Skip to main content

Home/ Hospitality Technology/ Group items tagged threats

Rss Feed Group items tagged

Filter: All | Bookmarks | Topics Simple Middle
augu010

5 Best Practices to Prevent Insider Threat - 0 views

insights.sei.cmu.edu/...to-prevent-insider-threat.html

best practices practices threat hospitality software technology

shared by augu010 on 15 Feb 20 - No Cached
  • Insider threat continues to be a problem with approximately 50 percent of organizations experiencing at least one malicious insider incident per year, according to the 2017 U.S. State of Cybercrime Survey.
  • While intellectual property (IP) theft, IT sabotage, fraud, and espionage have continued to appear as the primary forms of malicious insider threats, new research has led us to understand the patterns related to unintentional insider threats. These threats represent a significant risk for organizations and potential attack vectors for malicious insiders and external adversaries.
  • Know and protect your critical assets Develop a formalized insider threat program Deploy solutions for monitoring employees actions and correlating information from multiple data sources Clearly document and consistently enforce policies and controls Incorporate malicious and unintentional insider threat awareness into periodic security training for all employees
  • ...18 more annotations...
  • The trust that organizations place in their workforce can leave them vulnerable to malicious insiders, who often use particular methods to hide their illicit activities.
  • Current technology allows seamless collaboration, but also allows the organization's sensitive information to be easily removed from the organization. A complete understanding of critical assets (both physical and logical) is invaluable in defending against attackers who will often target the organization's critical assets.
  • Critical assets can be both physical and logical and can include facilities, systems, technology, and people. An often-overlooked aspect of critical assets is intellectual property.
  • Formalized and Defined Program:
  • Organization-wide Participation:
  • versight of Program Compliance and Effectiveness:
  • Confidential Reporting Mechanisms and Procedures:
  • Insider Threat Incident Response Plan:
  • ommunication of Insider Threat Events:
  • Protection of Employees' Civil Liberties and Rights:
  • Policies, Procedures, and Practices that support the InTP:
  • Data Collection and Analysis Techniques and Practices:
  • Prevention, Detection, and Response Infrastructure:
  • Insider Threat Practices Related to Trusted Business Partners:
  • Insider Threat Integration with Enterprise Risk Management:
  • Organizations should ensure policies and controls provide: concise and coherent documentation, including reasoning behind the policy, where applicable consistent and regular employee training on the policies and their justification, implementation, and enforcement Organizations should be particularly clear on policies regarding acceptable use and disclosure of the organization's systems, information, and resources use of privileged or administrator accounts ownership of information created as a work product evaluation of employee performance, including requirements for promotion and financial bonuses processes and procedures for addressing employee grievances
  • wareness training for the unintentional insider threat should encourage employees to identify potential actions or ways of thinking that could lead to an unintentional event, including level of risk tolerance--someone willing to take more risks than the norm attempts at multi-tasking--individuals who multi-task may be more likely to make mistakes large amounts of personal or proprietary information shared on social media lack of attention to detail
  • Our intent was to develop a single definition for insider threat that covers malicious and non-malicious (unintentional) insider threats covers cyber and physical impacts applies to both government and industry is clear, concise, consistent with existing definitions of 'threat', and broad enough to cover all insider threats
  • augu010 on 15 Feb 20
     
    This article goes into detail about various safe practices that can prevent cyber threats. Policies and procedures must be created in order to protect us from cyber crimes. Governments have worked hard to protect data from being hacked.
anonymous

How physical and cybersecurity threats converge around mass-participation events - - 0 views

www.enterprisetimes.co.uk/...ound-mass-participation-events

shared by anonymous on 23 Jun 21 - No Cached
  • any event that attracts large audiences also attracts those who want to make an illicit profit, cause disruption, or inflict physical harm.
  • organisers have to build a strategy to identify, manage, and mitigate the physical and cybersecurity threats that can converge around mass-participation events. It’s essential to take a holistic approach as, ultimately, physical and cyber threats cannot be neatly separated into two distinct threat types.
  • The security team should include stakeholders from across the organisation to bring the right intelligence into focus. Trust and transparency between different departments is essential if the team is to function effectively.
  • ...2 more annotations...
  • Threat actors use multiple channels, both on the surface and deep & dark web (DDW), to discuss and plan disruption and money-making schemes. It’s important to note, too, that the channels used by bad actors evolve all the time as they work to evade detection.
  • Security teams should certainly pay attention to previous incidents and successful tactics, but must build their strategy around the very latest intelligence.
  • anonymous on 23 Jun 21
     
    Physical and cyber security must coexist at mass participation events as threats can be in both forms. Organizers must create strategies to identify, manage, and mitigate these threats that can devastate events. This can be done with a multi-disciplinary security team and clear visibility to build intelligence. Information sharing and private sector engagement are also important tools within this process.
msoma003

HNN - 4 cyber security threats looming over hotels - 0 views

www.hotelnewsnow.com/...ty-threats-looming-over-hotels

shared by msoma003 on 24 Mar 18 - No Cached
  • The world of cyber security is seemingly in a state of constant flux, making the sources of possible threats hard to nail down for hoteliers.
  • The world of cyber security is seemingly in a state of constant flux, making the sources of possible threats hard to nail down for hoteliers.
    • msoma003
      msoma003 on 24 Mar 18
       
      Always changing
  • The velocity of change of threat landscape is very challenging for organizations.
  • ...11 more annotations...
  • But the practice is growing more and more sophisticated, panelists said, and phishing attacks are increasingly targeting high-ranking executives, including those in the hotel industry.
  • without checking with multiple sources and having face-to-face conversations.
  • In such phishing emails, the scammers will order subordinates to authorize large wire transactions under the guise of the transfer being for some sort of acquisition or other major transaction.
    • msoma003
      msoma003 on 24 Mar 18
       
      An employee will follow the orders from their boss
  • projects (they’ll do), along with the methods and styles of communication
    • msoma003
      msoma003 on 24 Mar 18
       
      They study the target, this takes time and sophistication
  • take over the email accounts
  • Ransomware is the practice of finding some vulnerability in a company’s systems to abduct their information or the functions of those systems and then keep it hostage until someone gets a payoff.
    • msoma003
      msoma003 on 24 Mar 18
       
      This is new but it can cost the firm a lot of money
  • breach of your point-of-sale systems and loss of customer payment card information.
    • msoma003
      msoma003 on 24 Mar 18
       
      Most common and what most consumers are scared of
  • extent of your insurance coverage in the case of such an attack
    • msoma003
      msoma003 on 24 Mar 18
       
      Many managers do not look at this
  • Braun called point-of-sale attacks the single biggest cyber security threat to the hotel industry.
  • denial of service, or DDoS attacks
  • hijacked and then used to send little pulses to bring down systems.”
    • msoma003
      msoma003 on 24 Mar 18
       
      A firm can be attacked by all sources
  • msoma003 on 24 Mar 18
     
    This article discussed some of the biggest cyber security threats to the hotel industry. One of the biggest threats is that of the POS system, this is not new but we should still watch over it. Another threat that is old is a phishing scam the scams are getting more sophisticated now, hackers get into the email accounts of executives and order large transactions to be made. Internal protocols cannot wipe of the hack but can minimize the risk of employees falling for the fake emails. Ransomware and DDos are also hacks though not as common they still carry big risks.
Yaping Li

Hotel Security: Evolving Security Threats - 0 views

www.hotel-industry.co.uk/...hotel-security-threats

shared by Yaping Li on 02 Nov 12 - No Cached
  • Ensuring the safety of your guests is of paramount importance and it is essential to have robust hotel security measures in place.
  • Hoteliers should consider the utilisation of board-certified security consultants and vendors as they will have critical security insight about your property.
  • Yaping Li on 02 Nov 12
     
    This article analyzes the importance of hotel security by asking the questions to Farina and Associates hotel security expert, Philip Farina. It shows the key security threats that hoteliers currently face: it include fire, weather, food poisoning and tampering, fraud, data theft and of course, the terrorism element, to name a few. It also shows the nature of threats changed in recent years and the impact of security threats for the hoteliers. In addition, the expert suggests that the hoteliers should consider the third-party companies to improve hotel security. And it also lists the steps that the hoteliers can take immediately to improve their hotel security.
Grant Beck

FBI: Beware Of Malware Installed Via Hotel Networks - Forbes - 0 views

www.forbes.com/...e-installed-via-hotel-networks

shared by Grant Beck on 25 Jan 13 - No Cached
  • fake software updates booby trapped with malware that are being pushed through hotel internet connections .
  • malware that are being pushed through hotel internet connections.
  • Grant Beck on 25 Jan 13
     
    This article brings to light security threats that are transfered via hotel networks. Fake software updates are used to hide malware which is installed on the computer when the update is accepted. The FBI offers tips on how to avoid being exposed to this after data on several hundred firms was stolen by hackers. The hackers broke into Marriott International Inc.'s records and had access confidential information. This article is important because firms have the responsibility of providing security for the clients as well as themselves. It is important to be aware of threats like this and of how it can be avoided so that the firm isn't put in a bad situation and have to deal with stolen information. With mobile devices and wireless networks becoming more common these types of threats need to be taken into consideration. Most users don't read the fine print or consider where software updates are coming from, especially if it looks like the source is a hotel they are staying at. This makes it even more critical that the hotel is aware of and blocking these threat because claiming that it was done without the knowledge of the hotel may not always be enough and looks badly for the security.
armanyleblanc767

Data Security in Hospitality: Risks and Best Practices - 0 views

hospitalityinsights.ehl.edu/-in-hospitality-best-practices

technology hospitality hotel software business tech

shared by armanyleblanc767 on 14 Mar 20 - No Cached
  • Best practices for companies in the hospitality sector to protect data include:
  • Always encrypt payment card information. Operate a continuous training program in cybersecurity to maintain a well-trained workforce. Always adhere to relevant regulations, such as PCI DSS. Use cybersecurity measures such as firewalls, network monitoring, anti-malware, and traffic filtering to protect against common threats. Conduct tests against your organization’s cybersecurity defenses in which you mirror the behavior of an actual hacker. Know where your data is and enforce the principle of least privileges to limit access to sensitive information.
  • groups may use different computer systems to store information, and the information can also frequently move across those systems.
  • ...23 more annotations...
  • five of the biggest data security concerns in the hospitality industry and highlights some best practices for protecting hospitality data.
  • Data Security Concerns in Hospitality
  • complex ownership structures
  • From the perspective of cybercriminals, hospitality appears to offer an ideal target vector for conducting crimes such as identity theft and credit card fraud due to the existence of multiple databases and devices containing both Payment Card Information (PCI) and Personally Identifiable Information (PII).
  • challenge to maintain teams of well-trained staff.
  • t was reported in 2017 that out of 21 of the most high-profile hotel company data breaches that have occurred since 2010, 20 of them were a result of malware affecting POS systems.
  • can go unnoticed for months.
  • High Staff Turnover
  • In the U.K., for example, the job turnover rate in hospitality is as high as 90 percent.
  • Reliance on Paying By Card
  • t involves employees selling data to third parties without the knowledge of the organization that employs them.
  • Insider Threats
  • Compliance
  • Hotels, motels, resorts, and rented apartment complexes all gather and electronically store a range of sensitive personal guest data, such as names, phone numbers, addresses, and credit card details.
  • The high level of turnover and high degree of staff movement between different locations makes it a real challenge to maintain teams of well-trained staff
  • Each of these groups may use different computer systems to store information, and the information can also frequently move across those systems.
  • ospitality appears to offer an ideal target vector for conducting crimes such as identity theft and credit card fraud due to the existence of multiple databases and devices containing both Payment Card Information (PCI) and Personally Identifiable Information (PII).
  • ybercriminals use this reliance on cards to infect point-of-sale (POS) systems with malware that steals credit and debit card information by scraping the data
  • A case in point was the Wyndham Worldwide breaches of 2008 and 2010. Hackers gained access to the systems of an individual operating company through easily guessed passwords, and the attack easily proliferated through the entire corporate network, with the result that 619,000 customers had their information compromised.
  • While GDPR protects individual data within the EU and EEA, its ramifications have rippled through industries globally, and organizations are realizing the need to put greater compliance measures in place. PCI DSS is another important global regulation that protects credit card data, and fines for non-compliance begin at $500,000 per incident. The risk here is not just to data security but to the future survivability of hospitality companies, many of which would not be able to absorb the s
  • This type of data risk is more subtle and it involves employees selling data to third parties without the knowledge of the organization that employs them
  • Always encrypt payment ca
  • rd information. Operate a continuous training program in cybersecurity to maintain a well-trained workforce. Always adhere to relevant regulations, such as PCI DSS. Use cybersecurity measures such as firewalls, network monitoring, anti-malware, and traffic filtering to protect against common threats. Conduct tests against your organization’s cybersecurity defenses in which you mirror the behavior of an actual hacker. Know where your data is and enforce the principle of least privileges to limit access to sensitive information.
  • duyingli on 14 Mar 20
     
    This article highlights several important security issues in the hospitality industry, followed by the practice of protecting data from loss. The data structure of the hotel industry is complex, customers mainly use bank cards to pay, and the staff turnover rate is high. There are certain internal threats. In order to solve these problems and avoid data loss, it is not enough to strengthen network security. It is also important that employees are trained and familiar with and comply with relevant regulations.
  • ...3 more comments...
  • cdamo003 on 23 Feb 22
     
    Data security is a major issue in the hospitality industry. A lot of personal information is stored on the computers specifically credit card information of the guests staying at the hotel. It is the responsibility of the hotel to ensure that the data is protected. High turnover rate in the industry can make this an even bigger challenge. Ensuring that your staff is properly trained to ensure the highest level of security is maintained is highly important.
  • Danaisy Abascal-Yero on 17 Jun 22
     
    This article speaks about the data security concerns in hospitality. Restaurants, hotels, and other companies in the hospitality sector often have complex ownership structures in which there's a franchisor and a management company that acts as the operator. Businesses use different computer systems to store information. The nature of the hospitality industry is such that it is extremely reliant on cards as a form of payment. Cybercriminals use this reliance on cards to infect point-of-sale (POS) systems with malware that steals credit and debit card information by scraping the data. A vital part of protecting data is training staff to securely gather and store personal information. Well-trained staff also know how to recognize social engineering attempts and they understand an organization's compliance requirements. Data security risks in the hospitality industry extend far beyond the reputation hit that a hotel can take if guests' data is compromised. Industry and political regulators are becoming stricter in governing how organizations process and store personal data. Some of the best practices for companies in the hospitality industry to use are: always encrypt payment card info, operate training programs in cybersecurity regularly to keep everyone informed, adhere to regulations, know where the data is, and enforce limit access to sensitive info, and more.
  • slain006 on 03 Oct 22
     
    This article explains how data security is at an all time high in the hospitality industry. Focuses on the 5 security concerns and what are some practices that leadership can help employees detect when someone is trying to hack into sensitive information. Also, making sure employees are in compliance with company policy when leaving the company if they have access to sensitive data and making sure employees are not using to their advantage when leaving the company.
  • kspac001 on 04 Oct 22
     
    Hospitality offers an ideal target vector for conducting Cyber crimes such as identity theft and credit card fraud due to the existence of multiple databases and devices containing both Payment Card Information (PCI) and Personally Identifiable Information (PII). Restaurants, hotels, and other companies in the hospitality sector often have complex ownership structures with an individual owner or group of owners, and a management company that acts as the operator. Each of these groups may use different computer systems to store information, and the information can also frequently move across those systems.
  • armanyleblanc767 on 23 Jan 23
     
    In this article, we learn about the top five data security risks as well as best practices to help prevent data breaches. According to the article, the hospitality industry is a prime target since it stores a vast amount of sensitive guest information like names, phone numbers, addresses, and credit card numbers. Some of the five risks included complex ownership structures, reliance on paying by card, and insider threats to name a few. In order to avoid these threats, the article suggest that companies become PCI compliant, use cybersecurity measures like firewalls, and know where exactly their data is stored.
vriverol

Cloud computing is booming, but these are the challenges that lie ahead | ZDNET - 0 views

www.zdnet.com/...-the-challenges-that-lie-ahead

shared by vriverol on 23 Jan 23 - No Cached
  • According to a recent report by tech analyst Gartner, worldwide consumer spending on public cloud services is forecast to grow 20.7% to $591.8 billion in 2023, up from $490.3 billion in 2022. That's compared to the 18.8% growth forecast for 2022.
  • The technical expertise needed to support the rapid adoption of cloud is something hiring managers need to think about as they head into 2023
  • The lack of cybersecurity staff – which is facing a dual challenge of extreme demand and high rates of stress and burnout-related attrition – has become particularly acute over the past year
  • ...4 more annotations...
  • Hewitt says the rise of hybrid cloud has raised specific challenges for security by creating more potential entry points for malicious code and similar threats.
  • ar threats.
  • Managing risks properly will require an empowered IT leadership that is given a say in strategic decision-making processes – something you'd might assume is a given, but continues to be a complaint among tech leaders.
  • "Higher-wage and more skilled staff are required to develop modern SaaS applications, so organizations will be challenged as hiring is reduced to control costs," wrote Sid Nag, vice president analyst at Gartner.
  • vriverol on 23 Jan 23
     
    As spending on cloud services jumps up almost 21% from last year, everything seems to be positive for this fast growing technology. It is, however, facing some challenges along the way that companies are going to need to take into consideration when spending on these services. Making sure they have a well qualifies and capable team to keep these services secure without burning them out is one of the concerns employees are bringing up in recent conversations. The security and safety of the data held by these services is very important, and needs to be prioritized in the day to day decisions made by all companies that utilize these services. Threats and malicious code taken advantage of by hackers is ever growing, and requires a constant, educated team with empowerment to protect to constantly watch out for these threats. Cloud computing still continues to grow, and is still a great advancement in business, but it also still needs to have it's threats carefully assessed and addressed to make sure it remains secure.
Gabriela Moreno

5 pressing hotel security concerns for 2012 - 2 views

www.hotelnewsnow.com/...tel-security-concerns-for-2012

SECURITY technology hotel business mobile

shared by Gabriela Moreno on 27 Mar 12 - No Cached
  • areas of top concern for 2012, the usual suspects still top the list: information-technology breaches and terrorism, hoteliers said.
  • 1. IT
  • 2. Terrorism
  • ...9 more annotations...
  • 5. Security as taboo
  • 3. Skimmers
  • 4. Liability and insurance fraud
  • A related threat is that of “skimmers,” or devices that catch credit card numbers when consumers use them for payment. The problem primarily is contained to the restaurant industry, but Callaghan is concerned it could spread to hotels.
  • Ironically, one of the main reasons terrorism tops the list is because it has become less of an issue in recent years, sources said.
  • “The greatest business risk, as I see it … is insurance fraud. And it’s the most expensive,” he said.
  • The hot-button issue within the realm of hotel-information technology is mobile and cloud technology.
  • “Liability” as a general label refers to hoteliers being held liable for the acts, which are often criminal, of third parties, the AH&LA’s Callaghan said.
  • “Security” still is something of a taboo in the global hotel industry, said Paul Moxness VP for corporate safety and security at The Rezidor Hotel Group, a Brussels-based hotel management company, with more than 400 hotels and nearly 90,000 rooms in its portfolio.
  • boyan yuan on 27 Mar 12
     
    1. IT The hot-button issue within the realm of hotel-information technology is mobile and cloud technology.A company could have tens of thousands of smartphones or laptops in the field at any given point-each a potential gateway to hackers and other criminals. To the problem the core principle is to provide end-to-end data protection with looking at cost and benefit and how it's supports the business. 2. Terrorism Ironically, one of the main reasons terrorism tops the list is because it has become less of an issue in recent years.Hoteliers need to keep their staffs and travelers mindful of possible threats, but they don't want to scare them. 3. Skimmers A related threat is that of "skimmers," or devices that catch credit card numbers when consumers use them for payment.The best prevention measure is to have an investigative team or third party on hand and making that known to employees. 4. Liability and insurance fraud These two related issues can double, triple, quadruple and quintuple corporate insurance premiums in the blink of an eye. The advisement is hoteliers to educate themselves on the issue, consulting with an attorney, if necessary. 5. Security as taboo "Security" still is something of a taboo in the global hotel industry.Hoteliers need to do a better job of "turning on the light" by talking about security openly and regularly at staff and association meetings, and hotel executives should insist their GMs make security a priority
  • ...9 more comments...
  • gaby bestulich on 31 Mar 12
     
    The first security matter that is brought up in this article is the cloud computing mobile devices on cell phones and laptops. With each device its own danger center of being hacked into a company's systems. The second point is "terrorists." Even though there has not been an issue with terrorists for about 10 years now it is still a big issue. According to the article companies are slacking on being vigilant because of the lack of activity.The third is what are know as skimmers, they are devices that gather information like credit card numbers.The last two issues are liability and security itself. Hotels claim to have security matters under control but when it comes to it, it is for show. Hotels need to buckle down on their security measures.
  • Fei Qi on 01 Apr 12
     
    "Terrorism and information technology breaches are familiar areas of concern on hotel security professionals' 2012 to-do lists."
  • Fei Qi on 01 Apr 12
     
    This article talked about five important hotel security concerns in 2012. As more and more new technology applied in the hospitality industry, IT professionals now face with challenges and risks associated with the new technology. When asked for the areas of top concern for 2012, hoteliers consider the usual suspects still top the list: information-technology breaches and terrorism. Hoteliers interviewed for this report recommended focusing on t five areas during 2012. The first concern is IT. The hot-button issue within the realm of hotel-information technology is mobile and cloud technology. Hotels have to protect data and information, especially the financial data. The second concern is Terrorism. Hoteliers need to keep their staffs and travelers mindful of possible threats, but they don't want to scare them. Thirdly, a related threat is that of "skimmers," or devices that catch credit card numbers when consumers use them for payment. The problem primarily is contained to the restaurant industry, but it could spread to hotels. The forth is Liability and insurance fraud. These two related issues can double, triple, quadruple and quintuple corporate insurance premiums in the blink of an eye. The fifth concern: Security as taboo. "Security" still is something of a taboo in the global hotel industry. Hoteliers need to do a better job of "turning on the light" by talking about security openly and regularly at staff and association meetings
  • Priscilla Moreno on 06 Aug 12
     
    In the top 5 hotel security concerns, number 1 is IT Security. Many businesses now are working off of laptops and smartphones which is making it easier for hackers to get in to and steal information. The same goes for hotels which are becoming more hands-free, eco-friendly which is working off of computers. The hotel industries are spending more and more money on making sure that they are secure from any hackers logging in to their computers to get their guests information.
  • Jenna Rashbaum on 25 Sep 12
     
    When thinking about hotel security we do not necessarily jump to anything other than terrorism or things like that but in this article it talks about five different things that can be issues in hotel security. IT is a large issue due to mobile and cloud technology. There are so many devices used that it is easy for hackers to get in the system. Terrorism is of course an issue even though it is not so prominent as it has been in the past. Skimmers are becoming more popular in hotels and restaurants having someone working on the inside who swipes the credit card though a machine before processing the payment to take all of the information off of it. Liability and Insurance Fraud can be something as little as stubbing a toe to a large workers comp case. This is the most expensive security issue hotels face. Security is still taboo in hotels because it scares some guests but at the same time once one thing happens all of the bad things will happen. If nothing happens than it will stay like that.
  • Jenna Rashbaum on 25 Sep 12
     
    This article makes great points that we do not think about as normal people. Before taking this class I would never think of all of these issues that could be happening to me while at a hotel or restaurant but anything is possible.
  • Jenan Williams on 27 Sep 12
     
    This article really made me think outside the box in order to enhance security, specially when in regards to IT, skimmers and liability/insurance fraud. All too common are people looking for ways to beat the system, we hear about it constantly but don't pay attention. From worker claiming worker's comp, foreign fingers and hazardous items in food, to Publix's ATM being the victims of attached skimmers and hackers attacking sensitive information transmitted by the world wide web. The best solution is to be proactive with training and technology and the benefits of being ahead of the curve.
  • Nelson Placa on 30 Sep 12
     
    Great Article...hotel security is so important not only for the company but also for its stakeholders and consumers. It is the responsibility of the company to ensure that the correct steps are in placed to ensure guests and company information is secure. At my current job, it is my responsibility to ensure that employees are not utilizing credit card devices to catch customer's credit card information. We also address any possible theft concerns with the employees to ensure these issues are avoided.
  • Jenan Williams on 30 Sep 12
     
    Great Article- There are so many security issues that we usually don't think about on a daily bases and this article highlights them well. Terrorism is something that has become rather laxed over the the last five years and usually the last security concern in the hospitality industry instead of the first that we process as a true risk. Concerns should also be focus on liability and insurance fraud from both guest as well as employees; a slip and fall and bed bugs can result in costly lawsuits.
  • Gabriela Moreno on 04 Nov 12
     
    1. ITAccording to the article, most mobile devices that are used for business are unprotected. Meaning that the devices if the device even have a password and if it does the password is not very complex. There could be thousands of employees accessing company information via the cloud through unprotected smart phones or other mobile devices. This could organizations at risk to hackers and other criminals  2.  TerrorismAlthough terrorist threats are less of a concern nowadays, that does not mean hotel managers should discontinue stressing the importance of security within their establishments. Keeping employees aware and diligent can prove to be a delicate assignment but it is a necessary of part of maintaining a safe work environment in the twenty-first century. 3.  SkimmersSkimmers are devices that steal credit card numbers when consumers use them for payment. Unfortunately, it is most commonly an employee on the inside who is committing the crime.  A third party investigation team will be needed to prove who is stealing from the establishment.  4. Liability and Insurance FraudCombined, these two issues could sky rocket a company's insurance costs through the roof. It is crucial that hoteliers be aware of the legal system and educates themselves on issues concerning liability. Both patrons and employees alike could potentially file claims against an establishment and entitlements can quickly get out of hand.    5.  SecurityDespite the best security measures, there is always the possibility of unforeseen danger. This fear of the unknown is a concern for hotel workers. To confront this fear of the unknown managers must regularly and openly discuss security with employees.  Security should be held as a top priority. 
  • Gaby Belardo on 04 Nov 12
     
    This article discusses five main concerns brought on by the current state of hotel security. I must say that some of this information surprised me. Something that especially surprised me was learning that mobile devices that are used for business hardly use passwords. The article states, "Amplifying the problem is the sheer number of devices, he added. A company could have tens of thousands of smartphones or laptops in the field at any given point-each a potential gateway to hackers and other criminals." This piece of information is very unsettling to me. How could such valuable information not be protected? The article suggests the solution to this problem is PCI DSS. Terrorism as number two on this list also surprised me because that is not something that would first come to mind for me. The article states that it is ironically on the list for becoming less of an issue. I suppose this reminds hoteliers to never let their guard down when it comes to issues of safety and security within the hotel. However, "skimmers" and liability on this list does not really surprise me. The article suggests that hoteliers be educated about these issues to protect the hotel against them.
dstic005

Information Security Is a Serious Problem for Hospitality and Other Industries | .TR - 1 views

www.tourism-review.com/d-other-industries-article2201

technology hospitality tech software business

shared by dstic005 on 18 Jun 15 - No Cached
  • it is of the utmost importance that we constantly and actively evaluate and update security plans, strategies, and practices to keep up with threats today. Without this flexible approach, companies will be ill prepared for a security attack or threat. These attacks are becoming increasingly more effective, complicated, and damaging for companies.
  • the top three obstacles blocking improved security were insufficient funding, a lack of future vision for business needs, and a lack of support and leadership from the top executives.
  • Gary Loveland, another Cybersecurity lead with PWC Advisory, noted that you cannot keep up with today's threats and challenges if you are using yesterday's technology
  • ...3 more annotations...
  • Bob Bragdon, publisher of CSO, noted that with today's increasing threats, all organizations including the hospitality industry must be ready with new technologies and plans that will keep an eye on their network. They must watch all applications and data for odd or anomalous activity that may point toward a security threat.
  • According to the global survey, which reached over 9,600 executives, security incidents that were detected in the past year have drastically increased. At last check, the estimated percentage was 25 percent. On that note, it was seen that those who were unaware of the volume of security incidents doubled.
  • Many hotel executives are beginning to increase security spending and safeguards, processes, and strategies. However, modern day foes continue to outrace the upgrades, according to the Global State of Information Security Survey 2014, as released by PWC US in conjunction with CIO and CSO magazines.
  • lalle044 on 18 Jun 15
     
    This article talks about the difficulties surrounding information security in the hospitality industry. Many hotels are increasing their spending on this security but they are falling short of what hackers can accomplish. A survey of 9,600 hospitality executives revealed that security incidents increased by 25% in one year. It is essential for companies to renew their security policies and increase their security budgets if they want to get a handle on the threats that are out there with cloud computing and more smart phone and tablet use the technology is just waiting for hackers to have fun.
  • ...2 more comments...
  • brittsengl on 01 Oct 16
     
    I liked this article because of how clear it discussed the possible issues that can and have occurred in the hospitality industry with security. It mententioned strategies and plans that must be taken, along with discussing how to be prepared for new technologies.
  • brittsengl on 01 Oct 16
     
    I liked this article because of how clear it discussed the possible issues that can and have occurred in the hospitality industry with security. It discussed strategies and plans that must be taken, along with discussing how to be prepared for new technologies.
  • brittsengl on 01 Oct 16
     
    I liked this article because of how clear it discussed the possible issues that can and have occurred in the hospitality industry with security. It discussed strategies and plans that must be taken, along with discussing how to be prepared for new technologies.
  • dstic005 on 22 Oct 18
     
    Security is something that must be worked on all the time. It must have funding and support of management. The threat has grown because of smart phones, tablets and cloud technology. Hackers will always try to find a way to circumvent the security so it must be updated and reviewed.
ahart054

How Hotel Cybersecurity Threats Have Changed During the Pandemic - 0 views

www.costar.com/...ve-changed-during-the-pandemic

hotel cybersecurity threats

shared by ahart054 on 23 Jun 21 - No Cached
  • Hotel industry cybersecurity experts say both the "nature and velocity" of cybersecurity threats have changed for the worse during the course of the COVID-19 pandemic.
  • the onset of the pandemic spurred many bad actors to quickly pivot and use "COVID as a theme and as a way to try to infiltrate their way into hotels."
  • He said the volume of threats and who they threatened also shifted.
  • ahart054 on 23 Jun 21
     
    Cybersecurity has changed both in nature and velocity during the COVID-10 pandemic. Hackers used COVID-19 to contact hotels under the guise of safety and security suggesting products to sell. There have also been an increase in phishing attacks at the outset of the COVID-19 pandemic. The threats targeted financial instruments such as loyalty points conduct fraud, to credit card information. The good news is both Hyatt and Choice hotels have executives that buy into the importance of cybersecurity.
asant318

Ransomware: One of Hospitality's Biggest Threats in 2017 | News | Hospitality Magazine ... - 0 views

hospitalitytech.com/pitalitys-biggest-threats-2017

shared by asant318 on 12 Jul 18 - No Cached
  • attack made headlines for locking guests out for their rooms
  • discuss how ransomware can affect the hospitality industry and what hotels and restaurants should consider to protect themselves from future cyber attacks.
  • Travelers may be annoyed, but for the hotel, ransomware can be a major business disruption.
  • ...10 more annotations...
  • The cyber threat has been used to target a variety of businesses from hospitals to retailers and now the hospitality industry
  • , businesses need to always be ready for a breach. Every business should have an action plan in place to prevent their company from being the next victim of ransomware or any other cyber security threat.
  • pirated software, file attachments, web links, and suspicious emails.
  • keep additional devices from being infected.
  • best practices for any company to employ are regular backups and a tested disaster recovery plan
  • Using anti-malware software is a necessary start, but it will not stop everything – especially rogue software downloaded by employees
  • important to act quickly by segmenting portions of the infected network and removing devices to try and prevent the problem from spreading.
  • install ransomware protection
  • malicious software will continue to rise as businesses and consumers become more dependent on the internet for everyday needs.
  • it’s important that businesses take proactive steps to protect not only company data, but the overall integrity of the company network from hackers.
  • asant318 on 12 Jul 18
     
    The article discusses ransomware attacks on hospitality properties. A 2016 attack left guests locked out of their rooms but the threat could affect different areas of a hospitality business and cause significant disruption to their business. Properties need to be prepared for a security breach with an action plan to prevent cyber-attack. The article points out that it's important to act quickly to segment the network and try to prevent any new devices from being infected. Best practice recommends regular backups and a recovery plan, using anti malware software and being cautious with employee installed software. The most important thing a company can do is to be proactive and prepared for an attack.
kelseybarton

Protecting the Hospitality Sector With Security Intelligence - 1 views

www.recordedfuture.com/urity-intelligence-hospitality

hospitality security intelligence technology software

shared by kelseybarton on 29 Sep 20 - No Cached
  • A decade ago in 2009, hospitality was — by some reports — the most widely attacked industry of all. And while other industries have now surpassed it, a 2019 report by Trustwave still ranks hospitality as the third most-breached industry, accounting for 10% of all breaches.
  • the average hospitality data breach costs $1.99 million to contain, at a cost per record of $123. These high costs are due in part to the time needed to adequately respond to a breach. On average, it takes 200 days to identify a hospitality data breach and a further 75 days to contain it
  • attacks targeting the hospitality industry are mostly aimed at stealing payment card data.
  • ...10 more annotations...
  • Why Is Hospitality So Hard to Secure?
  • 1. They often have large, complex networks.
  • 2. Customers are onsite — and attackers could be too.
  • 3. Staff churn.
  • 4. Franchising.
  • 5. Third-party risk.
  • Protecting the hospitality industry from cyber threats isn’t an easy job. Security professionals in the industry are tasked with defending highly complex networks with many endpoints against a constant barrage of attacks and a constantly churning workforce. On top of all of that, they have limited security resources to work with.
  • Comprehensive security intelligence helps security teams identify unknown threats to the organization, and make informed decisions about how and where to allocate time and resources for maximum effect.
  • Threat intelligence provides the context analysts need to quickly distinguish between valuable alerts and false positives, drastically improving their ability to respond to genuine cyber threats.
  • Threat intelligence can help security teams drastically reduce the time needed to identify and contain a breach by alerting them the moment stolen assets (e.g., guest or passenger data) are made available for sale via the dark web.
  • kelseybarton on 29 Sep 20
     
    (1 of 2) "The hospitality sector has always been a popular target for cyberattacks." This is the first line of this Recorded Future article published in January. The article discusses breaches that happened for both Marriott and British Airways and how this is a regular occurrence in the industry as it is such a big target with so many possible points that can be attacked. While the statistics for the hospitality industry have improved greatly in the last decade, in 2019, they were still accounting for 10% of all breaches. Not only does a breach affect the way an organization operates, but also it also severely effects their bottom-line and takes quite a but of time for them to recover. "According to Ponemon's 2019 Cost of a Data Breach Report, the average hospitality data breach costs $1.99 million to contain, at a cost per record of $123. These high costs are due in part to the time needed to adequately respond to a breach. On average, it takes 200 days to identify a hospitality data breach and a further 75 days to contain it." The article continues by stating that hackers are typically seeking payment card data when compromising the hospitality industry.
  • kelseybarton on 29 Sep 20
     
    (2 of 2) The article then discusses the many reasons why it is so difficult for hospitality-oriented companies to secure their assets versus other organizations of similar stature. Some of these reasons include the large, complex networks which are typically publicly accessible and contain many customers in the databases, the fact that customers are always onsite and so are attackers, the high turnover leading to inconsistent training and sharing of credentials, franchisers owning the responsibility of security yet not knowing much about it, and the risk associated with all of the various third parties the hotels do business with. While intelligence has come a very long, "security professionals in the industry are tasked with defending highly complex networks with many endpoints against a constant barrage of attacks and a constantly churning workforce… [AND] they have limited security resources to work with." Comprehensive security intelligence systems are now capable of protecting many aspects of the organization. Some of these updated features include responding rapidly to security incidents, blocking online brand abuse and impersonation, managing third-party risk, reducing breach containment times, and better allocating security resources. Property data security is so important to the hospitality industry. If a business does not take the proper precautions to protect their systems and their customers, then it could lead to a devastating event for the business. While security intelligence has progressed within the last decade, a business needs to make sure that they have chosen a reliable agent to partner with who will produce consistent service. If the business keeps up with their system updates and protections, they should not have to worry about their security system failing.
ldevaul

How the travel industry can fight back against cyberthreats | SmartBrief - 1 views

www.smartbrief.com/...ight-back-against-cyberthreats

security malware spam training hospitality COVID-19 hotel travel cyberthreats phishing Technology

shared by ldevaul on 11 Oct 21 - No Cached
  • Travel and hospitality businesses have become lucrative targets in recent years for cybercriminals who have stolen from the industries in attacks that often take more than half a year to identify.
  • In the past three years alone, the hotel industry has faced 13 serious attacks, according to an IntSights study.
  • The travel and leisure sectors suffered a 155.9% year-over-year rise in suspected online fraud attempts worldwide in the second quarter, according to a TransUnion study, compared with a 16.5% increase in overall alleged intrusions.
  • ...21 more annotations...
  • The hotel industry attracts cybercriminals because it handles so many financial transactions in so many countries.
  • The top threat to hotels is phishing, a scam in which hotel guests may receive fake phone calls claiming to be from the front desk. The caller could claim that there is an issue with the credit card on file and that they need to re-verify the payment method. 
  • DarkHotel hacks are another significant threat. These target travelers via hotel Wi-Fi. Digital certificates are sent to guests, like a familiar adobe update, which will retrieve sensitive information. Hotel chains are combating these hacks by suggesting that guests use a virtual private network.
  • Malware (malicious software) is something criminals email employees, under the guise of the attachment or link looking innocent or legitimate. But when the user opens the file or clicks on the link, their system (and more) can be hacked into by the criminal.
  • IT department should routinely update operating systems and back up data and files, and every employee should double-check sources when asked for software administrative permissions. Also, strong firewalls can limit bad traffic and provide security. 
  • Software and hardware can help prevent breaches, but employee training is also an essential part of any hotel’s cybersecurity.
  • In 2018, a Marriott reservation system was hacked. More than 500 million customer records, including credit card information and passport numbers, were stolen. The company said the hack went back four years prior to the discovery and, when it was noticed, the company started using computer and mobile device monitoring software.
  • “Guests can enroll in a service called WebWatcher, which monitors the sites where personal information may be shared and alerts guests if evidence of their personal data is found,”
  • Hotels are not alone in being targeted by cybercriminals: The airline industry has faced serious cyberattacks as well, and many airlines still aren’t equipped to handle them.
  • only around 35% of airlines and 30% of airports are prepared for cyberattacks.
  • "The proliferated effect of the attack on SITA is yet another example of how vulnerable organizations can be solely on the basis of their connections to third-party vendors,"
  • The aviation industry faces dangers such as ransomware and distributed-denial-of-service attacks. Following the SITA attack, HackerOne solutions architect Shlomie Liberow stressed that airlines need to prepare for the worst. 
  • traditional enterprises like airlines have always been an attractive target since few are digital-first businesses, and therefore have relied on legacy software, which is more likely to be out-of-date or have existing vulnerabilities that can be exploited."
  • The airline industry needs to keep third-party vendors in check when it comes to protecting information. Given the high stakes involved, experts suggest that blind trust is not an option. 
  • “You simply cannot know whether your third parties meet your company’s security controls and risk appetite until you’ve completed a full vendor security assessment on them,
  • It’s important to note that the best practice is not a ‘one-and-done’ activity, but through real-time, continuous monitoring.”
  • In 2015, hackers targeted Polish airline LOT’s ground operations system, affecting 1,400 passengers. The hackers made it impossible to create flight plans and flights. It was the first attack of its kind, and it caused concern about cyberattacks one day remotely taking control of planes.
  • To address the threat, the standard advice is to back up and store data in multiple places, including off your physical premises, and have one copy of it be offline
  • Multifactor authentication and long, complicated passwords will take longer to crack. Updating and patching systems regularly helps companies avoid being victimized when a new exploit is discovered.
  • Treating cybersecurity as a companywide concern, not an IT concern, encourages each employee to take ownership of their actions and knowledge and to seek help proactively instead of making an “innocent” mistake that costs the company millions of dollars.
  • Finally, companies should avoid simply throwing money at the problem: Not all cybersecurity solutions work together, which wastes money and increases the risk of a breach.
  • ldevaul on 11 Oct 21
     
    This article discusses ways that the travel industry can combat cyberthreats. The main cyber concern for hotels' is phishing, which is a scam that collects credit card information by pretending to be apart of a hotel's front desk staff. The article mentions that IT departments should do routinely updates to operating systems and back up data and files. Employees should also be trained to help prevent data breaches. The author briefly touched on what to do when your hotel system is hacked and even dives into how the airline industry is still very unequipped to handle cyberattacks and threats. This is a great read to learn how to keep up with best security practices in the hospitality and tourism industry.
amoon008

Tackling Security Threats In The Hospitality Industry | MetaCompliance - 0 views

www.metacompliance.com/...ts-in-the-hospitality-industry

security threats hospitality industry

shared by amoon008 on 27 Feb 22 - No Cached
  • The hospitality industry faces vast security threats, making it a natural target for cybercriminals because of the value and volume of personally identifiable information that these organisations hold.
  • Marriott, Radisson Hotel Group, InterContinental, Four Seasons, and Hilton Hotels are just some of the major corporations that have hit the headlines in recent years as a result of a data security attack.
  • approximately 55 million online hotel bookings are affected by fraudulent websites and call centers posing as hotel websites, according to the American Hotel and Lodging Association.
  • ...7 more annotations...
  • The majority of all cyber-attacks can be traced back to a phishing email that tricks the victim into divulging their credentials or downloading malicious malware.
  • A study conducted by Intel found that 97% of security experts fail at identifying phishing emails from genuine emails.
  • many hotels becoming completely digitalised in a bid to gain competitive advantage and keep up with online travel agencies such as Expedia and Hotels.com
  • Worryingly, ransomware is evolving into a new type of threat where cybercriminals are not just encrypting data but are also stealing it and threatening to release it on the internet
  • In recent years, hackers have been deploying new tactics and Distributed Denial of Service (DDoS) attacks have been growing in popularity. This type of attack is an attempt to make an online service unavailable by overwhelming it with huge volumes of traffic from multiple sources to cause great damage. This can include loss of data, loss of revenue, reputational damage, and a loss of customers.
  • According to a survey, almost half (44%) of firms have experienced a significant, business-altering data breach caused by a vendor.
  • With the hotel industry increasingly prone to malicious cyber attacks, there are a number of ways organisations can combat cyber security threats
Hanqing Yang

Taking Network Security to the Cloud - 1 views

hospitalitytechnology.edgl.com/...ork-Security-to-the-Cloud79643

shared by Hanqing Yang on 06 Sep 12 - No Cached
  • The biggest threat to network security at the hotel property level isn’t a lack of technology – it is the lack of resources to manage it.  A strong network security solution should combine cloud-based security configuration with plug and play installation of a firewall and IPS appliances.
  • The impact of a mass security approach is significant to hotel network operations. It could eliminate the need for on-site IT resources to configure and deploy security appliances. It could also provide much-needed network visibility across an entire portfolio of properties. Lastly, it would be instrumental in expediting large-scale security deployments and updates.
  • The challenge is that many hotels lack the IT resources to adequately stay on top of security.
  • ...3 more annotations...
  • They expect ironclad security that protects their entire “online” experience in the hotel, from online booking and iPad-enabled check-in to the wireless connectivity in their rooms.
  • The biggest threat to network security at the hotel property level isn’t a lack of technology – it is the lack of resources to manage it.
  • Ideally the firewall or IPS device should be shipped directly to the property where anyone (e.g. GM) can simply plug the device into the network
  • Yookyung Kim on 06 Sep 12
     
    Today's travelers expect a strong network security. The challenge is that many hotels lack the IT resources because of budget. As a result, IT functions are limited to making sure security patches are up to date and services are running rather than proactively identifying security threats and preventing. This article introduces cloud-based security system as a solution. With the network security system, IT headquarters can monitor and manage the entire network. Also, hotels can save the cost for on-site IT resources and security appliances. It was interesting that cloud-based security is a solution for network security when there are many opinions that cloud computing is not safe. 
  • wei xie on 05 Nov 12
     
    This article talks about the limitation of hotel network security issue, then introduce one solution to it. First of all, it mentions since the usage of Internet is growing big more than ever, customers has more attention and requirement on Network Security. Actually, staff of IT department spend most of their time on updating system and other mid-level support, while they should spend more time on proactively identifying security threats and preventing attacks. This happens due to finance and human source constraints. Lucky for us, there is already one effective solution, keyword, cloud computing. Buy applying cloud computing, IT staff only need set up firewall, configure security system on headquarter. After then configuration is done, they send out these IPS device to branch companies. The security system will automatically update through these devices, no more traveling between properties.
  • Hanqing Yang on 28 May 13
     
    While many hotels right now are keeping and tracking down their valued customers' information, lots of those hotels are facing security problems also. Customers expect ironclad security that protects their entire "online" experience in the hotel, from online booking and iPad-enabled check-in to the wireless connectivity in their rooms. In today's cyber threat environment, that makes the hospitality industry a desirable and lucrative target for attacks. This article mainly talked about how to strength hotel network security.It suggested that a strong network security solution should combine cloud-based security configuration with plug and play installation of a firewall and IPS appliances. Which can be described as Taking Network Security to the Cloud.The IPS device will automatically contact and authenticate to the installation cloud, retrieve its configuration, and then reboot into the hotel's network ready to protect.
Endrich Reveil

IBM Security Tool Can Flag 'Disgruntled Employees' - The CIO Report - WSJ - 0 views

blogs.wsj.com/...can-flag-disgruntled-employees

IBM security CIO employees

shared by Endrich Reveil on 22 Feb 15 - No Cached
  • A new International Business Machines Corp.IBM -0.15% security tool uses Big Data to help CIOs detect internal and external security threats in new ways—and can even scan email and social media to flag apparently “disgruntled” employees who might be inclined to reveal company secrets
  • The new tool, called IBM Security Intelligence with Big Data, is designed to crunch decades worth of emails, financial transactions and website traffic, to detect patterns of security threats and fraud.
  • the new platform, based on Hadoop, a framework that processes data-intensive queries across clusters of computers, will allow CIOs to conduct sentiment analysis on employee emails to determine which employees are likely to leak company data,
  • ...3 more annotations...
  • flagging workers who may be nursing grudges and are more likely to divulge company information.
  • The platform also helps companies protect against hacker attacks and fraud by allowing security personnel to look for patterns in past attacks
  • More and more companies are using Big Data to discover the pattern of security lapses as they struggle to keep up with emerging threats.
  • Endrich Reveil on 22 Feb 15
     
    I believe every business, especially if it is a huge corporation, should protect and control their company's data. A company's data falling into the wrong hands can be a huge drawback for the company, especially if it comes into contact with a competitor. This article explains how IBM have introduced a new security tool with Big Data to identify any suspicious internal and external security threats as well as flag any company secrets from displease employee's emails and their social medias. The new system can alert any frauds and risks from decade worth of emails, financial transactions, and websites. CIOs will be able to conduct a sentiment analysis on employees to see which worker is the most likely to expose company's information. Some can argue that employees have the right to post anything on their social media's accounts but if an employee still is employed by the company then it should be all bets off. The company should have all rights in making sure their information does not get leaked out by an employee who is simply having a bad day.
Henrique Rodrigues

Where Should You Be Spending Your Cybersecurity Budget? - 0 views

www.bitsighttech.com/...cybersecurity-spending

technology tech cyber software security budget hospitality hotel

shared by Henrique Rodrigues on 24 Mar 18 - No Cached
    • Henrique Rodrigues
      Henrique Rodrigues on 24 Mar 18
       
      This article focuses on what should be the goal on a cyber security budget. Cyber security has become a very sensitive matter these days and even though there is an in creasing number of software to protect the companies, there are also newer attacks going on. Therefore, how do we choose and evaluate what should be the focus of this budget? The article displays different threats and how companies should identify the most critical material and data that should be protected and how to do so. Many of the risks will come from the three main vectors: external threats, internal threats, or the supply chain threats. The importance of employee training, cyber insurance, risk management framework, and other allocations that the cyber budget should be geared for.
  • The goal of cybersecurity is to help mitigate or prevent a cyber attack that could cause significant harm to your business, your operations, your financial performance, or your customers.
  • But organizations with mature cybersecurity programs are increasingly aware of the fact that they cannot address every cyber threat since bad actors will continually find ways to hack and mine data. Instead, they choose to focus on preventing catastrophic attacks from taking place.
  • ...1 more annotation...
  • With this in mind, your cybersecurity budget should be geared toward identifying the most critical material risks to your organization which could be caused through cyber means—and reducing, mitigating, or transferring those risks.
irinatroitskaya

Hospitality: Shelter Your Business from Advanced Cyber Threats | Hospitality Technology - 0 views

hospitalitytech.com/usiness-advanced-cyber-threats

shared by irinatroitskaya on 03 Nov 17 - No Cached
  • According to Verizon’s 2017 Data Breach Investigations Report, accommodation was the top industry for point-of-sale intrusions.
  • Hospitality, whether hotels or restaurants, transact more credit cards than almost any other industry, making them an extremely attractive target.
  • The hospitality industry’s rapid push to digitalization means that it is still playing catch-up on the security front.
  • ...7 more annotations...
  • The 2017 Lodging Technology Study by Hospitality Technology found that 74% of hotels do not have breach protection and less than half use end-to-end encryption for cardholder data or use tokenization at the card swipe.
  • PoS systems are a weak security point for many networks as they are in constant use and often are not patched or updated.
  • Denial-of-Service attacks make up approximately 20% of hospitality cyber incidents.
  • Early detection is key to controlling attack costs and reputation damage.
  • Host- and network-based firewalls should be used as the first part of a layered security approach.
  • A good endpoint prevention stack consists of an antivirus solution to handle known threats and a prevention layer that effectively prevents unknown, advanced attacks.
  • No technology, however, can substitute for an overall culture of security.
  • irinatroitskaya on 03 Nov 17
     
    The article describes the main cyber threats that the hospitality companies face. Over past few years, nearly every major hotel group has been attacked. The same is true for the F&B industry. One of the reasons for that is that the hospitality companies are the ones that process credit card information more than in any other industries. Moreover, hotels and restaurants have many access points for the malware: from wifi networks to POS's. The attackers may also use the third party suppliers (for example, OTA's) to access the hotels' systems. Verizon 2017 Security Payment Report states that less than a half of all hospitality businesses have full credit card payment security compliance. The main type of the attack is POS intrusion. Denial-of-Service Attacks constitute about 20% of the total number. Although they are not so dangerous in terms of sensitive information, they can disturb the company's operations causing significant losses as well. Thus, the hotels and restaurants need to invest in early detection protection provided by the effective firewalls and antiviruses. However, it is also very important to understand that no technology may ever fully substitute the security culture of the company's employees. Many attacks are conducted due to the personal weaknesses of the associates answering the calls, for example. So, in my opinion, in addition to the cyber security systems, there should be appropriate personnel training as well as well elaborated procedure protocols.
teresaricks

Cyber Security In The Hotel Industry | protel - 4 views

www.protel.net/...hotel-cyber-security

shared by teresaricks on 01 Mar 21 - No Cached
  • And phishing isn’t the only strategy these computer thugs use, either. Just about every hotel in the world could be vulnerable to malware, ransomware, spam, hacking and social engineering. 
  • The argument for educating staff on cybersecurity is a simple one: if staff don’t know how to recognize a security threat, how can they be expected to avoid it, report it, or remove it?
  • the 2019 State of IT Security Survey found that email security and staff training were listed as the top problems faced by IT security professionals.
  • ...16 more annotations...
  • Yet, more than 30% of staff surveyed by Wombat Security Technologies didn’t even know what phishing or malware was. This is probably why scams like the Business Email Compromise (BEC) result in whopping losses of over $3 billion (according to the FBI).
  • But as humans, hoteliers make mistakes, they’re trusting of fake identities, tempted by clickbait, and vulnerable to other sneaky tactics used by criminals to gain access to company information.
  • Staff need cybersecurity training to protect themselves and the hotel against cyberattacks.
  • By making employees aware of security threats, the impact they might have on your business, and what procedures to follow when a threat has been identified, you’re strengthening the most vulnerable links in the chain.
  • The World Economic Forum in their latest report, The Global Risks 2019, puts cyber-attacks and data theft into the higher-than-average likelihood bracket during 2019.
  • To achieve these record levels of data breaches and cyber-threats, cybercriminals are focusing their attention on the manipulation of human behavior.
  • So how do we counter these threats? Education, education, education. 
  • Security awareness training is not a point event or solution, it is a process. Security awareness comes out of a series of ideas, thoughts, and preparations that are used to develop a holistic security awareness training program.
  • Identify the Specific Cybersecurity Needs of the Hotel/Property   
  • Include Cybersecurity Awareness Training During Onboarding
  • Cover Relevant Topics
  • Make Staff Cybersecurity Training An Ongoing Process
  • We all make mistakes and occasionally slip up. It is really important that staff know that they can come to you and that they are free to report problems without there being a risk of them losing their jobs. This will come from your personal management style. 
  • Cybersecurity is everyone’s responsibility, whether you are C-level, management, accounting, housekeeping, maintenance, or reception, it does not matter. Everyone needs to be made aware of the hotel’s individual cybersecurity policies, attitude, and culture. 
  • Continuously send reminders via email, Slack, or any other messenger your hotel may be using with reminders to change passwords, to update anti-virus programs, and with information about the latest phishing techniques.
  • If you create a culture of cybersecurity awareness within your organization, then the chances of your organization becoming a victim are greatly reduced.
  • teresaricks on 01 Mar 21
     
    This article stresses the importance of providing cybersecurity training to staff in the hospitality industry.
azephyr

Cybersecurity in Hospitality Industry - Types of Threats - Logsign - 0 views

www.logsign.com/...curity-in-hospitality-industry

cybersecurity

shared by azephyr on 01 Mar 21 - No Cached
  • implementation of electronic devices and similar conveniences also pose serious threats regarding the security of our sensitive information. That is why cyber security practices gain much more importance in the hospitality industry. I
  • The term cyber security is used to refer to the methods and practices that aim to defend devices, networks, servers, electronic systems and all kinds of data from ill intended attacks.
  • Cyber security professionals aim to keep such malicious intended individuals away from your systems.
  • ...7 more annotations...
  • Cyber security practices often involve the use of a tool or software such as antivirus programs, firewalls, anti malware software and such. In accordance with the needs and vulnerabilities of your organization, various cyber security solutions can be employed and configured. You can opt for getting professional help and/or hiring a team of cyber security professionals for this task.
  • In the past years, we have witnessed many hotels being victims of cyber criminals. Such incidents lead serious data leakages and hurt the reputation of the organization.
  • Customer Data/Identity Theft: When booking a hotel room, we share some of the most sensitive pieces information regarding us: Our name, address, payment information. That is why most hackers try to steal customer information from the hotels using malware, computer viruses and social engineering methods.
  • he term phishing refers to the techniques used to deceive and convince professionals to leak information. The most popular phishing techniques include fake web pages, phone calls, text messages and e-mails.
  • Darkhotel hacking: This technique involves hacking the hotel WiFi and steal information from the visitors.
  • If you want to protect your organization from cyber threats, first you need to inform your employees.
  • Secondly, you must invest in some bullet-proof cyber security software including but not limited to antivirus, antimalware and firewalls. You must also hire a team of IT specialists to ensure that your organization is protected 24/7.
  • kristenagosto21 on 01 Mar 21
     
    This article talks about the type of threats the hospitality industry can face, an explanation of cybersecurity, and how to protect your organization from cyber threats, especially phishing.
1 - 20 of 205 Next › Last »
Showing 20▼ items per page