What is Your Cyber Security Plan?

If your security plan involves thinking your business is too small for a hacker to pay attention to you, well, that's exactly what these criminals are hoping you think.

There are multiple, ever-evolving areas of cyber security that need to be assessed and addressed on a regular basis. When it comes to cyber security, it is best to be proactive and not reactive.

Below are 7 systems you can put in place right now at no (or low) cost to help minimize a data breach. Contact us at [e-mail] for assistance with any of these items! 

7 Best Practices for Cyber Security

1. Internet Security Software

• Install a commercial grade, managed anti-virus, anti-spyware, firewall (BitDefender) and keep it up to date.
  • Email iPOS Support at [e-mail] to purchase BitDefender licenses so we can install them for you today! 
• Regularly run and review results of scans for malicious software.
  • Keep in mind, if you are browsing the internet or receiving email on your POS/Accounting computers, no anti-virus or anti-malware will prevent 100% of the attacks.

2. Passwords and Multi-Factor Authentication

Passwords 

• Do not use the same password for multiple accounts.
• Use complex passwords and change them every 90 days.
• Use a password manager application/service of your choice to manage and control your individual user accounts.
  • Password managers can assist you in creating strong password and protecting credentials for your accounts.  They also allow you to quickly and efficiently copy and paste your account credentials when needed.

Multi-Factor Authentication

• Use Multi-Factor Authentication with online accounts whenever possible to help protect your accounts.
  • Use an authenticator app like Google Authenticator or Microsoft Authenticator on a cell phone or tablet for additional security (rather than sending a text or email).

3. Local Windows and Admin User Accounts

• Use Standard Windows User Accounts and limit the use of Administrative Users in Windows, POS and Accounting software.
  • Use the least amount of privileges required to perform the needed tasks.

4. Restrict Internet Browsing and Emailing on POS Workstations

• Separate your POS/Accounting network from all other computers and devices by using a router that can utilize VLAN (virtual LANs) for different network segments that can't communicate with each other.
  • Though most POS and Accounting solutions are cloud-based, they come with their own security measures. Browsing the web or opening emails / clicking links on the same network puts you at risk.
• If you have a wireless network at your business, put it on a separate VLAN so that devices on it can't internally communicate with other computers/devices on the rest of the network.

5. Update Software and Operating Systems

• Maintain up-to-date software, operating systems and web browsers.
  • Click here to learn more.
• Do not use computers that are running unsupported operating systems. Without security updates, there are many vulnerabilities exposed, increasing the risk of being compromised. 
  • If you have computers that are currently using Windows 10 and can't be upgraded to Windows 11, plan to replace the computers with ones running Windows 11 (before Windows 10 End Of Life in October 2025).
    • Email [e-mail] to schedule your computer checks now to see if they are upgrade eligible or require replacement. 

6. Power Cycle Hardware

• Shutdown (power off / power cycle) and restart all computers on your POS/Accounting network regularly to clear memory.
  • Do not turn your computers off overnight as this is when most software updates take place.
  • Lightspeed Equipment Weekly Maintenance
  • Revel Equipment Weekly Maintenance

7. Restrict Remote Access

• Manage remote access to all computers on your POS/Accounting network.  
• DO NOT ALLOW UNATTENDED REMOTE ACCESS.  
• Enable and use multi-factor authentication for all access to computers on your POS/Accounting network.
  • This can be done if you use a Microsoft Account to log into a Windows computer, but there are third party Multi Factor Authentication services that could be used if you are not logging into a computer with a Microsoft Account.

-

The iPOS Support team is here to help:

[phone] Option 3
[e-mail]
https://individualpos.zendesk.com/hc/en-us