Emergency Preparedness Plans are Crucial When Disaster Strikes

The September 11, 2001 terrorist attacks were a wake-up call to the kinds of dangers that still face America, including American businesses. In the months and years following the attacks, companies nationwide took steps to ratchet up security and emergency preparedness, in the event that they might someday be impacted directly by an attack or other major disaster.

For instance, an often-cited survey conducted by the Hartford Financial Services Group found that security measures instituted or improved on by companies resulted in a drastic drop in the number of unauthorized visitors entering workplaces. However, the same survey concluded that, as time passed, companies relaxed their newfound post-attack security consciousness. Emergency preparedness gaps are particularly apparent in smaller businesses.

A terrorist attack, of course, is not the only type of emergency a company might face. Natural disasters (hurricanes, tornadoes, blizzards), fires, and power outages all can endanger employee security and stymie business operations. The extent to which a company is prepared for such events can mean the difference between being able to continue operations, and shutting down. According to the American Red Cross, as many as 40% of small businesses do not reopen after a major disaster.

According to the Hartford survey, the top workplace safety threat continues to be that posed by unauthorized entries into a business. Employers can take a number of actions to reduce the number of unauthorized entries. For example, they can: check that all entry doors have working locks; reduce the number of entry points, and have all of them set up so that individuals coming in through them must pass by a receptionist or other staffed workstation; implement photo IDs for employees; require that visitors sign in and wear visitor badges; and establish procedures that receptionists can use to inconspicuously signal that they need help (such as a call button).

Companies also must be prepared for emergencies that confine employees inside the building, such as a blizzard, or a situation involving outside release of a chemical or biological agent. Among the items businesses should ensure they have on hand are a supply of bottled water and nonperishable food; flashlights and batteries; a battery-powered radio; a landline phone that can operate without electricity; and first-aid supplies. Detailed lists of suggested “in case of an emergency” items for businesses can be found on the Web site of the American Red Cross (www.redcross.org).

Other steps businesses should take to prepare for disaster situations include:

  • Establish emergency evacuation routes and conduct regular emergency evacuation drills.
  • Copy or back up important, valuable, or irreplaceable documents, and store these off site.
  • Keep an up-to-date list of contact information for employees, customers, suppliers, distributors, and professional service providers (e.g., insurance agent, accountant, lawyer), and store this list off site.
  • Establish procedures for handling suspicious mail.
  • If the nature of the business permits, formulate a plan for continuing operations from an alternate site.
  • Make sure that the insurance coverages held by the business are appropriate and adequate, and store a copy of the policies off site.

Depending on a company’s location and the nature of its business, it might be more or less susceptible to certain risks than others. Our Total Protection Team is an excellent source for help in evaluating your company’s risk profile and for learning about business safety and emergency preparedness programs.

If you have any questions, comments or concerns, please do not hesitate to contact us.  Here are 4 Easy Ways to reach us:

1. Call 951-600-5751  or  877-994-6787

2. Fax 951-677-6265

3. Email [email protected]

4. Visit our website – agency.thebutlerweb.com

Be Proactive To Prevent Cybercrime At Your Business

Legendary bank robber Willie Sutton supposedly said that he robbed banks because that was where the money was. Many small business owners follow this logic when it comes to computer system security. They believe that people who rob with a mouse and a keyboard rather than a gun target large corporations, because those businesses have the most money. This leads them to the misguided belief that cybercriminals will not bother them. In fact, the NACHA – The Electronic Payments Association – reports that Eastern European criminal syndicates have targeted small businesses precisely because they have allowed themselves to become easy marks.

Experts in the field estimate that one in five small businesses do not use antivirus software, 60% do not encrypt data on their wireless networks, and two-thirds lack a data security plan. This failure to take precautions makes a small business easy pickings for computer hackers. However, there are several things business owners can do to protect themselves.

  1. Use two-factor authentication. This is a mechanism that requires the user to do more than one thing for authentication. It ordinarily has two components — one thing the user knows (such as a password), the other a randomly generated number that the user must input. The number comes from an electronic token card, which generates a new number every few seconds. If the user enters a number that the system is expecting, the system will authenticate the user.
  2. Inoculate systems against the Clampi Trojan virus. This virus resides on a computer, waiting for the user to long onto financial websites. It captures log-in and password information, relays it to servers run by the criminals, instructs the computer to send money to accounts that they control, or steals credit card information and uses it to make unauthorized purchases. The trojan monitors more than 4,500 finance-related websites.
  3. Be on guard against “phishing” e-mails and pop-up messages. These messages purport to be from legitimate businesses with which the recipient does business. They ask the user to update or verify information, often threatening negative consequences if she fails to do so. Clicking on the links in the messages brings the user to an authentic looking Web site. However, it is actually bogus; the site collects personal information that the collector can use to steal the user’s identity. System users should ignore these messages.
  4. Arrange for financial institutions to alert the business owner should they spot unusual activity involving the firm’s accounts.
  5. Install firewalls and encryption technology to block uninvited visitors from uploading to or retrieving data from the firm’s servers and to protect data sent on public networks. Intrusion detection systems can inform the business owner of attempts to hack into the network.
  6. Be cautious about opening attachments to e-mails, especially if the sender is someone unfamiliar to the user. Attachments may contain viruses or Trojan horses that can steal login information and passwords or corrupt a system.
  7. Protect against intrusion by disgruntled former or current employees. Deactivate passwords for former employees, erect barriers to keep employees from accessing systems unrelated to their jobs, and implement sound accounting procedures for financial transactions.

In addition to these safeguards, small businesses may want to consider purchasing computer fraud and employee theft insurance. These policies will protect the business against those losses that still occur; insurance companies are likely to offer favorable pricing to businesses that take precautions against cybercrime. One of our professional insurance agents can give advice on the appropriate types and amounts of coverage. Modern technology gives businesses unprecedented abilities, but it also presents significant risks. Every business owner must take steps to keep the cybercriminals out.

We hope you find this information on protecting your business computer systems helpful.  If we can assist you with any other forms of protection for you home, auto, business or personal belongings, please let us know!

Here are 4 EASY ways to reach us:

1. Call 877-994-6787 or 951-600-5751
2. Fax 951-677-6265
3. Email – [email protected]
4. Visit Exclusive New Website –  agency.thebutlerweb.com