--- title: The top 5 reasons to start 2019 with an IT security strategy description: Read how you can safeguard your data in 2019 and stay ahead of the cybercriminals. image: https://blog.techboston.com/hubfs/it%20security%20strategy.png --- ### Search engine Use this form to find things you need on this site Search × [![We're better together.](https://blog.techboston.com/hubfs/Tech_Networks_of_Boston_June2018/Images/Logo_without_motto-copy-web.png)](https://techboston.com) - [About TNB](https://techboston.com/about-tnb/) - [Overview](https://techboston.com/about-tnb/) - [Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Blog](https://techboston.com/about-tnb/blog/) - [Free Resources](https://techboston.com/about-tnb/resources/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Services](https://techboston.com/our-services/services-overview/) - [Overview](https://techboston.com/our-services/services-overview/) - [Integrated Services](https://techboston.com/our-services/integrated/) - [Managed Services](https://techboston.com/our-services/managed-services-2/) - [Project Services](https://techboston.com/our-services/project-services/) - [Case Studies](https://techboston.com/case-studies/) - [Using IT to Increase Productivity and Reduce Costs](https://techboston.com/case-studies/increase-productivity/) - [Updating Technology for Growing Needs](https://techboston.com/case-studies/updating-technology/) - [Shifting to Remote Work in the Midst of a Crisis](https://techboston.com/case-studies/remote-work/) - [Protecting Your Organization in the Wake of Cybercrime](https://techboston.com/case-studies/cybercrime/) - [Integrating Technology for Mission Driven Success](https://techboston.com/case-studies/integrated-technology-success/) - [Events](https://techboston.com/events/) - [Upcoming Events](https://techboston.com/events/) - [Past Roundtable Events](https://techboston.com/past-roundtable-events/) - [TNB’s Dialogue Series on Nonprofit Data and Evaluation](https://techboston.com/about-tnb/blog/best-practices-data-evaluation/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) - [Home](https://techboston.com/) - [About Us](https://techboston.com/about-tnb/) - [2022 Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Blog](https://techboston.com/about-tnb/blog/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Case Studies](https://techboston.com/about-tnb/case-studies/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Events](https://techboston.com/events/) - [Services](https://techboston.com/our-services/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) # The top 5 reasons to start 2019 with an IT security strategy [Home](https://techboston.com) / The top 5 reasons to start 2019 with an IT security strategy Return to Previous Page [![image-1](https://blog.techboston.com/hubfs/it%20security%20strategy.png)](https://blog.techboston.com/hubfs/it%20security%20strategy.png) [View large](https://blog.techboston.com/hubfs/it%20security%20strategy.png) [Tech Tips](https://blog.techboston.com/tag/tech-tips), [Food For Thought](https://blog.techboston.com/tag/food-for-thought), [TNB Products and Services](https://blog.techboston.com/tag/tnb-products-and-services), [IT security](https://blog.techboston.com/tag/it-security), [IT security strategy](https://blog.techboston.com/tag/it-security-strategy), [cybercrime](https://blog.techboston.com/tag/cybercrime), [phishing](https://blog.techboston.com/tag/phishing), [Security awareness](https://blog.techboston.com/tag/security-awareness), [email security](https://blog.techboston.com/tag/email-security) ### The top 5 reasons to start 2019 with an IT security strategy 2018 was filled with privacy and security fiascos. The latest news item you may have heard about was the KARS4KIDS breach. One would think a large nonprofit would have the right security measures in place, but sometimes security is overlooked due to cost and the mindset of "if it's not broken, don't fix it". Their breach involved a hacker infiltrating their server, where more than 20,000 records where left accessible to the World Wide Web.  The data included donor email addresses and donation receipts, which included customized links to a donor’s tax receipt. The nonprofit's surely tarnished their reputation with this security oversight.  The Boston Globe [released an article](https://www.bostonglobe.com/business/2018/12/12/hackers-fooled-save-children-into-sending-million-phony-account/KPnRi8xIbPGuhGZaFmlhRP/story.html) today that Save The Children Federation was fooled into sending $1 million dollars to a hacker overseas in Japan after an employee's account was hacked.  The hacker posed as an employee, and created false documents to trick the organization into sending the money. If the other workers had been trained, they could have recognized the warning signs and avoided the costly mistake. No matter which security measures you have in place, you need to have your employees informed and trained on best practices for email security. The current IT security tools available for monitoring cannot prevent an attack if your employee was the one who clicked on a phishing link or forgot to change their password.  To start 2019 with a simple, effective, [IT security strategy](https://blog.techboston.com/8-it-security-tips-you-need-to-know) is an excellent New Years resolution and gives your Executive Director, Board Members, and donors peace of mind. Better yet, your professional peers will say it's the most fun way to spend a security budget. This list is the backing you need to get budget and roll out new-school security awareness training before IT security becomes an issue. **Here are the Top 5 reasons...** 1. **Social Engineering is the No. 1 go-to strategy for cybercriminals**. Unfortunately, their time is money too. Why spend *2 months* of research uncovering a potential software vulnerability when you (literally) can create an effective spear-phishing attack in *2 hours*? They are going after the human—the weakest link in IT security—and your last line of defense. 2. **Ransomware is only going to get worse in 2019**. Email is still hackers favorite attack vector, and their sophistication is increasing by the month. The business-threatening downtime caused by ransomware can be massive and costly. 3. **Compliance requirements for awareness training are being sharpened up**. The thinking that you can get away with a yearly one-time, old-school awareness training session for your staff is in the past. On May 25, 2018, enforcement actions for General Data Production Regulation(GDPR) begun.  4. **Legally you are required to act "reasonably"** and take "necessary" measures to cope with a threat. If you don't, you violate either compliance laws, regulations, or recent case law. Your organization *must* take into account today's social engineering risks and "scale security measures to reflect the threat". Today, data breaches cause practically instant class action lawsuits.  There is even possibility for your own employees to file a class action against your own company because your W-2 forms were exfiltrated with CEO fraud. 5. **Board members' No. 1 focus today is cyber security**. Some very pointed questions will be asked If they read in the local news that your donor database was hacked and the breach data is being sold on the dark web. Once it becomes clear that your organization did not deploy a simple, effective strategy that could have prevented this, C-level execs will be under fire. Target's CEO and CISO are just an example. Help your Executive Director keep their job. **Tech Networks has strategically partnered with KnowBe4 to provide security awareness training and phishing testing because:** 1. KnowBe4 was recognized by Gartner as a Leader in the Magic Quadrant 2. Goldman Sachs recently invested a $30M Series B in KnowBe4 because they believe in their mission 3. The KnowBe4 platform was built from the ground up for IT pros that have 16 other fires to put out 4. The KnowBe4 ModStore has the world's largest choice in fresh awareness training content 5. Pricing is surprisingly affordable! 6. **BONUS**: It's actually a lot of fun to phish your users and get the conversation started. Feel free to [reach out](mailto:sales@techboston.com) to learn more on how we can help you stay ahead of the cybercriminals in 2019. We can give you a quote for new-school [security awareness training](https://techboston.com/our-services/phishing-testing/) and show you how affordable this is. If regular cybersecurity training isn't in your budget, the second-best step you can take is an [IT security assessment](https://techboston.com/our-services/security-assessment-2/). Tech Networks of Boston can scan your network to find any vulnerabilities and provide a report with recommendations. Performing an assessment now can save you time, money, and headaches in the long run, and keep your data secure.  [![Contact us](https://no-cache.hubspot.com/cta/default/4472820/1e70be53-34b8-4f94-af33-3b43ed79ac0f.png)](https://cta-redirect.hubspot.com/cta/redirect/4472820/1e70be53-34b8-4f94-af33-3b43ed79ac0f) [We also have a free e-book you can download and share: "The Smarter Nonprofit's Guide to Ransomware".](https://techboston.com/smarter-nonprofits-guide-ransomware/)     Share Post - - - - - [mailto:?body=https://blog.techboston.com/top-5-reasons-start-2019-security-strategy](mailto:?body=https://blog.techboston.com/top-5-reasons-start-2019-security-strategy) [Previous](https://blog.techboston.com/waste-audits-what-are-they-and-do-we-need-one) [![](https://blog.techboston.com/hubfs/WasteAudit3_2018-1.jpg) Waste Audits: What Are They and Do We Need One?](https://blog.techboston.com/waste-audits-what-are-they-and-do-we-need-one) [Next](https://blog.techboston.com/tech-networks-of-bostons-2018-in-review) [![](https://blog.techboston.com/hubfs/Thank%20you%20for%20your%20support.png) Tech Networks of Boston's 2018 In Review](https://blog.techboston.com/tech-networks-of-bostons-2018-in-review) #### RELATED POSTS IT security [![Why Spam Filtering Matters](https://blog.techboston.com/hs-fs/hubfs/spam%20filtering.png?width=387&name=spam%20filtering.png)](https://blog.techboston.com/spam-filtering) #### Why Spam Filtering Matters April 20, 2023 at 08:00 AM by Veronica Moreno-Nestojko … secure passwords , IT security [![Using a Password Manager](https://blog.techboston.com/hs-fs/hubfs/password%20manager.png?width=387&name=password%20manager.png)](https://blog.techboston.com/password-manager) #### Using a Password Manager March 23, 2023 at 11:18 AM by Veronica Moreno-Nestojko … IT security [![Understanding How Least Privilege Can Help Your Organization](https://blog.techboston.com/hs-fs/hubfs/least%20privilege.png?width=387&name=least%20privilege.png)](https://blog.techboston.com/least-privilege) #### Understanding How Least Privilege Can Help Your Organization February 23, 2023 at 10:23 AM by Veronica Moreno-Nestojko … IT security [![What You Need to Know About Cyber Insurance](https://blog.techboston.com/hs-fs/hubfs/cyberinsurance.png?width=387&name=cyberinsurance.png)](https://blog.techboston.com/cyber-insurance) #### What You Need to Know About Cyber Insurance October 20, 2022 at 04:12 PM by Veronica Moreno-Nestojko … ### Leave a Reply [![updatedblogad](https://blog.techboston.com/hs-fs/hubfs/updatedblogad.png?width=312&name=updatedblogad.png)](https://techboston.com/about-tnb/contact-us/)                    ### Contact Us 1 Wadleigh Place South Boston, MA 02127 Phone: 617.269.0299 Fax: 888.527.9333 ### GET UPDATES ### Resources [Server Failure and Recovery](https://techboston.com/resources/server-failure/) [Plan a Successful Email Migration to the Cloud](https://techboston.com/resources/email-migration/) [How to Align Your Staff on Technology Use and Policies](https://techboston.com/resources/technology-policies/) [Data Loss and Recovery: A Guide](https://techboston.com/resources/data-loss-recovery/) [Assess Your IT Needs: Is an MSP Right For You?](https://techboston.com/resources/assess-it/) [IT Audits and Assessments: What Are They Good For?](https://techboston.com/resources/it-audits-assessments/) [The Right Time to Change Your MSP](https://techboston.com/resources/change-msp/) [Privacy Policy](https://techboston.com/privacy-policy/) © 2021 Tech Networks of Boston