This session was presented at the LOCALOGY ENGAGE 19 event in Washington, D.C., June 3-4, 2019.

1. FIVE MOST FREQUENT
CYBERSECURITY OVERSIGHTS
BY SANCHEZ WILLIAMS: DIRECTOR OF IT OPERATIONS U2CLOUD

2. SANCHEZ WILLIAMS
• Director Of IT Operations for U2Cloud
• Over 20 years experience in IT
• Former Security Architect for one of the 5 largest banks in the US
• 15 years of Private and Public Cloud experience
BY SANCHEZ WILLIAMS: DIRECTOR OF IT OPERATIONS U2CLOUD

3. UNDERSTANDING CLOUD BASED ANTI-VIRUS
• Q: What AV protection is included with your Hosted
Servers/Desktops/Applications?
• A: Probably None
• (With the exception of built in AV such as Windows Defender)
• Many companies have Windows Defender disabled as part of their Group Policies due
to other AV’s run within the company
BY SANCHEZ WILLIAMS: DIRECTOR OF IT OPERATIONS U2CLOUD

4. UNDERSTANDING OR MANAGING THE CLOUD
BASED FIREWALL
• Many SMB’s forget their Cloud Based services have a Firewall
• Left Unconfigured
• If Configured many unnecessary ports and services are left open after testing
and development has completed
BY SANCHEZ WILLIAMS: DIRECTOR OF IT OPERATIONS U2CLOUD

5. UTILIZING TWO FACTOR AUTHENTICATION
• Phishing has become extremely sophisticated in 2019
• Many password compromises go unnoticed until it is to late
• Keyloggers are back in the mainstream
• Opensource and Free application EULA’s often give near unlimited access to a
mobile devices storage
BY SANCHEZ WILLIAMS: DIRECTOR OF IT OPERATIONS U2CLOUD

6. PROPERLY TESTING BACKUPS
• According to a recent survey of 700 IT Professionals published by Spiceworks,
about 71 percent of companies do not test their plan more than once a year
• About 70 percent of Ransomware attacks in 2018 targeted small businesses,
with an average ransom demand of $116,000, according to a recent report
from Beazley Breach Response Services
BY SANCHEZ WILLIAMS: DIRECTOR OF IT OPERATIONS U2CLOUD

7. EDUCATING STAFF
• Staff education is one of the most effective means of preventing a breach
• Sophisticated phishing attacks can be very hard to spot even for a trained
professional
• Brute force is rarely used in today’s age of abundant information
• Knowing who is in what position within a company is often as easy as checking LinkedIn
• This gives potential threats a plethora of information to infiltrate the company
BY SANCHEZ WILLIAMS: DIRECTOR OF IT OPERATIONS U2CLOUD

8. QUESTIONS
• WWW.U2CLOUD.COM
• SWILLIAMS@U2CLOUD.COM
• 904-394-3910
BY SANCHEZ WILLIAMS: DIRECTOR OF IT OPERATIONS U2CLOUD