfin, you can monitor employees’ Web use to ensure that Web-use policies are followed or that unwanted spyware or malware is not downloaded as a result.  Let us guide you to a safer, more reliable, robust security solution with exceptional support at an unbeatable price!

Sources:

¹http://blog.comscore.com/2011/11/cyber_monday_work_computers.html

² http://www.wavecrest.net/editorial/costsavings.html

³http://money.cnn.com/galleries/2011/technology/1107/gallery.cyber_security_costs/index.html?iid=EL

According to Hitwise research, Facebook recently passed Google as the top US site visited .  Traffic to both Facebook and Google make up a little over 14% of US website visits.

In your CyBlock or Cyfin product, Facebook is located in the Social Networking category, and you will find Google in the Search Engines category.  If you ever want to monitor these sites more closely, or any other sites for that matter, you can always place them in a custom category.

For more information on social networking in the workplace, read our white paper, “Social Networking or Social Not-Working?”. This white paper will help you determine if you need to block social networking at your workplace.

USA Today reported today that “several top Security and Exchange Commission staffers surfed porn sites as economy teetered.”  While many of us like to think that “everyone” knows it’s inappropriate to surf porn at work using the office computer, time and time again stories like these still pop up.  While whether or not to allow social networking in the office and how to control the use of these sites seems to be the big surfing topic today, apparently we still cannot forget about pornography.  Pornography poses several risks to businesses and government agencies. These include productivity losses, security issues and legal liability.  No matter how strict or lenient your acceptable use policy is, one thing is clear.  Communicating your Web-use policy and regularly monitoring employees’ Web use is important.  You want to stop the problem before it starts or turns into an employee spending “up to eight hours a day looking at and downloading pornography.”

Source: http://content.usatoday.com/communities/ondeadline/post/2010/04/ig-report-several-top-sec-staffers-surfed-porn-sites-as-economy-teetered/1

It’s baaaacccccckkkkkk! Happens every year. March Madness, that is. Everybody loves it. (Well, almost everybody.)

The excitement! The fun! The astounding fast breaks, slam dunks and three-pointers! And oh yes, watching it all unfold on your office computer.

Who could not like it? Well, for openers, the overworked folks who have to worry about workforce productivity, bandwidth costs, security issues and legal risks.

Here’s just one of many worrisome predictions, “FIRST WEEK OF TOURNEY COULD COST $1.8 BILLION.” It comes from the Challenger March Madness Report. The report also states, “The men’s college basketball tournament, better known as March Madness, marks the arrival of several other annual rituals: employee-organized office pools, a potential dip in productivity and a marked decline in Internet speed, as workers soak up bandwidth watching live streaming broadcasts of the tournament games during office hours.”

Not exactly good news for businesses and government agencies during this time of troublesome economic conditions and serious budget worries.

Maybe it’s time to revisit your AUP and rebrief your workers on the negative impact their fun could have on the organization and ultimately on their own job security. And if your organization doesn’t already have a robust Internet usage management solution in place, it may just be time to look into it seriously.

Wavecrest’s Control List includes CBSSports.com and NCAA.com under the Sports category, and for those using Cyfin, access to these sites will be monitored under Sports. If you want to only block and/or monitor the live video, you can create a custom category to block and/or monitor www.ncaasports.com/mmod/player.

It depends on what your organization considers “acceptable.” Research shows that the average person spends around one hour per day on non-work related internet surfing.   It also shows that the majority of viruses enter via Internet surfing.

Wavecrest’s Cyfin and CyBlock products are configurable to fit your organization’s acceptable use policy. You can set acceptability ratings and visit thresholds to each category.  To set acceptability ratings, go to the Advanced Settings – Category Settings – Classification screen in your product.

With CyBlock you can select to “block” or “allow” each category and configure blocking by hour on the Advanced Settings – Filter Settings – Block Web Categories screen.  You can also configure real-time filtering with our deep packet analysis for content types and file extensions on the Advanced Settings – Filter Settings – Block Web Content screen in your CyBlock product.

Read more about personal surfing in the workplace on Business Blogs.

A recent report by Manpower found that very few companies have policies regarding social networking use.  In fact, only 29% of US companies have a formal social networking policy in place.  Social networks are not only time wasters, but they can pose serious security risks or damage a company’s reputation if employees post confidential or harmful material about the company.  No matter what an employer’s stance is on social networking use in the workplace, it is highly recommended to have a policy in place and educate employees on that policy. Joseph P. Paranac, a shareholder in LeClairRyan’s Labor and Employment Group has offered Web-use policy suggestions on what companies should include.

If you’re unsure whether or not you want to block social networking, we have also written a paper that addresses the issues surrounding social networking use in the workplace, the importance of creating a policy, and monitoring or filtering employee’s Web use according to that policy.

White Paper: Social Networking or Social Not-working?

Source: http://www.emarketer.com/Article.aspx?R=1007493

There has been a lot of buzz surrounding the use of social networks, i.e., Facebook, Twitter, LinkedIn, etc.,  in the workplace recently.  This is a great reminder to all organizations to take a look at their current Web-use policies and update them.

Reuters covered a recent seminar put on by LeClairRyanon covering “Key Issues in Labor & Employment Law,” where the importance of a policy for social networks was discussed.  The speaker, Joseph P. Paranac, a shareholder in LeClairRyan’s Labor and Employment Group, stated, “Inappropriate and unwise use of online social networking sites like Facebook and Twitter is a growing source of liability risk for employers, including discrimination, defamation and retaliation claims.”

He went on to offer some Web-use policy suggestions for employers.

“In order to have a successful policy on the use of social networking sites, Paranac told the audience, employers should stipulate that:

• Employees may not comment or use any confidential information about the employer or discuss internal matters.
• Use of online social networks should be limited to non-working hours, unless the use is for legitimate business purposes.
• Employees’ comments should not be discriminatory or harassing.
• Similarly, they should not be disparaging or defamatory to the employer’s business.

The veteran attorney also offered the following elements of a successful Internet and e-mail policy:

• Employees should be trained on electronic communications equipment parameters and prohibitions.
• All business systems and company-issued electronic communication equipment and data belong to the employer.
• Systems and equipment must be used for appropriate and lawful business purposes only.
• Employee use is subject to review/monitoring by the employer and employees who use employer equipment have no expectation of privacy.
• Use of systems and equipment for harassment, discrimination, or defamation is strictly prohibited.
• Disclosure of employer confidential information is strictly prohibited.
• Warn employees of the penalties or policy violations.
• Obtain a signed acknowledgment of employee receipt of policy.
• Include a procedure for reporting violations.
• Enforce the policy!”

Read the full article: TWEET: ‘I’m About to Testify in My Defamation Case!’

It’s that time of year again! The big Christmas shopping spree. As in previous years, the online version ‘officially’ starts on Cyber Monday – the day after the big T-Day weekend. And now this year we’ve got Green Monday (December 7) and Brown Monday (December 14). These are days on which, like Cyber Monday, online retailers put on a full court press to draw in ‘surfer-shoppers.’

And the whole circus runs through New Year’s Day.

The volume can be huge and problematical for employers. A survey conducted for ISACA, an association of 86,000 information technology professionals, states in part:

“Employees plan to spend nearly two full working days (14.4 hours) on average shopping online from a work computer this holiday season. One in 10 plans to spend more than 30 hours shopping online at work. Convenience (34%) and boredom (23%) are the biggest motivators.”

“… the second annual “Shopping on the Job: Online Holiday Shopping and Workplace Internet Safety” survey found that half of those surveyed plan to holiday shop online using a work computer.

“Dangers of shopping online include viruses, spam and phishing attacks that invade the workplace, resulting in financial losses due to reduced productivity and destruction or compromise of corporate data.”

In addition to generating network security and performance issues, online holiday shopping is a huge productivity waster for businesses. When workers are shopping, they’re not ‘minding the store.’ Accordingly, this is a good time for all types of organizations to take stock of their Web-use management practices and seek help if needed.

Wavecrest Computing is ready to provide that help.

Wavecrest’s Cyfin and CyBlock products and services help all types of organizations manage and control inappropriate and risky personal surfing of all kinds, including shopping. Cyfin and CyBlock products do this by monitoring and/or filtering employees’ Web use and reporting on the activity by content categories, e.g., shopping, sports, games, and others. Of particular note, with regard to holiday shopping, CyBlock products can be set up to block Web access by categories and by hour so employees can access shopping sites on their lunch break or after hours. This approach can help sustain morale while minimizing the risks associated with online shopping.

For 13 years, Wavecrest Computing has been providing Internet filtering and monitoring solutions to business, government, and educational organizations worldwide.  Wavecrest’s customer base includes well-known names such as the HP, Procter and Gamble, Burlington Northern Santa Fe Railway, Bridgestone, Mazda and many others.

According to Nielsen’s “VideoCensus,” online video viewing is up this year compared to last.  Total video streaming was up 31.4%, and viewers spent an average of about 3.5 hours watching online video in July.  This is an increase of 42.2% from 2008.  The most popular video Web site was YouTube with over 7 billion streams in July 2009. A simple 5 minute video on YouTube uses 12,500 kilobytes in bandwidth.

Online video viewing often happens in the workplace where users have access to a faster Internet connection.  This can cause network slowdowns or latency in the workplace if abused.

The below Cyfin and CyBlock reports can be used to track bandwidth usage by users and identify potentially troublesome sites.  These reports can help you anticipate overload possibilities and the need (or lack of need) to purchase additional capacity.  If abuse can be detected and brought under control, the cost of additional capacity may be avoided.

• Site Analysis Bandwidth Report – Focusing on kilobytes by classification, category, and users, this report gives a good overview of whether the majority of bandwidth consumption was acceptable and which categories and users used the most bandwidth.
• Top Bandwidth Sites Report – This report shows the top bandwidth consuming sites and their categories for the specified time period.
• Network Information Report – Find out your busiest time of day for Internet use with this report.  It shows visits and kilobytes read by hour.

Source: http://www.emarketer.com/Article.aspx?R=1007247

Bandwidth is a main concern for many businesses during this March Madness season.  Many must deal with employees using company resources to enter online office pools, blog about the top seeds, and watch live streaming games that take place throughout March and early April.

In fact, CBSsports.com is expecting even more viewers online this year. They expect the number of unique viewers for March Madness on Demand, to rise 50% to 7.2 million viewers.  With the massive number of sports Web sites and streaming games available, companies can expect to see a considerable drain on employee productivity and network bandwidth during the NCAA Tournament.

While you may or may not allow your employees to follow the games at work, you will want to ensure that it doesn’t interfere with your network.  Wavecrest Computing offers Internet filtering by category or site, white list filtering, real-time web monitoring and detailed Web-use reports on a particular category or site and bandwidth usage.  Some reports you can use to monitor bandwidth or access to sports sites are:

• Site Analysis Bandwidth Report
• Network Information Report
• Category Audit Detail Report
• Category Audit Summary Report
• Site Audit Detail Report

Source: http://www.marketingshift.com/2009/3/cbs-expects-7-millon-online.cfm