How to Minimize the Threat of a Ransomware Attack with Help from a Cloud Solution Provider

Cloud Migration Challenges and Solutions for Small Business with WatServ

How to Minimize the Threat of a Ransomware Attack with Help from a Cloud Solution Provider

By WatServ
August 2, 2021

Ransomware. Hopefully, you haven’t experienced the predicament of being held hostage by it. In this article, we’ll cover how a cloud solutions provider can help reduce the risk of a ransomware attack. 

What is Ransomware?

First, let’s quickly define what ransomware is. CISA states:

“Ransomware is a type of malicious software, or malware, designed to deny access to a computer system or data until a ransom is paid.”

Jason Gumpert, of MSDynamicsWorld.com and a friend of WatServ, recently brought to my attention an unfortunate story published on Rental Management Magazine: Dealing with a security nightmare.
 
In short, this article explains how the owners of Triangle Equipment, a Bobcat distributor dealer in North and South Carolina, were hacked. The hackers encrypted the company’s data and demanded them to deliver $2,500 in bitcoins in exchange for the key to decrypt the data.
 
Not a fun day.
 
When Jason brought this story to my attention, he also asked how a cloud solutions provider (like us at WatServ) can protect their hosted clients from ransomware and incidents like this. Let’s take a look.

How a Cloud Solutions Provider Can Help Protect Your Business from Ransomware

First, we need to accept that completely preventing cybersecurity threats is unrealistic. If we’ve learned anything from the constant stream of cybersecurity breaches, it’s that threats are inevitable. The best thing to do is reduce the chance of threats and have a response plan in place for when a threat does present itself.

For instance, at WatServ, we have a collection of services that work to safeguard our clients’ cloud environments.

Our standard services (included with WatServ’s CloudOps managed service) offer:

 

1. Foundational security pillars – based on CISA’s defense in depth concept

This approach begins with protection at the client connection. Additional layers of defense occur at the network, infrastructure, application and database levels. Each one of these layers is protected by access controls and segregation. Some examples of protective mechanisms at the layers are advanced malware protection, firewalls, multi-factor authentication, multi-tiered network segregation, password vault and access controls and reviews.

Layers of Defense

 
 
 
Layers of Defense for Cyber Security
 
 
 

2. Managed detection and response (MDR) services on hosted environments

WatServ uses Alert Logic’s MDR services to proactively monitor the security of our cloud environments across public, private or hybrid. In the event that a threat is detected, or indicators of a compromise are present, WatServ can cut off the external threat midway. In the case of the Triangle Equipment ransomware attack, WatServ could have stopped the encryption of their data midway, saving part of it.

 

3. Backups on Azure or Google

In the unfortunate instance of a threat, the customer can restore their environment to a point prior to the threat. WatServ performs backups of our customers’ data for 30 days or longer. Restoring from backup is relatively painless, when compared to building a new environment from scratch.

At WatServ, we also offer optional add-on services (incident response and security awareness training) listed below.

 

4. Incident response

In addition to MDR, WatServ offers an Incident Response service in the event of a threat. In the Triangle Equipment situation, the story alludes to the owners having to scramble to find cybersecurity experts to help them manage the situation. To avoid this, WatServ clients can purchase our Incident Response service on retainer so that these services are secured and ready for immediate deployment upon threat detection. Clients get peace of mind that they have security specialists ready-to-go.

 

5. Security awareness training

As per Verizon’s 2019 Data Breach Investigations Report, phishing – a form of social engineering – is the number one cause of data breaches. Security Awareness Training is an ongoing training program that teaches a company’s users to detect phishing emails and other types of social engineering threats. The security of a business’ computing environment (and data) must start with each individual user. By participating in Security Awareness Training, clients will see their employees become smarter to detecting social engineering instances. For example, some companies can expect to see an improvement from +60% click rates on phishing emails to sub-20% click rates over a 12-month period.

As painful as the journey was for Triangle Equipment, their story ended relatively well. Triangle paid the $2,500 ransom and, after 3 weeks, recovered their business operations. (Compare this to a recent story on two cities in Florida having to pay $1 million dollars to ransomware. Ouch!)

At WatServ, we help protect our clients from cybersecurity threats, like ransomware, by leveraging our advanced CloudOps tools and internal expertise to detect and remediate security issues.

 

Worried About Ransomware? Fight Back Today.

If you’re worried about ransomware, or would like to learn more about our services, contact us today at [email protected] or 1-866-531-2598.

 

Special thanks to Triangle Equipment for sharing their story!

WatServ demonstrates best-in-class capability and market leadership through proven technology and customer commitment.​

About

WatServ is an IT solutions provider that helps organizations digitally transform through cloud technologies and managed services.

Serving clients as a trusted advisor since 2006, WatServ provides experience-tested, strategic solutions across all stages of the digital transformation journey. Clients choose WatServ to migrate infrastructure and applications to the cloud, secure critical data, implement disaster recovery, deploy virtual desktop, enable data-readiness for productivity solutions and manage IT environments.

Our clients span a broad range of industries, and we’re a global supplier of IT services for many Brookfield Portfolio Companies. To help our mid-size clients, we provide scalable offerings that simplify cloud adoption and drive business optimization. For enterprise clients, we co-create cloud solutions that enable stability and efficiency for complex IT tools and processes.

With more than 15 years of experience, WatServ has a track record of delivering quantifiable business results and a superior client experience. Ranked as one of Canada’s Top 100 Solution Providers for the last three years in a row, WatServ is always on.

Cloud Migration Considerations: Three Questions to Ask

cloud migration strategy for small business with WatServ

Cloud Migration Considerations: Three Questions to Ask

Tyler Doerner, VP, Application Services

March 3, 2021
Today, the number of cloud technologies available are practically endless. At the same time, the pace of cloud innovation and development from global giants like Microsoft and Google is truly unprecedented. Together, this poses challenging dilemmas as well as exciting opportunities for companies thinking about making the move to the cloud.
 
If you’re considering moving to the cloud in 2021, here are a few cloud migration considerations to ask yourself.
cloud migration tools for small business with WatServ

Will You Tackle Your Cloud Migration and Management Internally or Outsource it?

As we move into 2021, many companies are feeling the pressure to undergo digital transformation – or be left behind. This is further complicated by the fact that internal IT teams rarely have the skillset or bandwidth to support such fundamental change.  So, the question becomes: should you invest in the right people to manage your cloud internally, or outsource the tasks to a company specializing in cloud migrations and management?

More and more, we’re seeing companies choose the outsourcing route. They’ve seen that success most often occurs when internal IT teams shift their focus from maintaining systems to adding value to the business. In fact, many feel the future role of IT will be to work with internal stakeholders to identify business challenges and then seek out technology solutions to solve those challenges. As an alternative to having internal IT teams focus on maintaining network connectivity, patching servers, supporting desktops and so on, businesses are finding that when they outsource these activities, it frees up time to focus on core value-add capabilities.

cloud migration consulting for small business with WatServ

What Does Your Ideal Cloud Scenario Look Like?

While cloud-based technologies and infrastructure are critical to the future success of most businesses, each use case should be evaluated for economic and business advantages. In highly regulated industries with data residency or sovereignty requirements – or where businesses operate in remote areas where internet connectivity is not reliable – the cloud may not be the right option for certain applications.

To solve for these issues, many organizations are turning to a hybrid cloud deployment. Most companies, whether they know it or not, are already in a hybrid cloud scenario for certain functions – think Salesforce.com for a CRM, Exchange Online by Microsoft for email or an on-premise ERP. These independent technologies may require integration but are deployed in different clouds by different providers.

Determining the right application and deployment scenario is critical to adding value to your business. Choosing the right option will shorten your path to success and deliver critical economic and technical benefits.

Cloud Migration from Servers for Small Business with WatServ

What Strategies Will You Use to Get to the Cloud?

There are numerous strategies that can be used when evaluating the future of your existing applications. However, there are three approaches that are often recommended:

  • Re-hosting – This is usually the first and most logical step for organizations looking to migrate to the cloud, especially if there are other external factors creating pressures like a datacenter contract expiring or datacenter issues. Re-hosting involves taking an existing application, and simply moving it to the cloud. The workloads being migrated are generally kept on premise or in a partner-hosted data center. By moving existing business applications to the cloud, you minimize disruption for end users, since they don’t have to learn a new application, while also getting the benefits of a modern cloud infrastructure. Once existing applications have been migrated, it’s easier to start an optimization project, since the applications, data and networking are already in the cloud.
  • Re-platforming – Once an application has been rehosted, the next natural step is to look at re-platforming. (You could also, of course, bypass re-hosting and go straight to re-platforming.) Re-platforming involves taking an existing application to the cloud and then modernizing the underlying technology. It looks to take advantage of the new platform to improve performance, reliability and reduce costs. Cloud service providers like Azure, AWS and Google have a suite of technology available for re-platforming databases, storage, backups, disaster recovery and so on.
  • Repurchasing – This involves looking at the business fit of an existing technology and deciding if it will continue to fit going forward. Sometimes applications can be made to fit and other times they need to be replaced with modern cloud-based applications. Think: moving a legacy CRM system to Dynamics 365 or Salesforce versus custom developing a CRM solution.

When an organization doesn’t have the internal IT capabilities or capacity to handle these activities, working with a knowledgeable provider can ensure a successful outcome.

Looking Ahead to 2021 and Beyond

Cloud innovation is moving at the speed of light. IT teams have much to think about. In addition, the role of IT is changing, and companies are expecting their internal teams to deliver on digital transformation mandates. For each cloud opportunity that’s created, challenges emerge. By understanding cloud options and engaging with the right experts to support internal capacity or bridge knowledge gaps, successful organizations will not only keep up, they can outperform.

Want to continue the conversation? Get in touch with our team of cloud experts today.

Gerrie Electric whitepaper cover

CASE STUDY

WatServ Supports Gerrie Electric from Strategy to Execution of its Digital Transformation

WatServ demonstrates best-in-class capability and market leadership through proven technology and customer commitment.​

About

WatServ is an IT solutions provider that helps organizations digitally transform through cloud technologies and managed services.

Serving clients as a trusted advisor since 2006, WatServ provides experience-tested, strategic solutions across all stages of the digital transformation journey. Clients choose WatServ to migrate infrastructure and applications to the cloud, secure critical data, implement disaster recovery, deploy virtual desktop, enable data-readiness for productivity solutions and manage IT environments.

Our clients span a broad range of industries, and we’re a global supplier of IT services for many Brookfield Portfolio Companies. To help our mid-size clients, we provide scalable offerings that simplify cloud adoption and drive business optimization. For enterprise clients, we co-create cloud solutions that enable stability and efficiency for complex IT tools and processes.

With more than 15 years of experience, WatServ has a track record of delivering quantifiable business results and a superior client experience. Ranked as one of Canada’s Top 100 Solution Providers for the last three years in a row, WatServ is always on.

4 Reasons to Pick a Security-First Cloud Solutions Provider

Top Managed Solutions Provider WatServ

4 Reasons to Pick a Security-First Cloud Solutions Provider

By WatServ
February 25, 2021

Is your business considering working with a cloud solutions company to provide cloud compliance, consulting, engineering or managed services? If so, you’ll be joining a rapidly expanding market. In fact, Gartner predicts the worldwide public cloud services market to increase by 17% this year, reaching $214.3 billion globally.

Migrating from conventional servers to the cloud can have many benefits for your business, including increased efficiency, scalability, resiliency and affordability. Cloud adoption can mean better flexibility, enhanced disaster recovery and accelerated digital transformation for businesses of all sizes.

However, before you take the plunge and choose a cloud solutions provider to engineer and/or maintain your cloud, it’s critical to ensure they take an important topic seriously: security.

In this article, we’re going to dig into this topic and look at 4 reasons why you should choose a cloud solutions provider that prioritizes your cloud security compliance.

best managed service provider with WatServ

1. The public cloud introduces new security considerations.

As more companies move to the cloud – especially the public cloud – a host of new information security challenges are emerging. In fact, CSO recently put together a list of the top 12 cloud security threats, which include:

  1. Data breaches
  2. Insufficient identity, credential, and access management
  3. Insecure interfaces and APIs
  4. System vulnerabilities
  5. Account hijacking
  6. Malicious insiders
  7. Advanced persistent threats (APTs)
  8. Data loss
  9. Insufficient due diligence
  10. Abuse and nefarious use of cloud services
  11. Denial of service (DoS)
  12. Shared technology vulnerabilities

We’ve heard about many of these threats in the media – and we recently wrote about ransomware attacks on our blog – because these threats affect businesses of all sizes.

For instance, in the first half of 2019 alone, we heard about data breaches increasing by 54% from the previous year. And, with an estimated 3.4 billion phishing emails being sent out daily worldwide, almost all of us can say we’ve been on the receiving end of a phishing email.

Sure, not all of these cyberthreats target the cloud specifically, but with the cloud being accessible online, many of them do.

The takeaway: While security threats are a part of life regardless of where your data is stored, and the cloud introduces several new cybersecurity concerns, a good cloud solutions partner will understand these security threats and take them seriously. Most importantly, they will offer 360 insight on how to mitigate your risk – so your business can stay focused on leveraging the immense power of the cloud to benefit growth.

managed service provider software with WatServ

2. It’s up to the cloud customer (not the cloud service provider) to protect business data.

Did you know that cloud security is a shared responsibility? The best way to illustrate this is to take the example of a condo building. It’s up to the building owner to ensure adequate security is in place to protect the building – like having control over the front door and installing working smoke detectors in hallways and public spaces. However, what you do inside your condo is your own responsibility. If you leave a pot boiling on the stove and forget to replace your smoke detector battery, it’s at your own risk. Likewise, if you let someone into your unit and they steal your jewelry, that’s your mistake.

The same goes for the public cloud. Cloud service providers (like Microsoft Azure or Google Cloud Platform) are responsible for the security of the cloud, but it’s the customers (you)  who are responsible for the security of what gets put into the cloud and how that information gets accessed.

This is an important distinction to remember, since the majority of security failures are a result of a customer not taking appropriate action to protect themselves or monitor for threats.

In fact, Gartner found that “through 2022, at least 95% of cloud security failures will be the customer’s fault.”

The takeaway: You have a shared security responsibility when using the public cloud, with you holding a good chunk of that responsibility. Rather than face this responsibility alone, a good cloud solutions partner that prioritizes security will help you engineer and maintain your cloud in a way that minimizes your risks and provides continuous threat monitoring, detection and mitigation.

managed security service provider WatServ
 

3. Cloud security compliance challenges are changing all the time.

When speaking about the latest round of research on cloud security compliance, Gartner’s VP of Research, Jay Heiser, notably said, “CIOs must change their line of questioning from ‘Is the cloud secure?’ to ‘Am I using the cloud securely?’”.

This is a great way to look at it. There have been countless articles written and debates had over the question “is the cloud secure?” and “will I be more at risk if I move to the cloud?”, with customers looking for definitive answers. The truth is, the cloud, like anything else, will always be vulnerable to a mix of changing threats.

For instance, we’ve recently been hearing more about the threat of container software vulnerabilitiescryptographic exploits and meltdown or spectre as cybercrime becomes increasingly complex and sophisticated. Plus, internal threats will always remain a concern. The truth is, threats will never go away, so how you approach and handle them is what matters.

The takeaway: A cloud solutions partner that takes cloud security seriously can help you navigate these threats as they change from month to month and year to year. Threats will never go away, so adopting a mindset of “am I using the cloud securely?” will help you engage effectively with a partner that’s focused on adaptive risk assessment and mitigation.

4. There are steps that can be taken to mitigate risk.

Just as threats change monthly, so do technologies, tools and procedures designed to mitigate risk. A knowledgeable and up-to-date cloud partner can help you identify and navigate your vulnerabilities, so you can make an educated decision about your cloud strategy.

Some of the solutions that can be put in place may include:

  • Engineering your cloud environment using security best practices
  • Implementing or maturing security operations centers (SOCs)
  • Strengthen your existing security and governance procedures
  • Providing advanced threat detection and automated threat mitigation
  • Setting up continuous security monitoring
  • Ensuring good API hygiene
  • Providing managed endpoint protection and DDoS protection
  • Offering training to employees on threats like phishing and account hijacking
  • Looking at ‘passwordless’ methods of access management
  • Setting up procedures to review security analytics
  • Responding to incidents quickly and effectively

The cloud offers a huge range of benefits for businesses large and small. With almost 50% of data worldwide expected to be stored in public cloud environments by 2025, the cloud has shaped the world of computing in a whole new way.

By working with a cloud solutions provider that prioritizes cloud security compliance, you can put your energy into leveraging the incredible power of the cloud – while also making informed decisions about risk and enabling adaptive approaches to risk mitigation.

 

Need help protecting your cloud? WatServ is a security-focused cloud solutions provider that helps companies safeguard their cloud through CloudOps advanced managed services. Speak with one of WatServ team members today to learn more.

What Good Cybersecurity really means title cover

WHITEPAPER

What Does Good Cybersecurity Really Mean?

WatServ demonstrates best-in-class capability and market leadership through proven technology and customer commitment.​

About

WatServ is an IT solutions provider that helps organizations digitally transform through cloud technologies and managed services.

Serving clients as a trusted advisor since 2006, WatServ provides experience-tested, strategic solutions across all stages of the digital transformation journey. Clients choose WatServ to migrate infrastructure and applications to the cloud, secure critical data, implement disaster recovery, deploy virtual desktop, enable data-readiness for productivity solutions and manage IT environments.

Our clients span a broad range of industries, and we’re a global supplier of IT services for many Brookfield Portfolio Companies. To help our mid-size clients, we provide scalable offerings that simplify cloud adoption and drive business optimization. For enterprise clients, we co-create cloud solutions that enable stability and efficiency for complex IT tools and processes.

With more than 15 years of experience, WatServ has a track record of delivering quantifiable business results and a superior client experience. Ranked as one of Canada’s Top 100 Solution Providers for the last three years in a row, WatServ is always on.

The 6 Most-Asked Questions About WatServ’s Partnership Program

microsoft dynamics partner WatServ

The 6 Most-Asked Questions About WatServ’s Partnership Program

By WatServ
February 25, 2021

2019 was an exciting year for WatServ, made even more so thanks to our incredible partners.

In fact, we have numerous partners to thank for helping us acquire new clients, including but not limited to:

We deeply value your support and appreciate you choosing us as your partner.

Last year, we were also able to attend several industry events to connect with potential partners and spread the word about cloud technologies and digital transformation. We enjoyed meeting new people and seeing familiar faces at Directions North America in Las Vegas, the IWLA Tech and Ops Conference in Columbus, the User Group Summit in Orlando and many more.

Throughout the year, we had several potential partners reach out to us with questions about our Partnership Program. As a result, we’ve put together this list of FAQs.

If your organization is interested in partnering with us, we hope the following information will provide you with valuable insight.

Six Frequently Asked Questions (FAQs) About WatServ’s Partnership Program

1. Who is WatServ’s Partnership Program Ideal for?

Our partners generally fall within one of two groups:

  1. Microsoft Dynamics partners seeking industry-leading hosted platforms for ERP and financial applications in either Azure or Hybrid-Cloud
  2. IT consultants helping clients with digital transformations. When cloud migration from on-premise or co-location facilities are part of the digital transformation, WatServ is positioned to deliver.

Partners choose us so they can remain focused on their core capabilities, while trusting us to deliver cloud-infrastructure and advanced managed service solutions. Working with WatServ means partners can leverage our deep experience with cloud migrations and be confident in our technical knowledge given the cloud’s rapid pace of change.

2. What models of engagement does WatServ offer?

We offer two engagement models:

  1. Direct Model – Under this model, we have a direct relationship with the end customer. The partner introduces WatServ to the end customer and we develop contracts, obligations and SLAs. After collecting payments, we remit a revenue-sharing amount back to the referring partner.
  2. White Label Model – Under this model, WatServ has no direct relationship with the end customer and instead acts as a sub-supplier for the partner. WatServ develops contractual obligations, including SLAs, and we bill and collect payments from the partner for the services we provide. Often, partners will “pass through” our benefits to the end customer. Additionally, the partner has flexibility over pricing and may choose to include a mark-up on WatServ’s services. WatServ provides partners with a discount on services, which is equivalent to the revenue-sharing amounts under the Direct model.

When evaluating alternative models, consider the following questions:

  • How would you like the end customer to view the WatServ-partner relationship? Under the white label model, some of our partners still choose to disclose to the end customer their sub-supplier relationship with us. In this case, they prefer the white label model to reduce billing complexity for the end customer.
  • Under the white label model, are you comfortable and able to assume payment obligations for the end customer?
  • How important is it to you to have access to the cloud environment without approval from the end customer (usually a consideration in terms of speed of access)? If it’s important, the white label model may be more appropriate, since you are contractually our customer.

Although the two aforementioned engagement models are the most common, WatServ is open to discussing other needs and requirements.

3. Who owns the relationship with the end customer?

This will depend on the engagement model chosen.

Under the white label model, where WatServ has no direct relationship with the end customer, the partner will own the relationship with the end customer.

On the other hand, under the direct model arrangement, WatServ will own the relationship with the end customer, but only as it relates to the services we provide.

 

4. How does revenue sharing work between WatServ and the partner?

In exchange for partner-referred deals, WatServ will share specified revenues or margins with partners for the following services:
  1. One-time advisory, consulting and professional services;
  2. Private cloud hosting, inclusive of consumption and managed services;
  3. Public cloud managed services;
  4. Software licenses, on-premises type and application-related; and
  5. Value-added services provided by third-party firms.
For more details on specific percentage splits for revenue sharing, please contact us. Please note that WatServ shares private cloud consumption revenue with partners. However, public cloud consumption revenue is excluded from revenue sharing. WatServ also offers special bonuses to reward partners for referring larger-sized opportunities and to celebrate the first five deals closed upon joining the WatServ Partnership Program.

5. How are responsibilities and accountabilities split between the partner and WatServ?

The division of responsibilities and accountabilities are, at a high-level, shown in the following diagram:

 
 
 
 
 
 

WatServ designs, manages and maintains cloud infrastructure that the application(s) runs on, which is inclusive of networking through to runtime. Partners are responsible for the application and data layers.

6. Can you describe a typical opportunity lifecycle when working with WatServ?

At WatServ, we begin working with partners as early as possible in the opportunity lifecycle. This helps ensure accuracy and timeliness of work. The diagram below illustrates a typical opportunity lifecycle:

 
 
  1. Requirements Gathering – Upon learning of an opportunity, the partner shares cloud infrastructure requirements and specifications with WatServ. To facilitate the process, WatServ often provides a requirements questionnaire.
  2. Cloud Planning – After cloud requirements are finalized, WatServ custom-designs the cloud architecture to meet the required specifications. At this stage, WatServ produces indicative pricing, which can be presented to the end customer by either the partner or WatServ.
  3. Proposal Delivery and Acceptance by End Customer – In receipt of WatServ’s cloud solution, and often following additional conversations to resolve any questions, the end customer proceeds with the solution.
  4. Cloud Deploy – Coordinating with the partner, WatServ implements the cloud solution and helps the partner drive the project to go live.
  5. Cloud Maintain – Once the project has gone live and is in the post-implementation phase, WatServ transitions into maintenance mode, where we monitor, manage and continuously optimize the end customer’s cloud environment.

There you have it. Six of the most-asked questions about WatServ’s Partnership Program.

 

Want to learn more? Please reach out to [email protected] and member of our team will be in touch.

WatServ demonstrates best-in-class capability and market leadership through proven technology and customer commitment.​

About

WatServ is an IT solutions provider that helps organizations digitally transform through cloud technologies and managed services.

Serving clients as a trusted advisor since 2006, WatServ provides experience-tested, strategic solutions across all stages of the digital transformation journey. Clients choose WatServ to migrate infrastructure and applications to the cloud, secure critical data, implement disaster recovery, deploy virtual desktop, enable data-readiness for productivity solutions and manage IT environments.

Our clients span a broad range of industries, and we’re a global supplier of IT services for many Brookfield Portfolio Companies. To help our mid-size clients, we provide scalable offerings that simplify cloud adoption and drive business optimization. For enterprise clients, we co-create cloud solutions that enable stability and efficiency for complex IT tools and processes.

With more than 15 years of experience, WatServ has a track record of delivering quantifiable business results and a superior client experience. Ranked as one of Canada’s Top 100 Solution Providers for the last three years in a row, WatServ is always on.