Tag: IT admin

  • The IT Admin’s Checklist for a Newly Remote Company

    The IT Admin’s Checklist for a Newly Remote Company

    A few simple tips can help keep your remote workers productive and relatively stress-free during the new WFH paradigm

    Months into adjusting to COVID-19 impacts, organizations are now living in the day-to-day that was built on—let’s be honest—somewhat rushed plans to get everyone remote as quickly as possible. The image of repairing a bus while the bus is also driving its normal route comes to mind. Quick reactivity like this is vital in the moment, but it can be easy to miss a step along the way.

    Of course, IT is central to business continuity. This has only been made more true when so much of remote work relies on technology. Now is the time to make sure that your organization is truly set up to excel in remote conditions.

    But the mission for IT teams can’t just be to remain operational in the short term. We’ve got to look ahead and chart a course for long-term success: processes, tools, security measures and automation. We must ask, as IT admins, how can we help our teams thrive in this pivotal moment as well as the next?

    We’ve broken down the steps IT admins can take to ultimately set their entire team up for success as we all adjust to remote work.

    How an IT Admin Can Support Remote Work

    Step 1: Safety First

    With changes in every part of their life, your workforce is focused on one thing first: their personal safety and that of their loved ones.

    If you haven’t already shifted as much of your team as possible to a work-from-home model, now is better than never. This demonstrates to your people that you care about them and trust them, which is foundational for getting amazing work done.

    For organizations that are already remote, now is the time to dot the I in information and cross the T in technology. Do your due diligence as an IT team to ensure you have taken all of the necessary steps to make remote work a sustainable practice. Fortunately, you’re in just the right spot for that—just keep reading!

    Step 1.5: Professional Safety, Too

    Safety also encompasses job security. People fear for themselves and their families in this tumultuous time. Economic downturn brings anxiety, period. Even when your company has prioritized personal safety by going remote, there can still be uncertainty in whether someone’s paycheck is safe.

    You might not realize it, but as IT professionals, you have influence over job anxiety within your organization. Every time a tool or system functions perfectly, you’ve made what could have been a stressful day that much better. Simply put, you let people focus on their jobs instead of technology.

    Take pride in this! Give your team members comfort that you are going to make it as easy as possible for them to take care of their responsibilities. You’ll ensure that they have the tools and systems to succeed to help them retain their jobs. People who can focus on their jobs instead of stressing about tools are more able to make a big impact.

    Step 2: Make Remote Work Happen for Your Team

    Once safety is covered, it’s about the technology—hardware and software. There’s good news here: According to Buffer’s “2020 State of Remote Work,” 98% of employees would like to work remotely at least some of the time. That means that what we’re all going through to support the necessity of remote work now will hopefully set up organizations for higher employee satisfaction in the future.

    Whether you’re still in the process of streamlining remote work or you had to rush the process, let’s start at the beginning. You’ll need to ensure that everybody has systems that they can take home with them. If everyone doesn’t have a laptop, create a sign-out process for their desktop machines and any other equipment that they may need. (Psst … You can do this retroactively if your organization already let folks take technology home without a formal process.)

    In the beginning, it may have seemed like we could get through this time with the bare minimum, but making employees work harder because of a lack of resources simply won’t benefit the bottom line. It’s not too late to set up your team’s homes with high-quality monitors, printers, other peripherals and even chairs and desks, if necessary.

    Pro tip: Educate your team on how to adjust their screen resolutions, if that’s a feature on their computer. It’s not something the average computer user knows to do, but it can eliminate the need for a larger monitor and save a few headaches (literally!).

    Step 3: Provide Access to IT Resources

    The next tick on the checklist is to ensure that everybody knows how to access their IT resources. For better or worse, no one is walking over to your desk to ask how to login to their email anymore. (Actually, that’s almost certainly for the better.) Now is the time for education and self-serve training to benefit the entire team while we’re working away from the office.

    If your organization is accustomed to a mobile environment, your users should know how to VPN into the network or securely access applications in the data center or elsewhere. If not, now is the time to teach them.

    As with all times of change, there will be (and probably have already been) many questions. Tighten your process for accepting requests and answering questions. Survey the rest of the IT team for gaps and pain points that have come up in the initial months to ensure you can efficiently continue to support the adjustment period.

    And, most importantly, take the time to document all of the pathways for people to be productive and do their work. Regardless of your company’s familiarity, this will enable better training going forward and give you resources to use when colleagues have questions.

    Step 4: Manage the IT Fleet

    Now that your team is generally enabled to do their work, you need to ensure that you have visibility into the entire environment. Ask yourself these important questions:

    • Do you know all of the IT resources in use across your organization?
    • Do you have full control over access to all IT resources?
    • What about full control over their systems to ensure that you can fix issues, maintain security and configure and control their computer environment properly?

    Insight into these mission-critical questions doesn’t always come easy, but it enables your IT team to manage, control and secure all systems. It’s also foundational to being compliant with regulations and company security policies (which don’t stop, even when the whole world does).

    If any of the above questions gave you pause, we probably don’t have to tell you that something needs to change. Rogue IT resources threaten the organization legally and can be a financial drain—but the solution can be as simple as one tool to manage the whole suite. More on that later.

    Step 5: Secure Your Now-Dispersed Environment

    A key part of gaining control is securing the environment without making security the bane of your team’s existence.

    Security isn’t a new imperative, so let’s revisit the six core activities we recommend here:

    1. Enforce unique access and segment resources.
    2. Lock down computers and servers.
    3. Enable multi-factor authentication (MFA).
    4. Implement full disk encryption (FDE).
    5. Enforce password complexity and MFA.
    6. Conduct regular security awareness training.

    Don’t forget to train your team and provide strong guidance on how you would like them to operate to ensure security. Make compliance a team effort by explaining the why behind all of your security guidance to make it more tangible for people.

    Can Your Technology Support Remote Work?

    Your management tools will largely define your ability to operate securely. The right tool will make something essential like MFA seamless, ensuring end user security without adding friction to anyone’s day. If you’re not happy with your current system, now’s a great time to do the research to find one that makes everyone happy, from IT to the end users.

    Of course, the exact features you’ll prioritize in your search will depend on your specific organization. To get you started here’s a list of the basics of what you should expect your IT management tool to do for you in this remote work period:

    • Compliance-focused security. Look for password complexity management, multi-factor authentication (MFA), policy management, and SSH key authentication, plus whatever’s important for your individual organization’s priorities.
    • Easy integration with all of your current tools. Does your team use both G Suite and Microsoft 365? A good management tool shouldn’t make you pick.
    • A streamlined database that centralizes the IT environment. When all users and IT resources are integrated into a directory service, IT admins gain a controlled, automated environment.
    • Provides easy-to-use single sign-on (SSO) to web applications. Secure, convenient application access is essential and made simple with SSO.
    • Built to optimize your team’s productivity. Technology is only as important as the people who wield it. Choose technology that is intuitive and built with humans in mind.

    Final Thoughts

    While we may not have much certainty right now, one thing is for sure: Success largely will be built from home in the coming months and perhaps years. Being productive while also creating a healthy WFH culture is paramount, and IT teams have a huge role in accomplishing this task.

    The steps we’ve reviewed above are an effective way to help your team feel safe physically and be able to succeed at their jobs. Here they are again, a bit more boiled down:

    1. Prioritize employee safety.
    2. Support teams with the tools they need.
    3. Provide seamless, managed access to IT resources.
    4. Maintain and, if possible, increase security.

    Besides the supporting technology, the most important thing for these steps to be successful is the IT professionals guiding them! Remember how positive your impact can be during this stressful time and set your sights on not just reacting to this moment but proactively preparing your team for any remote working circumstance.

    Recommended for you: Want more on how to be your team’s IT key to successful remote work? For the A-Z handbook that covers everything from password policies to directory integration, download the IT Admin’s full guide to working at home here.

  • Achieving Full Disk Encryption and PCI Compliance

    Achieving Full Disk Encryption and PCI Compliance

    Full disk encryption (FDE) is a critical security measure in today’s modern networks. With data security being more critical than ever, many IT admins are wondering how they can enforce full disk encryption across their fleets of cross-platform systems. Many organizations are also subject to compliance regulations including PCI DSS, which require FDE as a part of their compliance requirements.

    What is FDE?

    Full disk encryption locks down a computer’s hard drive when said computer is powered off or at rest. If a computer with FDE enabled is stolen, the only thing the thief will make away with is the hardware; the data on the system will be encrypted and very difficult to acquire.

    FDE programs (BitLocker for Windows, FileVault for Mac) utilize a recovery key as a method of authentication. When a user logs into their FDE-protected system, the drive is unlocked using their associated username and password. But in case a user forgets their password, is locked out or the hard drive needs to be removed and accessed for any reason, an IT admin uses the recovery key to decrypt the drive. Given the crucial nature of recovery keys, IT admins need to store them in escrow; that is, securely stored and categorized in relation to the system it belongs to.

    What is PCI?

    The Payment Card Industry Data Security Standard (PCI DSS) is a compliance regulation that was created to ensure that credit card data is kept secure by companies that handle this critical customer financial information. PCI revolves around securing the cardholder data environment, or CDE, which houses all credit card information that passes through a company under compliance. There are 12 main requirements under PCI regulation, but Requirement 3 deals specifically with data encryption.

    Using FDE for PCI

    At its core, PCI Requirement 3 calls for installing proper security measures to protect data housed in the CDE. It is arguably one of the most important requirements for PCI altogether. FDE is an ideal way to ensure Requirement 3 compliance. By locking down at rest systems, IT admins can prevent unauthorized access due to a stolen laptop or hard drive.

    In regards to encryption, Requirement 3 also demands that cryptographic keys are securely stored and maintained. Using recovery key escrow, IT admins can ensure that only the right people have access to cryptographic keys and also monitor when they’re used for access and who uses them.

    How to Enforce FDE to Achieve PCI Compliance

    When it comes to enforcing FDE across Mac and Windows for PCI compliance, IT admins might find that their options are limited. Many FDE tools on the market are only capable of enforcing either Bitlocker or FileVault—not both. Since many of today’s IT organizations are heterogeneous with regards to system platforms, an FDE solution that can only enforce one or the other simply won’t do and admins would rather not implement multiple solutions to reach the desired end.

    Additionally, IT organizations need their FDE solution to securely store cryptographic recovery keys in escrow. This need limits the list of ideal FDE options even more. At the end of the day, with these requirements, there’s an excellent option that provides IT admins with a low overhead FDE experience suited for PCI compliance. Using JumpCloud’s Policies, IT admins can enforce FDE at scale across their Windows and Mac system fleets, escrowing individual recovery keys safely.

    — Zach DeMeyer

  • Server Security: Minimizing Risk in 3 Steps

    Server Security: Minimizing Risk in 3 Steps

    Servers located directly on the internet run one of the highest risks of being compromised. It’s just too easy for hackers to find an open “door” or “window” into those servers and then tap into confidential data, systems and information. Companies can’t afford to put their private information at risk, but an increasing move to cloud-based business solutions inherently increases the risk associated with data.

    The good news is, if your organization leverages cloud infrastructure, there are ways to mitigate the risk.

    It takes vigilance—and constant upkeep—but cloud-based data on internet-based servers can be just as safe and protected as on-premises servers.

    In this post, we highlight three steps you can take to significantly protect your infrastructure from being compromised and ensure that you are properly securing your servers.

    Step 1: Shut Down Access

    As admins install appropriate software packages and applications onto servers, invariably ports are opened and services are enabled. This makes a security breach for a hacker easier and easier. Essentially, the more ports and services you tamper with, the more surface area there is available for hackers.

    Depending upon your architecture, see if you can keep ports open “behind” the firewall in a VPC environment. This helps ensure that the fewest possible ports are opened to the public-facing internet, but you’re still able to accomplish your job. You can also specify which servers or services communicate with your AWS machines if you happen to use them (or with your IaaS provider of choice).

    Step 2: Patch Your Servers

    If you have ports or services that are open publicly, it is imperative that they are patched to ensure you are securing your servers. Admins should be updating patches on their servers as often as new data or systems allow them to, for the most attainable risk-mitigated servers. To make effective patches, there are four main steps you can take:

    1. Stay informed about the most crucial updates to cloud computing (Microsoft releases updates monthly).
    2. Automate your patch process.
    3. Test your patches thoroughly and frequently to maintain the highest level patch and to anticipate any errors in your system that hackers could get around.
    4. Verify that all your patches are functioning as designed (this last step could include periodic scans with Microsoft Baseline Security Analyzer, or another vulnerability assessment tool, to make sure all servers are patched and up to date and/or spot-checking individual machines for proper patches).

    Step 3: Tightly Control User Access

    Finally, consider tightly controlling user access to all of your servers. Ideally, admins have complete control in administering access privileges, both individual and group, so that employees have the access they need to do their jobs and nothing more. This tight control limits the amount of access a hacker would have if one user’s identity was compromised. Limited access acts as an obstacle a hacker has to work around to get to his goal: your data.

    The more granular an IT admin’s user control, the better the overall security for the organization.

    To do this, apply standards of access permissions, authentication and authorization for your IT admins to implement. Double-check that permissions are accurate by checking individual devices and ensuring their permissions are correct. Additionally, implement IT technologies that automatically sync changes in user accounts. The technology you need should work seamlessly with Windows, Macs, Linux and other devices to prevent any terminated user ad hoc access to accounts due to their aberrational device.

    Please note that this is a quick-hitter list. These should be the minimum things that you should be doing. Are all of your ports shut down? All servers patched? Are you sure you have control over everybody accessing your servers?

    There are any number of additional tools, technologies and processes that you could use to help protect your cloud server infrastructure. IaaS is incredibly powerful. Take the steps that you need to take to protect you and your organization from being the next victim.

    — Greg Keller