Phase 2: Protect your cloud

Once you understand your cloud security risk posture, you can strategically apply protection to your cloud services according to their level of risk. There are several cloud security technologies that can help you accomplish the following best practices:

Step 1: Apply data protection policies.

Step 2: Encrypt sensitive data with your own keys.

Encryption available within a cloud service will protect your data from outside parties, but the cloud service provider will still have access to your encryption keys. Instead, encrypt your data using your own keys, so you fully control access. Users can still work with the data without interruption.

Step 3: Set limitations on how data is shared.

From the moment data enters the cloud, enforce your access control policies across one or multiple services. Start with actions like setting users or groups to viewer or editor and controlling what information can be shared externally through shared links.

Step 4: Stop data from moving to unmanaged devices you don’t know about.

Cloud services provide access from anywhere with an internet connection, but access from unmanaged devices like a personal phone creates a blind spot for your security posture. Block downloads to unmanaged devices by requiring device security verification before downloading.

Step 5: Apply advanced malware protection to infrastructure-as-a-service (IaaS) such as AWS or Azure.

In IaaS environments, you’re responsible for the security of your operating systems, applications, and network traffic. Antimalware technology can be applied to the OS and virtual network to protect your infrastructure. Deploy application whitelisting and memory exploit prevention for single-purpose workloads and machine-learning based protection for general purpose workloads and file stores.

Next week we'll talk about phase 3.

Source: skyhighsecurity

Cloud services are used for multiple purposes in corporate environments, from storing data in services like Box, to accessing productivity tools through Microsoft 365, and deploying IT infrastructure in Amazon Web Services (AWS). In all these uses, cloud services allow organizations to move faster, accelerating their business with more agile technology, often at a lower cost. However, the use of any cloud service comes with the challenges and risk of data security in the cloud. Security for the data created in the cloud, sent to the cloud, and downloaded from the cloud is always the responsibility of the cloud customer. Protecting cloud data requires visibility and control. In the steps below, we’ve outlined a core set of best practices for cloud security that can guide enterprises toward a secure cloud and address cloud security issues.

Phase 1: Understand cloud usage and risk

The first phase of cloud computing security is focused on understanding your current state and assessing risk. Using cloud security solutions that allow for cloud monitoring, you can accomplish the following steps:

Step 1: Identify sensitive or regulated data. Your largest area of risk is loss or theft of data that will result in regulatory penalties, or loss of intellectual property. Data classification engines can categorize your data so you can fully assess this risk.

Step 2: Understand how sensitive data is being accessed and shared. Sensitive data can be held securely in the cloud, but you have to monitor who accesses it and where it goes. Assess the permissions on files and folders in your cloud environment, along with access context like user roles, user location, and device type.

Step 3: Discover shadow IT (unknown cloud use).

Most people do not ask their IT team before signing up for a cloud storage account or converting a PDF online. Use your web proxy, firewall, or SIEM logs to discover what cloud services are being used that you don’t know about, then run an assessment of their risk profile.

Step 4: Audit configurations for infrastructure-as-a-service (IaaS) such as AWS or Azure.

Your IaaS environments contain dozens of critical settings, many of which can create an exploitable weakness if misconfigured. Start by auditing your configurations for identity and access management, network configuration, and encryption.

Step 5: Uncover malicious user behavior.

Both careless employees and third-party attackers can exhibit behavior that indicates malicious use of cloud data. User behavior analytics (UBA) can monitor for anomalies and mitigate both internal and external data loss

Next week, we'lll go to Phase 2!

Source: skyhighsecurity

Falls from windows are more common than people might think. According to a report by SafeKids Worldwide, an average of eight children age 5 and younger die and more than 3,300 are injured each year from falling out of windows.

The Window Safety Task Force offers these tips to help protect children from accidental window falls:

• When young children are around, keep windows closed and locked
• When opening a window for ventilation, use those located out of a child’s reach
• Supervise children to keep child’s play away from windows, balconies or patio doors
• Don't place furniture near windows that young children can climb on to gain access
• Don’t allow children to jump on beds or other furniture to help reduce potential falls
• Don’t rely on insect screens; they are designed to keep bugs out, not to keep children in
• Install ASTM F2090-compliant devices that limit how far a window will open, or window guards with quick-release mechanisms in case of fire or other emergency
• Teach your child how to safely use a window to escape during an emergency, such as a fire

Take 5 Minutes to Install Window Guards

Distracted driving is any activity that diverts attention from driving, including talking or texting on your phone, eating and drinking, talking to people in your vehicle, fiddling with the stereo, entertainment or navigation system — anything that takes your attention away from the task of safe driving.

Texting is the most alarming distraction. Sending or reading a text takes your eyes off the road for 5 seconds. At 55 mph, that's like driving the length of an entire football field with your eyes closed.

You cannot drive safely unless the task of driving has your full attention. Any non-driving activity you engage in is a potential distraction and increases your risk of crashing.

Consequences

Using a cell phone while driving creates enormous potential for deaths and injuries on U.S. roads. In 2022, 3,308 people were killed in motor vehicle crashes involving distracted drivers.

Get Involved

We can all play a part in the fight to save lives by ending distracted driving.

Teens

Teens can be the best messengers with their peers, so we encourage them to speak up when they see a friend driving while distracted, to have their friends sign a pledge to never drive distracted, to become involved in their local Students Against Destructive Decisions chapter, and to share messages on social media that remind their friends, family, and neighbors not to make the deadly choice to drive distracted.

Parents

Parents first have to lead by example — by never driving distracted — as well as have a talk with their young driver about distraction and all of the responsibilities that come with driving. Have everyone in the family sign the pledge to commit to distraction-free driving. Remind your teen driver that in states with graduated driver licensing (GDL), a violation of distracted-driving laws could mean a delayed or suspended license.

Educators and Employers

Educators and employers can play a part, too. Spread the word at your school or workplace about the dangers of distracted driving. Ask your students to commit to distraction-free driving or set a company policy on distracted driving.

Source: nhtsa.gov

As moving season heats up across the United States, renters should take key steps to help protect their home and family. Smoke alarms help provide an early warning in the event of a fire emergency. However, a significant percentage of renters claim not to have a smoke alarm in their home or test their alarms regularly*.

Residential rental property owners and their tenants share the responsibility to ensure adequate protection against the threats of smoke and fire. Smoke alarms are widely required across housing types in the United States, and many jurisdictions further require carbon monoxide alarms. Working together, property owners and tenants may establish regular maintenance like battery replacement and equipment testing schedules to help reduce risk.

Signing a new lease or renewing a current one is an opportune time for property owners and tenants to take inventory of their alarms and make sure they are working properly, and to ensure tenants know what to do in case of an emergency.

Below are some fire safety tips for renters and property owners to help guide discussions between property owners and tenants, ultimately ensuring that both parties are ready for the unexpected:

1. Every level, every bedroom

The National Fire Protection Association (NFPA) recommends that smoke alarms be installed on every level of the home, including the basement, and inside each bedroom. It's also important to keep CO, known as the "silent killer," in mind. CO is a colorless, odorless and tasteless gas that can be potentially poisonous. The only way to detect a CO leak is with working CO alarms, which should be installed on every level and near all sleeping areas.

2. Test and maintain

Once alarms are installed, an important fire safety tip for renters and property owners is to maintain them by testing them regularly and replacing the batteries at least every six months. For a battery that lasts the life of the alarm and for convenient protection, install 10-year sealed battery alarms, like the First Alert 10-Year Sealed Battery Smoke and CO Alarm. 10-Year sealed battery alarms eliminate the need to replace the batteries and late-night battery chirps for a decade.

3. Alarms don't last forever

Be sure to replace outdated units. If you cannot remember the last time you installed an alarm, chances are, it's time to replace it. Alarms are on duty 24/7 and need to be replaced every 10 years.

4. P.A.S.S. the fire extinguisher

Beyond alarms, having fire extinguishers – and knowing how to use them – is an important fire safety tip for renters to help maintain a safe residence. When you need to act quickly, a simple way to remember how to use a fire extinguisher is with the acronym P.A.S.S. Simply pull the pin, aim the nozzle at the base of the fire, squeeze the trigger and sweep from side to side. Place fire extinguishers in common areas such as the kitchen, the garage and on every level of the home. Once your home is properly equipped, check to make sure that they're in working condition and are not damaged, dented or rusted.

Properly installed and regularly maintained fire safety equipment is key to maintaining a safe household.

Source: firstalert.com

What are the Origins of St. Patrick’s Day, the patron saint of Ireland. Born in Roman Britain in the late 4th century, he was kidnapped at the age of 16 and taken to Ireland as a slave. He escaped but returned about 432 ce to convert the Irish to Christianity. By the time of his death on March 17, 461, he had established monasteries, churches, and schools. Many legends grew up around him—for example, that he drove the snakes out of Ireland and used the shamrock to explain the Trinity. Ireland came to celebrate his day with religious services and feasts.

St. Patrick's Day

It was emigrants, particularly to the United States, who transformed St. Patrick’s Day into a largely secular holiday of revelry and celebration of things Irish. Cities with large numbers of Irish immigrants, who often wielded political power, staged the most extensive celebrations, which included elaborate parades. Boston held its first St. Patrick’s Day parade in 1737, followed by New York City in 1762. Since 1962 Chicago has colored its river green to mark the holiday. (Although blue was the color traditionally associated with St. Patrick, green is now commonly connected with the day.) Irish and non-Irish alike commonly participate in the “wearing of the green”—sporting an item of green clothing or a shamrock, the Irish national plant, in the lapel. Corned beef and cabbage are associated with the holiday, and even beer is sometimes dyed green to celebrate the day. Although some of these practices eventually were adopted by the Irish themselves, they did so largely for the benefit of tourists.

Happy St. Patrick's Day from Lallis & Higgins Insurance!

Source: britannica.com/

Are you REAL ID ready? On May 7, 2025, U.S. travelers must be REAL ID compliant to board domestic flights and access certain federal facilities.

Beginning May 7, 2025, every air traveler 18 years of age and older will need a REAL ID compliant driver’s license or identification card, or another TSA-acceptable form of identification, for domestic air travel and to enter certain federal facilities. TSA publishes a list of its acceptable identification documents on its website at tsa.gov/real-id.

Are you cleared for takeoff?

If you want to use your license or ID card to fly, gather your REAL ID required identity documents – most customers need to show just four documents* proving lawful presence in the United States, their SSN, and residency in Massachusetts.

Customers who have changed their name need to show additional proof documents. Do you need more information? You can find it here.

Mass.gov

Pests in a rental property can cause conflict between tenants and landlords.

Below is a helpful guide to pest management in rental properties for landlords and property managers. Questions about who is responsible (and should pay) for pest control and how to tackle a pest infestation, protect your property and save money are answered below.

Pest management – an issue that can’t be swept under the carpet

When you are a landlord or a property manager, sooner or later, you’ll be contacted about the presence of pests on your property. Regardless of who is responsible for the pest infestation, it’s crucial to address the situation quickly. If left unchecked, pests can cause structural damage to the property, recurrent complaints by tenants, possible turnover of renters, loss of revenue, and health issues for people and their pets.

Is pest control a landlord’s or tenant’s responsibility?

In rental properties, the landlord or property manager is responsible for pest control unless they can prove the tenant caused the infestation. However, each state has different legislation that you should refer to before turning down your tenants’ requests or taking legal action against them. You should also check if there was a pest control clause in the lease agreement you could enforce.

The landlord or property manager is responsible for keeping common areas in a clean and safe condition. Organizing rubbish bin collections and large pick-ups are part of the property owner’s responsibilities. Failing to keep the common areas free of rubbish can be used as ammunition by tenants, as unsanitary and untidy conditions can attract and harbor pests.

Who pays for pest control, the landlord or the tenant?

Once you have determined who is liable for pest control, the tenant or the landlord, the responsible party should cover the financial costs. If the landlord can prove that the tenants’ living conditions are responsible for the infestation, the bill falls to the renters. However, since time is of the essence, it’s better to cover the costs first and sort out the financial issue later if the tenants push back on paying for the extermination.

Preventative pest control in multi-family buildings is often an expectation and responsibility of HOAs and condo associations. If a pest control plan for the building isn’t in place, the tenants will likely use this to void any financial responsibility. So, if you manage or own an apartment block or large building, sign up for a regular pest control plan to safeguard your property and your finances.

Can you evict a tenant for causing a pest infestation?

In most U.S. states, you cannot evict a tenant on the grounds of being responsible for a pest infestation. You can charge them for the pest control intervention and issue a “notice to comply or quit” to warn them that they are in violation of the lease agreement and will be evicted if the situation isn’t fixed.

Check your State Laws, but, generally speaking, you will need to go to court and prove that living conditions are causing a health hazard or extensive property damage to evict a non-compliant tenant. As a landlord or property manager, you should consider alternative solutions to litigations first, as you will likely resolve the issue in a shorter time frame.

What to do if your tenants report a pest infestation in the rental property?

So, you just received a distress call from a tenant reporting ants, bed bugs, cockroaches, or other unsightly pests. What should you do next?

Can you take matters into your own hands?

If you are the building superintendent, property manager, or landlord, your first reaction might be to exterminate the critters yourself, but you would be breaking the law by doing so.

There are specific regulations and laws around the use of pesticides in all settings, including residential properties. A person may only apply pesticides to the individual dwelling unit (e.g., house or apartment) in which they reside unless they are a certified commercial applicator. You should call a professional pest control company as soon as possible.

Organize a professional pest control visit

Regardless of who is responsible, your first action should be eradicating the pest. Always be prepared to front the bill for pest problems, so they are resolved quickly. A good rental property expense budget should always include preventative maintenance and emergency measures to avoid nasty surprises when fighting pest infestations.

During the process, keep the tenant informed of the progress in witing. This way, if there is any dispute later on regarding the timeliness of your actions or communications, you will be standing on solid footing.

How much time does a landlord have to take care of a pest infestation?

It’s essential to act swiftly once you have been notified of a pest problem in your rental property. You should at least book the visit from a pest control company within one to two days. If you take too long, your tenant can take actions such as withholding rent, moving into temporary housing, or breaking the lease.

Even if you think you shouldn’t be paying for it, it is best to be proactive about the infestation.

Source: Hawkspestcontrol.com

Preventing pest infestations is easier and cheaper than eradicating one. Here are three things you should be doing to keep your rental property pest free.

1. Regular visits and inspections

Inspect your rental properties at least yearly. Monitor the condition of the interiors and check for any entry points pests might use. If there is an outdoor area, ensure the vegetation is well-maintained, and you can’t see pest droppings on the ground. Tidiness and cleanliness are great pest-deterrents, and a landlord’s visit often results in the tenants doing a deep clean. If the area is prone to pest infestations or you have had issues with that property before, consider bringing a pest control specialist with you on these visits.

2. Pest prevention education

When signing the lease, talk to the tenants about their responsibilities and how they can avoid pest infestations. Forming a genuine connection during a face-to-face conversation helps them feel responsible for the property they live in, which can encourage tenants to take better care of the rental. When a new occupant moves in, it is the perfect time to go over scenarios in which they will be held accountable for any pest control cost incurred and which actions are to be avoided as they attract common pests.

3. Preventative pest control spraying

Don’t leave seasonal pest control up to the tenant. It might not get done at all or not to your satisfaction. Protecting your property from any serious damage caused by invasive pests is in your best interest. Put an agreement in place with your local pest control experts to regularly visit your property and prevent any pest invasion from developing. If you are working with or considering hiring a property managing agency, ask them what type of pest control they do. A small recurring expense can result in significant savings down the line.

Source: hawxpestcontrol.com