Category: What’s New in Technology

Cybersecurity has become more important than ever, especially with the rise in cyberattacks. However, much focus is put on computers, laptops, servers, etc. Mobile phones and tablets seem to be overlooked when talking about cybersecurity.

Today smartphones are integrated into the modern workforce as driven by work at home and remote working. To enhance mobility, these devices are installed with business mobile applications that enable access to company systems. They enable users to conduct different activities on-the-go, such as banking, connecting to company networks, business transactions, and other social operations. However, this is raising concerns about the security of sensitive corporate data and other personal information stored on phones.

Despite these concerns, businesses continue to be lax on enforcing solid measures to protect company data and networks.

Since the phones have less protection than computers, they have become an easy target for cybercriminals who are using different methods to gain access to phones.

Security Threats to Mobile Devices

Phishing is one common attack vector that uses fake emails and text messages to trick users into clicking links that download malware onto a user’s smartphone. For instance, cybercriminals may use SMS to mimic legitimate companies and send messages that contain harmful links.

Recently, cybersecurity researchers cited a WhatsApp phishing campaign that attempts to lead WhatsApp users to install an information-stealing malware. The senders impersonate the WhatsApp notification service and send an email to a user claiming they have received a private voicemail. A user who is unaware of this ploy and clicks on the play button in the email will download malware onto their phone.

Attackers also take advantage of data leakage through malicious mobile apps. Users can get these apps by downloading fake versions of real apps, which are infected with malicious code that steals personal data stored on a phone.

Data can be stolen through legitimate solutions, as researchers found at the end of October 2021, when they discovered a banking trojan horse known as SharkBot in six phoneapps. These apps were designed as legitimate antivirus solutions. The malware could bypass multifactor authentication to steal credentials and banking information, and even transfer money. Although the six dangerous apps have since been deleted from the Google Play store, this goes to show that hackers do not tire of looking for ways to infiltrate mobile devices.

Mobile phones also are affected by web-based mobile security threats when users access affected sites that download malicious content onto a device.

Other security threats to phones include using unsecured public WiFi, lost or stolen mobile devices, mobile spyware, rooting malware and jailbroken phones that become more prone to attacks.

How to Keep Safe

Since phones are now primarily being used as business tools, business owners need to rethink their mobile strategies for both employer-provided devices and bring your own device (BYOD).

Businesses that deploy mobile device management (MDM) tools will block potentially harmful apps, automatically update software, and remotely wipe off data on stolen or lost phones.

Users are the weakest link in security issues; hence, a need for regular security risk-training on social engineering by learning how to differentiate suspicious emails and SMS messages. Users also need to learn to avoid downloading applications from third parties and other untrusted sources and use only authorized app stores. Furthermore, user training should include the dangers of public Wi-Fi, the importance of turning off a phone’s Wi-Fi when not using it, and locking the device with a strong password or biometrics, such as fingerprint detection.

Users also should avoid granting broad app permissions, especially for free apps that may be sending sensitive data to remote servers, where it can be used not only by advertisers but also by cybercriminals.

Keeping device operating systems and other software updated will reduce attack possibilities since cybercriminals use old bugs to hack devices.

It is important to install anti-malware and anti-virus programs on mobile devices since they now face the same threats as computers and laptops.

Businesses can introduce a mobile device policy that employees sign before accessing company resources on their devices or when receiving employer-provided devices. Such a policy includes the dos and don’ts of using phones.

Regular security testing is crucial for enterprise applications as it helps expose vulnerabilities in apps and especially those developed by third-party agencies to ensure the security meets required compliance guidelines.

Conclusion

Mobile phones now have capabilities similar to computers and store a lot of personal and sensitive data. As more devices access business systems, it creates more endpoints that put the business at risk of a data breach. Therefore, businesses of all sizes should take mobile security seriously through strong defensive measures, which can be enhanced with enterprise mobile security solutions.

Cybersecurity experts estimate that there is a ransomware attack every 11 seconds. This makes it a challenge to individuals, businesses and even governments.

In ransomware attacks, cybercriminals encrypt a victim’s network or data, making it inaccessible until a ransom is paid. Despite organizations’ efforts to reduce the attacks, cybercriminals also are advancing their attack methods. For instance, an organization may have backups they can use to restore their systems, but the criminals also demand ransom not to publish the sensitive company information they have in their possession.

Ransomware is not a new cybersecurity threat. It is traced back to 1989 when the first ransomware was released through floppy disks and required a victim to send money to a post office box in Panama. As technology now has advanced to allow for always-on connectivity, the prevalence of ransomwares has grown tremendously. The use of bitcoin and other cryptocurrencies as payment make it more complicated as they are difficult to trace. These attacks such as the WannaCry, CryptoLocker, etc. have resulted in billions in losses through infrastructure and business outages and millions of dollars being paid to the attackers.

Ransomware has grown so much that organized gangs are offering cybercriminals services for hire. This is made more intricate by the availability of ransomware-as-a-service (RaaS) to provide infrastructure to other cybercriminals to escalate their attacks.

Ransomware has become such a global threat that in a joint advisory made up of CISA, FBI, NSA and International Partners, has called for every government, business and individual to be aware of this threat and take necessary action to avoid becoming victims.

President Joe Biden also continuously issues warnings to business leaders to strengthen their companies’ cyber defenses. The risks of cybersecurity are expected to increase with the ongoing invasion of Ukraine by Russia.

On the other hand, there are efforts to reduce the threat scale by various groups. One such group is the Cyber Threat Intelligence League (CTI-League), made up of cybersecurity experts from different countries. They have helped take down malicious websites, detect vulnerabilities, collect and analyze different phishing messages, and assist law enforcement organizations in creating safer cyberspace.

Protecting Against Ransomware

Before a ransomware attack is fulfilled, there are detectable activities that can aid in mitigating an attack. In any case, the attackers target specific user behavior, unchanged default security configurations and common technology vulnerability. This means that ransomware attacks can be avoided. Some ways to keep safe from ransomware include:

1. Timely patches – ensure to patch operating systems and other software immediately whenever a patch is released. Patching also should apply to cloud environments, including virtual machines, serverless applications and third-party libraries.
2. Keep backups – it is impossible to fully protect an organization network as one user action may expose the network to attacks. Regularly backing up data is crucial. However, ensure that cloud backups are encrypted and can’t be deleted or altered. Also, always keep a backup version that is not accessible through the cloud to ensure business continuity in case of an attack.
3. User training – users are considered the weakest link in the line of defense against cybersecurity. An attack can start with a seemingly legit email containing a link or an attachment that downloads malware to a device once clicked. Therefore, continuous user training and phishing exercises will help reinforce user responses to suspicious emails.
4. Secure and monitor RDP – as more people adopt remote working, they rely on the remote desktop protocol to connect to office computers or colleagues. This has made RDP one of the most commonly used methods for attackers to gain access to a network. Therefore, businesses should use Network Level Authentication (NLA) and use unique and complex passwords for users to authenticate themselves before making a remote connection. Other ways include multifactor authentication, setting time limits to disconnect inactive RDP sessions automatically, and limiting login attempts.
5. Use up-to-date antivirus software – this should be used to regularly scan the systems and scan files downloaded from the internet before they are opened.
6. Network monitoring – use network monitoring tools and intrusion detection systems to look out for any suspicious activity.

The CISA, FBI, NSA and International Partners joint advisory discourages paying ransom to cybercriminals and recommends following the CISA ransom response checklist, and reporting to cybersecurity authorities such as the FBI, CISA or the U.S. Secret Service. System administrators should also follow incident response best practices that can aid in handling malicious activity.

Metaverse has become a buzzword with much debate on its potential implications once it is fully realized. As far as businesses are concerned, the metaverse presents new opportunities and challenges, especially for marketing, branding and communication professionals.

Understanding Metaverse

Metaverse became a hot topic thanks to Facebook announcing its rebrand to Meta in October 2021. However, the metaverse is not new and can be traced back to 1992 in the fiction novel “Snow Crash” by Neal Stephenson. Stephenson used the term to refer to a virtual world where people can do different activities.

As the internet moves to a new iteration as Web 3.0, different players are working toward creating their metaverse – or rather, a unified virtual space. This virtual environment is intended to be used to carry out activities such as playing games, attending meetings, buying digital goods and services, tourism, education and even for work.

Although metaverse might seem like a futuristic notion that will require massively advanced technologies, its foundational elements are already in place. This is because it’s enabled by virtual reality (VR) and augmented reality (AR). Some users, especially gamers, have had experiences with virtual reality and augmented technologies. Some online retailers already use augmented reality on their e-commerce platforms to help shoppers experience a product before ordering it.

However, metaverse technology seeks to connect all of these separate apps and platforms to create a continuous experience that will integrate audiences and elements from different platforms into one. The metaverse will be characterized by a boundless and decentralized virtual economy and immersive social experiences.

It is not possible yet to gauge how disruptive the metaverse will be, but one sure thing is that it will introduce new ways of doing things. As has already been witnessed, to keep up with trends, businesses had to adapt to technologies such as social media platforms even when they were initially created for social interaction. Hence, businesses need to be prepared.

Metaverse in Business

As any new technology helps early adopters gain a significant advantage over competitors, metaverse will be no different. However, it may initially favor large businesses that can afford to take risks and have budgets to invest in enabling requirements. Despite this, different-sized businesses should get ready to adjust their marketing strategies to the virtual economy.

There are predictions that the metaverse could generate vast revenue to the tune of $1 trillion. Hence, the metaverse has a massive business opportunity, including advertising, demand for new hardware, virtual events, e-commerce, etc.

As an example of the readiness for companies to adopt metaverse, consider Nike. The brand has already taken steps into the metaverse by filing for trademark applications, indicating its intention to make and sell virtual branded sneakers and apparel.

Businesses will benefit differently from the metaverse. For instance, companies manufacturing computer chips and servers stand a good chance for a significant gain to their businesses. So will cloud service providers that will be vital for the metaverse virtual worlds.

Manufacturers also will use the metaverse to create digital models of their products using digital twins technology (a virtual representation of a physical object or process). This will help adjust manufacturing processes, carry out quality control, product demos, and simulate the supply chain.

Remote work that was highly adopted due to the recent pandemic will be enhanced by the metaverse. It will be possible to have co-working spaces and carry out virtual trainings and simulations.

It also will help promote physical businesses. By interacting with objects in 3D form, shoppers can try on clothes online, check out houses, cars, etc. The ability to shop virtually means that businesses can design brands to suit different customer needs and increase retail sales.

Such possibilities mean that marketers will need to research customer behavior and preferences in the virtual space. This will require businesses to set up metaverse teams if they want to remain competitive. This is especially necessary to reach customers where they spend their time.

On the downside, there are concerns about privacy issues and data harvesting – like any other technology. The decentralized characteristic of a true metaverse also means it will be challenging to regulate. Such cases introduce risks to businesses. Nevertheless, such risks have never stopped businesses from adopting new technologies.

Conclusion

Customer experience is vital in any business. For businesses to continue maintaining long-term relationships with customers, they may have to adapt and use virtual avatars to serve as customer service agents. Thus, businesses need to be more innovative to tie existing communication channels to the metaverse channel. They can do this by formulating an entry plan to the metaverse while ensuring a balance between opportunities and risks.

Certifications are not a new thing in the accounting industry. However, with new technology trends, accounting departments are faced with the challenge of taking courses in technology in order to carry out their tasks. Many businesses are ditching desktop-based accounting software and turning to cloud-based software. This requires that the users be well-versed with necessary skills to use the cloud accounting solution.

What is Cloud Accounting?

Among the cloud-based solutions that businesses have adapted is cloud accounting. Cloud accounting has all the functionalities of desktop accounting. However, in cloud accounting all processes are carried out online where the data is stored on cloud servers.

Cloud accounting offers businesses various benefits, such as the ability to access the system anytime and from anywhere as long as there is internet access. It also offers access to real-time information, online payments, latest software versions, easier compliance and scalability, among others. At the same time, cloud accounting solutions also allow remote working.

As businesses strive to gain from the benefits offered by cloud accounting solutions, a new challenge arises: lack of skilled employees. Hence the need to upskill.

Why it is Important to Have Cloud Accounting Certification

As cloud accounting becomes highly adopted, there is no doubt that there will be an increase in demand for certification for individuals as well as for organizations.

For individuals, this is important as it will indicate they have the competence to use the cloud accounting software. This is an added advantage to retaining a job or for individuals looking to take up jobs in the accounting field. Employers also could look for certification as proof that an employee already has skills on the type of cloud systems the business uses.

A certified employee will be able to set up the initial business data on a cloud accounting system. They also will know how to handle daily transactions online such as payments, receipts, and invoices, among other tasks. Other important transactions handled by cloud accounting solutions include bank reconciliations, reporting, payroll administration, and budgeting.

Since cloud accounting uses advanced technology like artificial intelligence, the employees will acquire more advanced skills, including financial analysis and cash flow forecasting.

Certified employees will have a better understanding of security levels in the cloud, considering that security is one of the most important issues to businesses.

Apart from learning new skills, certification will enhance workplace performance, as users will be required to complete courses and exams before getting certified.

Again, employees who upskill are less likely to worry about being replaced and, in any case, new knowledge gives employees a chance to negotiate higher pay.

When it comes to businesses, having certified employees means that they can handle projects or tasks successfully as they have a common understanding of cloud accounting systems. This ensures a business of efficiency and reduced operational costs as it can implement a standardized system. Furthermore, customers prefer working with qualified professionals – and this can be demonstrated through certification.

Since cloud computing is a core competency for businesses today, a certification is not only suitable for bookkeepers and accountants, but also for business owners, managers, CFOs and anyone who will be using cloud accounting solutions.

And with trends such as remote accounting and cloud-based accounting services, the certification helps to become future-ready.

Conclusion

The benefits offered by cloud accounting promise to transform the accounting industry through bookkeeping efficiency and streamlined financial administration, as well as provide real-time information. However, the success of these cloud-based systems depends on the users having the appropriate skills. As new technologies emerge, there is a fear of been replaced. But by upskilling, businesses can attend to clients while employees not only get to retain their jobs, but also offer more value.

Technology has had a major impact on the accounting industry. Gone are days when technology was a second thought and accountants preferred the traditional methods to which they were accustomed. As we start another year, technology is also progressing rapidly. The recent business disruption by the COVID-19 pandemic also has contributed to the acceleration in tech adoption. A major lesson learned from the events of the past two years is the need for digital transformation and prioritizing technologies that will help businesses remain relevant.

Since the accounting industry plays a crucial role in running businesses, it is important to be aware of relevant technologies that will impact their future work.

Remote Accounting 

Remote work is picking up, and accountants have not been left behind. This creates a need for the accounting department to rethink their workflow and optimize hybrid arrangements that combine working in the office and remote work. Embracing hybrid arrangements will help avoid losing employees and enable access to a pool of employees with specialized skills as they can work from anywhere.

Cloud-Based Accounting Services

Cloud-based accounting solutions have enabled accounting services to be provided virtually. This has grown exponentially with the COVID-19 pandemic. Software solution providers are expected to continue developing innovative solutions that will enable remote accounting.

The need for cloud-based accounting services also will be heightened as more businesses seek to cut operational costs. With cloud-based solutions, they can pay for only what they use and not necessarily make heavy investments.

Increased Automation of Accounting Tasks

Automating accounting tasks has helped replace many time-consuming aspects of an accountant’s daily work. It is expected that more tasks beyond just data entry and calculations will be automated. As more accountants realize the benefits of automation, such as reducing errors in payments, ease of invoicing, less ambiguity, enabling compliance, etc., providers will develop more automated solutions.

The accounting industry has not yet fallen victim to the great resignation witnessed last year, where the labor department reported millions of people quitting their jobs or leaving the workforce entirely. Such occurrences will increase robotic process automation (RPA) to include more efficient automation for critical functions such as payroll, purchases, invoices and payments.

Cryptocurrency and Blockchain Technologies

Although cryptocurrency and blockchain technologies have been around for a while, they are still difficult for most to figure out. However, there is an increased uptake of these technologies. Some countries already have allowed cryptocurrency as a legal transaction currency. As this trend continues to grow, accountants and auditors are tasked to understand these technologies so that they can offer sophisticated service to their firms or clients who invest in cryptocurrencies.

In other areas, blockchain technologies will continue being utilized in validation services such as audit and risk analysis, and balancing and sustaining accounting records.

Advanced Artificial Intelligence (AI) and Machine Learning 

According to a CNBC TEC survey, 90 percent of executives surveyed agreed that machine learning is critical for companies in 2022, with 20 percent saying they would be willing to invest money in this technology.

There will be more adoption of sophisticated AI solutions that offer better insights, help make data-driven decisions, and carry out basic tasks that take up a lot of an accountant’s time.

Machine learning will be used to develop algorithms that learn patterns in accounting tasks to help reduce mistakes early and avoid wasting time looking for errors. It also will be useful for audits and predictive analytics to forecast future trends.

Although AI and ML may not work well in areas that require creativity and intuition, they can help aid decision-making.

Data Security

All the advanced technologies mentioned above offer promising benefits. However, they also present a new problem in data security. For instance, remote accounting adds a vulnerability that allows cybercriminals to gain access to a company network. Considering that the accounting department holds crucial financial data that attackers target, security is critical for any business.

With cybercriminals using advanced technologies such as artificial intelligence, it is now more important than ever to harden access to corporate data. Therefore, there will be more defensive cybersecurity services to handle the rise in security issues that come with technology growth.

Conclusion 

As we forge ahead in the new year, one thing is certain: Technology will continue to be a main driver in the accounting industry. This creates a need for upskilling to evolve with new accounting roles. It also helps to be conversant with technologies that will help meet client demands.