Social Events & Meetings
Multi-Factor Everything – Why you should be using MFA by Sponsor Alchemy
I
T systems in todays every evolving world must deal with pressures and demands from all sides, including the critical need for high end security. Cyber criminals are constantly evolving the ways that they attack unsuspecting users, both at home and in the work place. We often hear clients say that they think their location, type of business, size of company, and numerous other reasons are why they do not need to worry, the statement “who is going to want to come after us” is often bandied around. The answer is cyber criminals. If you have anything online at all, you can be targeted, often the criminals are not in the UK or even Europe. They do not care what you do, how often you do it, or where you do it, they just want to get access to your data or systems.
We should all have secure firewalls, encrypted all our machines, and even periodically run vulnerability tests on our networks. If you do not do any of those things, then please get in touch with us today so we can help you, just email us at hello@alchemysys.co.uk and we can get you protected. Unfortunately though, even with all of these things in place, if you are also not utilising MFA or multi-factor authentication techniques, then these other security measures can be bypassed.
MFA does not have to be complicated or costly. It should also be possible to roll it out quickly to all staff that need it. With advancements in remote access enabling more and more employees to be able to work from any location, it is even more imperative that there is a safe yet simple authentication strategy.
Here are just a few of the reasons that you should Multi-Factor Everything:
- Identity theft is an easy, low-risk, high-reward crime. Everyone in every location is at danger of being affected by this. It is also widely regarded as one of the fastest growing type of crime with more money being made by these criminals that drug-related crimes.
- Weak or stolen user credentials are hackers' weapon of choice. Therefore, no number of firewalls, antivirus, or encryption can completely protect you. Up to 95% of all Web application attacks are because of a compromised password.
- Year on year the number of malicious attacks is going up. In recent years there has been an upturn of nearly 30% in successful security breaches.
- We hear about the big companies having breaches all the time, they are the ones that capture the imagination and hit the news, but there are more smaller companies hit than big ones. Current statistics show that of all targeted attacks, 31 percent are aimed at businesses with fewer than 250 employees.
- Password theft is constantly evolving as hackers employ methods like keylogging, phishing, and pharming. If you want to help your staff learn how to spot phishing and pharming, then please again do speak to us.
- Cyber criminals do more than just steal data. They can destroy it, change programs or services, or use servers to transmit their propaganda, spam, or malicious code. So even if you think you are not directly affected, if your credentials are stolen, that could be a way in to your client’s systems by sending fresh phishing emails.
- Employees are already accustomed to authenticating themselves in their personal lives, as providers of online services like home banking, gaming, social media, and email have all adopted mobile-based tools to effectively authenticate their users when accessing their systems. So it is a logical step to move your business into a more safe and secure environment.
If you would like help with any of this then please don’t delay, get in touch with us, before you get targeted.
0330 043 0801
Like Back to Top Seen 503 times Liked 0 times
Subscribe to Updates
If you enjoyed this, why not subscribe to free email updates and join over 1292 subscribers today!
Subscribe to updates
Alternatively, you can subscribe via RSS 
All email subscriptions must be confirmed to comply with GDPR.
Related Posts
31st August 2018 | September 2018
Picking up where I left off in my report for the July newsletter, I was part of the DASLS rounders team which took on the Junior Lawyers’ Division which was bolstered by members of the Chartered Institute of Legal Executives. On a perfect mid-July evening, dry, sunny and pleasantly breezy, JLD/CILEX won by a margin of 10 points to square the series at 2-2. The rounders was good fun and is one regular social event we currently hold with JLD. I am hoping we can arrange more joint social events. Rounders Teams Rounders in action at the Double Locks Over supper at the Double Locks pub afterwards, I chatted to a group of young lawyers, one a newly qualified solicitor, the others still trainees. That conversation reinforced how impressed I am by the efforts the latest generation of would be solicitors now have to put in to achieve that status, to fund themselves through their studies and, after passing all their qualifying exams, to earn a training contract. On 8 October, DASLS will be holding its seventh Admissions Ceremony for newly qualified solicitors at the Guildhall in Exeter. Letters of invitation have now gone out to all those entitled to receive their Certificates congratulating and welcoming them to the Profession at this Ceremony. I urge everyone invited to attend to do so. Your achievements deserve to be officially recognised and celebrated. A few days before the rounders, I made my second trip in less than a month to the Celtic Manor just outside Newport to attend the 70th anniversary celebratory dinner of the Association of South Western Law Societies. It was a fantastic location, in glorious weather for a wonderfully relaxed but meticulously planned evening. ASWLS 70th Anniversary Dinner Then on 19 July at the ASWLS AGM, I was elected President of that Society too, with Mel Bevan-Evans of Monmouthshire Incorporated Law Society becoming Vice President. As I tweeted at the time, you spend over 30 years in the profession waiting for a presidency and then two come along together. ASWLS Officers: Mel Bevan-Evans, Stephen Mahoney and Anthony Earl August, being a month largely devoid of Sub-Committee meetings and other formal presidential commitments, proved to be an excellent time to play my part in raising funds for the Society’s chosen charities, the Devon, Somerset and Dorset Air Ambulance Trusts. I decided to turn my weekly swim for fitness into a sponsored event, extending my usual 30-35 minutes into a full hour to see how many lengths I could cover in that time. One sponsorship of 20 pence per length proved to be all that was required to bring out my competitive instinct and, on 13 August, I surprised myself by covering 56 lengths in the hour. The sponsorship I have received to date has been fantastic but, with each rescue mission costing £2,500.00 or more, every penny that can be added to the running total will be much appreciated. Donations can be made by using the link: mydonate.bt.com/fundraisers/stephenmahoney1 Alternatively you can email me stephen.mahoney@porterdodson.co.uk and I’ll send you a sponsorship form to complete. My intention is to hand over cheques to representatives of both the Air Ambulance Trusts at the DASLS Somerset Dinner on 2 November. The next full Committee meeting for DASLS is on 11 September. We will be joined by not only Rav Hothi, Sarah Richards and James Shepherd of The Law Society’s Midlands and South West Relationship Management Team, but also by Law Society Executive Director for External Affairs Robert Khan and Head of International Mickaël Laurans. Robert and Mickaël will be there to address a variety of topics including The Law Society’s work influencing Government on the best outcome for the legal profession on Brexit and promotion of the jurisdiction of England and Wales internationa...
31st August 2018 | September 2018
GDPR – where are we now and where are we going? The General Data Protection Regulation (‘GDPR’) and the Data Protection Act 2018 came into force on the 25th May 2018. Despite the long lead in time, a considerable amount of confusion still remains about what firms need to do to ensure on-going compliance with the new rules. So what are the key challenges that firms face? First, they need to comply with the new accountability principle. In practice this means more user-friendly information for clients about what is being done with their personal data. Secondly, they need to think about what the basis for their processing of personal data is. An awful lot of noise has been made about consent but there are other grounds that can be relied upon and this also applies in respect of marketing. Thirdly, firms need to be aware of changes to the rights of data subjects including access to information and the ability to request deletion of their personal data. Fourthly, firms need to update their procedures in respect of security breach reporting. Previously entirely voluntary, this is now mandatory in a number of scenarios and firms need to ensure that employees are aware of the relevant time frames and information to be provided. Fifthly, firms need to review their marketing to ensure that it is compliant with the GDPR and other relevant rules. They also need to keep a watchful eye on the forthcoming E-Privacy Regulation and consider what changes, if any, need to be made in the light of this. Sixthly, firms need to consider whether it is appropriate to appoint a data protection officer. Although in most cases this will not be mandatory it is still good practice to have a person who has responsibility for this area. Failure to comply with the new rules can potentially lead to very large fines, compensation claims and reputational damages. Keith Markham will be giving his seminar on GDPR - where are we now and where are we going? on 18 October at Exeter Racecourse. To reserve your place go to DASLS website or email harry@dasls.com ...
31st August 2018 | September 2018
Why did you join Devon & Somerset Law Society? I’m ashamed to say I’d never heard of DASLS before, but I knew I wanted to move away from music (my degree subject) and this role seemed to offer the chance to challenge myself, learn new skills - and meet interesting lawyers! I felt very welcome in the interview and I love the variety of responsibilities that come with being part of a small in-office team. What is your dream job? Maybe something in politics, but as this interview is for my current employer I’m going to say DASLS Team Secretary. What has been the most embarrassing moment during your professional career? As my career with DASLS is all of 7 months old, I’m pleased to say there haven’t been many as yet. In my musical days I’ve had countless - singing out of tune, kicking amps over, unplugging guitars with an over exuberant high kick, dancing terribly – and all with an audience! It definitely taught me the value of powering through mishaps! Which sort of work gives you the most job satisfaction? I enjoy helping with the Social Sub-Committee; putting on events that people enjoy is a lot of fun and is certainly something I’d like to do more of… by the way readers, please do sign up for the 5-a-side football! What do you do in your spare time? Probably not as much as I should! I enjoy going to the cinema and bingeing on various TV series. I still write songs and record when I feel like it, but I think I’m still a student at heart - I do lots of sleeping! What book are you reading at the moment? I’m not a big reader; I tend to listen to audiobooks. At the moment I’m listening to The Meditations of Marcus Aurelius. What is the most recent film you have seen? I think it was Disney Pixars’ Coco – I was fighting tears with that one! What are your favourite food / restaurant? There’s a Persian restaurant in Bristol called Kuch, which I absolutely love. They do the most incredible mint tea and every dish I’ve had there has been fantastic. Where is your favourite holiday destination? I haven’t been abroad on holiday for years now, but I go to Norfolk several times a year to visit my girlfriend’s family. They live right on the broads so it’s very idyllic. What is your favourite pet? You can’t ask that! What is your favourite lawyer joke? I know plenty of drummer jokes… but google has offered this: Q: What do you call a smiling, courteous person at a bar association convention? A: The caterer. ...
06th March 2020 | March 2020
Dear All, This year really is flying by. I have just had my birthday. After updating you previously on the excellent catch up I had with the Law Society CEO Paul Tennant on his visit to the south west last November, I had not expected to be back in touch with him quite so soon. Sadly, this time it was in less happy circumstances. I was, like many of you, shocked and saddened in January to hear the news and see the pictures of the substantial fire at Chancery Lane in London. I have emailed Paul Tennant and James Shepherd, our Law Society Relationship Management Executive, to send our best wishes and we are hoping that the building will be back to full use very soon. As I write this report, preparations are in full swing for the 2020 DASLS Legal Awards & Dinner. As you know the Annual Dinner is being held again this year at Exeter Cathedral. The event is to take place on the 30th April 2020. After the success of last year, we are hoping that once again the event is sold out which would mean we will have around 480 people attending. If you have not done so already, please contact Llew Nicholls and the team at our Awards partners ‘Grow Marketing’ who have worked very hard alongside our very own Tony and Monique to achieve full sponsorship of this event. You can contact Llew to book the remaining places by emailing Llew directly at Llew@growmarketinguk.com. There have been more nominations than ever before with more entries making the short list. Please do not miss this dazzling occasion. You will all have received DASLS latest 2020 training courses programme. Tony Steiner and the team have worked hard to arrange these events. You will see that as members you get preferential rates and if appropriate reduced rates for multiple attendees from your firms. Please take advantage of these services as a proportion of the monies do go to support our Society’s broad continuing education offering. If I do not see you individually before I look forward to catching up with you at the 2020 DASLS Legal Awards and Annual Dinner in April. With very best wishes Nigel Lyons President 2019-2020...
06th March 2020 | March 2020
New AML Regulations and the pursuit of the beneficial owner. Introduction The new Money Laundering & Terrorist Finance (Amendment) Regulations 2019 which came into force on 10 January have modified a number of aspects of the 2017 AML Regulations, with which we have been complying for some time. However, many firms’ procedures hark back to the earlier days of the 2007 Regulations and have not been modified or updated much over recent years. This article seeks to set out what the new Regulations in fact require, and the steps we should be taking in relevant cases. The Policy It has been true for some time that the ultimate aim of all the regulatory rules is transparency – it has always been the case that the use of artificial structures such as trusts, companies, bearer shares, foundations and charities – whilst perfectly legal – have to some extent also benefitted from the extra anonymity they offer to the true owner and recipient of the funds and services we provide. If we offer services to these types of entity, the Regulations require us to go some way to identifying the individuals who are actually benefitting from our services, and this entails uncovering the true ownership of the organisation. Whilst this would be difficult in many instances – Cayman Island companies with bearer shares, for example – we must nevertheless attempt to get some assurances from the creators of the companies, accountants or registrars as to the ownership of the shares, and have some way of being notified of any change in ownership. We also need to be aware of the PEP and Sanctions status of these individuals. Further, for UK companies, the PSC Regulations 2016 impose an exactly similar obligation on the companies themselves to identify their beneficial owners and notify Companies House of any shareholder with 25% or more of the shares or exercising control over management of the business. The Regulations The Regulations provide that we must, as part of our CDD procedures Identify the client – this means coming to know who they are, by name and some other characteristic, e.g. address, date of birth, date of incorporation Verify that identity – by means of reliable and independent data and documentation Identify the beneficial owner (if the client is an entity) – though not necessarily verifying that identity Identify and verify the identity of the person actually instructing us (if not already done). What this means for us When acting for a COMPANY (that is not a listed company) the Regulations require us to obtain Details of the company as registered (which must be proven by a copy of the register entries available from Companies House or equivalent registry) – name, number, registered office address, principal place of business the law to which it is subject details of its governing documentation (its memorandum) names of the directors. Names of any beneficial owners, and the identity of any individual owners of legal entities which own the client Names and verification of the persons instructing us on behalf of the company, and their authority to do so. Note that we cannot rely on the information provided by the company under the PSC Regulations but we must undertake our own research in order to fulfil our CDD duties. Further, if as part of that research, we discover that the Companies House data on PSC’s is incorrect, then we are now under a further obligation to notify the Registrar of Companies of this fact. We also need to establish that PEPs and Sanctions checks are also undertaken. If genuinely positive entries are revealed in response we should undertake enhanced CDD steps or cease to act, accordingly. Electronic searches are a permissible avenue to use provided the search provider can offer us the necessary assurances that the person actually claiming an identity is IN FACT that person. Check also whether ...
