Skip to main content

Home/ Hospitality Technology/ Group items matching "cyber" in title, tags, annotations or url

Group items matching
in title, tags, annotations or url

Sort By: Relevance | Date Filter: All | Bookmarks | Topics Simple Middle
7More

Cybersecurity and the hospitality industry - Las Vegas Review-Journal - 0 views

www.reviewjournal.com/...y-and-the-hospitality-industry Technology Hospitality software tech security cyber
shared by kteme001 on 21 Mar 18 - No Cached
  • 42 million visitors last year
  • nearly half of cyberattacks worldwide in 2015 were against small businesses with fewer than 250 workers.
  • the average consolidated total cost of a data breach is now $3.8 billion
  • ...3 more annotations...
  • A study by Verizon stated that 99 percent of breaches in 2014 were caused by known vulnerabilities with fixable patches.
  • all working together in an atmosphere that prioritizes data security
  • PCI and our partners are working together to educate our members, find solutions to prevent cybercrime and ensure our work-force and our patrons’ data remains secure.
  • kteme001 on 21 Mar 18
     
    This article highlights a meeting that will be held to gather the world's cyber security experts to discuss and troubleshoot potential threats. Las Vegas specifically is at high risk for intrusion with the high amount of room and restaurant reservations made in this location. The hospitality industry in general is at high risk for cybercriminals to invade their data. Especially small business, the article stated that half of the cyber attacks made in 2015 were against businesses with 250 employees. The data being breached has reached the outrageous total of $3.8 billion. The main point is that most of these issues are preventable, it's all about knowing what can and can't protect you. Investing in the proper technology and dedicated staff can make all the difference. Las Vegas' efforts to prevent these intrusions should set an example for others.
5More

Hotel Data: 5 Strategies For Safeguarding Your Customers' Data - 4 views

www.socialtables.com/...hotel-data technology hospitality software business tech solution data security
shared by hchiebooth on 09 May 19 - No Cached
  • hchiebooth on 09 May 19
     
    This article highlights 5 different strategies to strengthen data security. They make very great points such as the data security begins with the employees. Teaching employees how to handle and process sensitive data is the first step. Training employees on how to spot data breaches and report them is just as important. Another great tactic that the author presents is to test your own network. In order to implement strict barriers for cyber security, the limitations have to be known. If a company knows their cyber security limitations on data they can build a stronger foundation to prevent outside cyber data breaches. Additionally since cyber attacks are not 100% preventable, purchasing cybersecurtiy insurance seems like the most responsible thing any hospitality or customer focused entity can do.
  • ...2 more comments...
  • jnoll001 on 09 May 19
     
    I have to agree with the article and believe that the future will be an executive dedicated to cyber security. I see no other way with the rise of hacks & breaches.
  • clonyr on 09 May 19
     
    Breaches can lead to a high cost of out of pocket expense for the company. Which is why it is always wise for a company to have tools and policies and procedures implemented to avoid these security breaches. Cybersecurity training of at least every 6-12 months, and continuous communications regarding attempted breaches will give employees clarity on how consistent and clever the threats can be.
  • chefaroy on 10 May 19
     
    Well said in many aspects. It is not if there will be an attack or breach, it is how the company deals with it and prevents it as best as possible to deter the assailants. Data security in a hotel or operation is also very important. There must be many measures in place to ensure that guests data is safe. It is very serious and can affect business just as bad as food poisoning or fires.
  • clonyr on 10 May 19
     
    I completely agree. Having a proactive approach to data security should be the standard because the attacks are inevitable.
22More

5 Best Practices to Prevent Insider Threat - 0 views

insights.sei.cmu.edu/...to-prevent-insider-threat.html best practices practices threat hospitality software technology
shared by augu010 on 15 Feb 20 - No Cached
  • Insider threat continues to be a problem with approximately 50 percent of organizations experiencing at least one malicious insider incident per year, according to the 2017 U.S. State of Cybercrime Survey.
  • While intellectual property (IP) theft, IT sabotage, fraud, and espionage have continued to appear as the primary forms of malicious insider threats, new research has led us to understand the patterns related to unintentional insider threats. These threats represent a significant risk for organizations and potential attack vectors for malicious insiders and external adversaries.
  • Know and protect your critical assets Develop a formalized insider threat program Deploy solutions for monitoring employees actions and correlating information from multiple data sources Clearly document and consistently enforce policies and controls Incorporate malicious and unintentional insider threat awareness into periodic security training for all employees
  • ...18 more annotations...
  • The trust that organizations place in their workforce can leave them vulnerable to malicious insiders, who often use particular methods to hide their illicit activities.
  • Current technology allows seamless collaboration, but also allows the organization's sensitive information to be easily removed from the organization. A complete understanding of critical assets (both physical and logical) is invaluable in defending against attackers who will often target the organization's critical assets.
  • Critical assets can be both physical and logical and can include facilities, systems, technology, and people. An often-overlooked aspect of critical assets is intellectual property.
  • Formalized and Defined Program:
  • Organization-wide Participation:
  • versight of Program Compliance and Effectiveness:
  • Confidential Reporting Mechanisms and Procedures:
  • Insider Threat Incident Response Plan:
  • ommunication of Insider Threat Events:
  • Protection of Employees' Civil Liberties and Rights:
  • Policies, Procedures, and Practices that support the InTP:
  • Data Collection and Analysis Techniques and Practices:
  • Prevention, Detection, and Response Infrastructure:
  • Insider Threat Practices Related to Trusted Business Partners:
  • Insider Threat Integration with Enterprise Risk Management:
  • Organizations should ensure policies and controls provide: concise and coherent documentation, including reasoning behind the policy, where applicable consistent and regular employee training on the policies and their justification, implementation, and enforcement Organizations should be particularly clear on policies regarding acceptable use and disclosure of the organization's systems, information, and resources use of privileged or administrator accounts ownership of information created as a work product evaluation of employee performance, including requirements for promotion and financial bonuses processes and procedures for addressing employee grievances
  • wareness training for the unintentional insider threat should encourage employees to identify potential actions or ways of thinking that could lead to an unintentional event, including level of risk tolerance--someone willing to take more risks than the norm attempts at multi-tasking--individuals who multi-task may be more likely to make mistakes large amounts of personal or proprietary information shared on social media lack of attention to detail
  • Our intent was to develop a single definition for insider threat that covers malicious and non-malicious (unintentional) insider threats covers cyber and physical impacts applies to both government and industry is clear, concise, consistent with existing definitions of 'threat', and broad enough to cover all insider threats
  • augu010 on 15 Feb 20
     
    This article goes into detail about various safe practices that can prevent cyber threats. Policies and procedures must be created in order to protect us from cyber crimes. Governments have worked hard to protect data from being hacked.
27More

11 Tips to Improve Your Restaurant's Cyber Security in the COVID-19 Era | FSR magazine - 0 views

www.fsrmagazine.com/...ts-cyber-security-covid-19-era cyber security restaurants hackers scams protection risk analysis
shared by anonymous on 27 Sep 20 - No Cached
  • wealth of client data on tap from places with lax security
  • unknowingly serve credit card data to hackers. Due to the volume of credit card transactions and CRM data available, restaurants need to take cybersecurity seriously before a criminal gets wind of the vulnerability
  • A hacker only needs to gain access to a restaurant's POS system and install malware to steal customer credit card details.
  • ...20 more annotations...
  • Take Chipotle, for example. The company got devalued by about $400 million after they suffered a data breach.
    • anonymous
      anonymous on 27 Sep 20
       
      Major consequences for restaurants if discovered as the link
  • because most go belly up six months after an attack.
  • Unprotected WiFi
  • Criminals pretend to be from the U.S. government and inform targets their COVID-19 stimulus check is ready, but they would need to verify the details of the recipient first before they can send it.
    • anonymous
      anonymous on 27 Sep 20
       
      Low level scammer
  • CRM software data, which may include names, addresses, and even birthdays. One of the most common ways to achieve this sort of attack is via malware (malicious software). Hackers find a vulnerable backdoor to a restaurant's network to install malware on the POS system. Malicious code then records every transaction and every detail, sending it back to the criminal's server over the internet.
  • GrubHub drivers scam both the restaurants and the customers by marking the deliveries as complete and pocketing the tip money, without bothering even to pick up the order from the establishment.
    • anonymous
      anonymous on 27 Sep 20
       
      AHHHH
  • Businesses are scrambling to find suppliers amidst the chaos, and criminals have been taking advantage of the confusion
  • Scammers are posing as representatives from the World Health Organization (WHO), the Center for Disease Control (CDC), and other public health agencies
  • social engineering on the restaurant staff to pull off phishing attacks.
  • PCI compliant.
  • conduct a risk analysis
  • hiring a security expert either full time or as a consultan
  • Secure your network and always change the free WiFi access point's password with a strong one every day.
  • latest operating system updates
  • Force multi-factor authentication
  • strong passwords
  • Ensure sensitive data encryption
  • web-filter to secure your WiFi network
  • Install a robust security software program on all computers and devices to block, detect, and clean malware.
  • Conduct regular cybersecurity training
  • anonymous on 27 Sep 20
     
    Restaurants have always been an easy target for cyber security hackers, in particular, hackers who are looking for credit card and ID information. Restaurants provide hackers with a "wealth of client data" due to the high "volume of credit card transactions and CRM data available." Once given access, a hacker could simple install malware and duplicate all customer information. Already facing critical financial issues during Covid 19, restaurants large and small need to take a stronger presence in the protection of their data. If discovered to be the start of a breach, customers will tend to avoid that business. "Chipotle, for example...got devalued by about $400 million after they suffered a breach," and many small restaurants "go belly up six months after an attack." Below is a summary of the types of attachs restaurants face: 1. Unprotected Wifi 2. Social engineering and phishing attacks. This is actually the one that stood out to me the most because of how sophisticated these attacks can be. It is a reminder that we are all at risk, both the technologically challenged and gifted. 3. Malware 4. Covid 19 Scams 5. Grub hub scams 6. Supply chain scams *A particular issue for restaurants and commercial businesses right now as companies scramble to find new vendors who can supply them with the products they require. 7. Public Health scams 8. Government Stimulus scams 9. Technical support scams How can we fight against these? Here are the recommendations: 1. PCI compliance 2. Hire and IT security professional to conduct a risk analysis and if possible, keep on as a consultant or full time 3. Keep a secure network and change free passwords daily 4. Use the latest operating systems, force multi-factor authentication, strong passwords, and use encryption services for data storage and transfers 5. Install and use robust web-filters and security software programs 6. Maybe most important!!! Train your employees. 5.
18More

Hotels: Are Your Cyber Defenses Ready for 2021? | Hospitality Technology - 0 views

hospitalitytech.com/your-cyber-defenses-ready-2021 cyber security hotels tourism POS
shared by jlewinsky on 23 Feb 21 - No Cached
  • Two of the top five biggest data breaches made public in 2020 were at hotel chains. Attackers stole personal information including names, emails and addresses from 5.2 million guests at Marriott and 10.6 million guests of MGM Resorts.
  • To ensure a swift recovery from COVID-19, the hospitality industry must shore up its cybersecurity protections — or risk more headline-making breaches in the future.
  • Risk is especially high at hotels because attackers have multiple points of entry.
  • ...14 more annotations...
  • Breaches undermine hospitality brands’ reputations and erode customer trust. Eighty-one percent of consumers will stop engaging with a brand after a breach, according to a 2019 study.
  • When it comes to cybersecurity, companies today have two options: Defend the fort or devalue the data. The former is the more traditional approach. By strengthening the digital “walls” around your data — via firewalls, intrusion detection, 24/7 monitoring and other security protections — the defend-the-fort approach works to keep attackers from accessing your systems at all.
  • However, one of the biggest vulnerabilities may be on the hotel grounds themselves.
  • hotels have multiple point of sale (POS) terminals across different locations, from the front desk to restaurants, all of which are connected to each other. If a POS device is not properly secured, attackers can use malware or other attack vectors to steal clear-text credit card numbers and other data.
  • POS attacks remain one of the most common causes of data breaches in accommodations and food services.
  • Guests may share their credit card numbers with the hotel in advance via a booking app or website, opening up the possibility of web-based attacks. Loyalty programs are another source of online vulnerability, with an estimated $1 billion a year lost to account fraud and related crimes.
  • One important and underutilized aspect of cyberdefense is employee training.
  • Make sure your employees use strong passwords and know how to spot fraud and spear phishing attacks. You may also want to limit employee access to confidential data, so if an account gets hacked, private guest information doesn’t go with it
  • You should also make sure your software is up to date with all security patches, as attackers often exploit known weaknesses in programs. Isolating POS devices from the rest of the network can also limit the damage from malware infections at that entry point.
  • it’s unlikely that even the strongest digital “walls'' will prevent all incursions. Defenses are important, but the ever-changing nature of technology means that new, hard-to-catch vulnerabilities will pop up all the time.
  • important to devalue your data, rendering it unusable to attackers who gain access to your systems. One way to do this is to implement point-to-point encryption (P2PE) by encrypting payment information from the moment it enters your network at the POS
  • Encrypted data is unintelligible to anyone who doesn’t have the right digital key. Implementing P2PE is the only way to ensure that clear-text payment data doesn’t fall into the hands of attackers targeting POS systems with malware.
  • Data that’s stored for the long term, like passport information or credit card numbers saved to a loyalty program, can also be devalued through tokenization. Data that’s tokenized gets replaced with an alphanumeric pseudonym, so the actual sensitive information isn’t stored on your servers. This method helps secure guest information beyond the initial transaction at the POS.
  • Hotels that reckon with their security vulnerabilities now will protect themselves from fines and other fallout from data breaches as business rebounds. They’ll also build deeper, more trusting relationships with customers by keeping their personal information secure. By strengthening security protections and devaluing their data, hotels can set themselves up for a brighter future. 
  • jlewinsky on 23 Feb 21
     
    This article describes the vulnerabilities in the security systems of the hotel Industry. The POS system was recognized as one of the most vulnerable areas that are more targeted by hackers. This is due to the multiple stations where the POS systems are located on the premises of the hotel. Likewise having POS systems independent of the hotels security system left the system open to hackers. Two options to defending the cyber-defense, are digital walls and employee training. Digital walls works by keeping hackers from accessing the systems. Although even with a strong firewall it is recommended to implement point-to-point encryption (P2PE), this encrypts payment information of guest. the other is tokenization. This uses alphanumeric pseudonym to protect data stored for long periods of time. Another way to prevent cyberattacks is employee training, encourage the use of strong passwords an dhow to detect fraud and phishing attacks.
7More

How to Prevent Malware Attacks and Promote Cybersecurity at Your Hotel - 0 views

hoteltechreport.com/...malware-in-hotels Technology hospitality hotel software cyber-security malware
shared by irinadolgopolova on 20 Jul 20 - No Cached
  • Each time a hotel’s guest records get breached, the property is burdened with financial strain and faces broken trust with guests. As a hotelier, you don’t need to be an expert in cybersecurity, but you absolutely need to understand the basics to protect your business and your guests.
  • hotels process lots of transactions and store tons of guest data. A hacker can simultaneously target a property’s point-of-sale and property management system to capture payment card information as well as personal data, like passport numbers and email addresses.
  • Research from Symantec, a cybersecurity firm, found that more than 65% of hotels are routinely leaking booking reference codes through third-party sites. Why is this important? Because the information shared through these codes would allow a bad actor to login to a reservation, view personal details, and even cancel a booking altogether. When this happens, your guest information is vulnerable and you risk destroying the guest relationship.
  • ...3 more annotations...
  • Compliance with the Payment Card Industry Data Security Standard (PCI-DSS) not only helps to ensure that data security software, hardware, and practices are safer, but also helps to protect against fines and penalties when a breach occurs,
  • The right technology is only half the equation; over the years, security experts have also identified employees as part of the problem. Hotels must train their staff to handle personal information security, comply with privacy policies, and change user access credentials regularly.
  • Even with a great PMS/POS system and the right training, it’s important to perform routine penetration testing and risk assessments. There’s no straightforward answer as to how often you should pen test your network, but experts warn once a year probably isn’t frequently enough
  • irinadolgopolova on 20 Jul 20
     
    The article is about the reasons why the hotels are attractive for hackers, the author also explains the key concepts in the cyber security. Then, the biggest cyber attacks in hotel industry are described in the article. At the end, the author tells us how hoteliers can improve the security measures.
8More

Coronavirus cybercrime can attack your restaurant system, too | National Restaurant Ass... - 0 views

www.restaurant.org/...ime-can-attack-your-restaurant
shared by davidclark33 on 29 Sep 20 - No Cached
  • Protecting your business from a data breach is a constant struggle, and it’s even more important during a disaster.
  • Eliot, director of education and strategic initiatives for the NCSA, says cyber incidents and attacks, such as coronavirus-themed email phishing scams, increased as much as 300% to 350% in the first quarter of 2020 and adds that cyber scammers are now trying to target restaurant companies in particular.
  • Cybercriminals have mostly directed malicious emails at telework employees or people donating time and money to those impacted by coronavirus. “We're seeing a huge increase of Cyber-related scams promoting coronavirus information or relief efforts. “It’s a big issue.”
  • ...4 more annotations...
  • The PCI Security Standards Council claims that since March, malicious virus-related reports are up 475%. The reason for the uptick is that cybercriminals are trying to take advantage of rapid changes to the payment-card data environment. In addition, 41% of small businesses have said they’ve suffered breaches costing more than $50,000 to fix.
  • Contactless payment is one of the big changes within the payment data environment. Several restaurant companies – from chains to independents – are offering it because it reduces customers' physical interaction with the restaurant's POS system. As part of this move, some businesses have eliminated credit-card PIN numbers.
  • Eliot says malicious email is usually the easiest way for cybercriminals to access your networks. The emails typically show up as urgent requests for sensitive information, often pretending to be from the Small Business Administration or the Centers for Disease Control and Prevention. When the intended victim types in his or her credentials and clicks on a specific link or downloads an attachment, criminals are in.
  • Anyone looking for easy-to-implement security tips can try these six to start. Reduce areas where payment-card data is stored. The best way to protect against a data breach is to avoid storing any card information at all. With many small operators offering curbside pickup and accepting payment over the phone instead of through face-to-face transactions, it’s important they train employees not to write down payment card details. Instead, have them enter numbers directly into a secure terminal. Use strong passwords. Using weak and default passwords is one of the leading causes of payment data breaches among businesses. Effective passwords must be strong and updated regularly. The most recent guidance is: the longer, the better. Think of it almost as a “passphrase” rather than a password. Use it in the form of a sentence, but mix in different characters within the phrase. It’s much harder to break a long passphrase than it is a short, complex password. Weak and vendor default passwords often result in small business data breaches. Also, don’t repeat your passwords. Update your software often. Criminals look for outdated software to exploit flaws in unpatched systems. Timely installations of security patches are crucial to minimizing the risk of a breach. Whenever updates are available, use them. They will improve performance and close out some of the vulnerabilities cybercriminals are searching for. Enable two-factor authentication. It's so important for restaurateurs, especially where their POS systems or any of their sensitive databases are concerned, to have two-factor or multi-factor authentication enabled. If an instance where credentials are stolen occurs, there will be a second layer of verification the operator can rely on to potentially reduce the chances that information will be breached. Segment your networks. If you are going to store payment data, make sure your POS system has its own separate, secure network. Do not store sensitive documents on public cloud services such as Google Docs or DropBox. If you’re going to store sensitive documents, house them in an encrypted, locked down location.   Be hyper-vigilant. Criminals are going to try to take advantage of this pandemic situation as much as possible. You can protect yourself by not giving out sensitive information, especially within unsolicited emails. Don’t click on links you’re not expecting and do everything in your power to protect all sensitive information.
  • davidclark33 on 29 Sep 20
     
    This article is about data breaching and cyber crime in the restaurant business. The article specifically talks about the increase in cyber crime during a crisis, and in this case, a pandemic. It talks about contactless payment as a great form of protection for restaurants as well as customers. At the end of the article, it lists six easy to implement security tips.
14More

Cybersecurity: A Hospitality Industry Reality - AETHOS Consulting Group - 0 views

www.aethoscg.com/...a-hospitality-industry-reality franchise
shared by anonymous on 01 Oct 20 - No Cached
  • Cyber thieves are crafty and persistent in finding ways to breach security to gain access to personal information. The hospitality industry, hoteliers, restaurants and other such businesses that rely on the use of personal information to provide service to their customers are particularly at risk.
  • Initial steps in the risk-management process Hospitality companies should first focus on developing a robust internal risk-management program, including the establishment of strong policies and procedures; training and insurance can reduce the chances of a data breach and mitigate the damages if a breach occurs.
  • In general, an organization should review the following areas to begin developing a well-rounded risk-management program: Corporate security policy Asset classification and control Personnel security Computer-network and management protocols for vulnerability System access controls Privacy and regulatory compliance
  • ...10 more annotations...
  • Then, ask yourself, “What does our company have in place to mitigate our exposures?”
  • Do we have an effective privacy policy?
  • Do we have an effective privacy-breach response plan?
  • Do we continuously test our disaster-response and business-continuity plans?
  • Franchise concerns
  • Franchise agreements should address several important data-security concerns, cyber-insurance, breach notification and PCI (payment card industry) compliance.
  • Franchise agreements should require franchisees to purchase a specified amount of cyber insurance coverage in the event of a data breach.
  • In addition, the franchisee should be required to promptly notify the franchisor of all breaches in security and immediately notify the franchisor of all breaches of sensitive information.
  • The franchisor may also want to consider being notified of any impermissible uses or disclosures
  • Cyber attack realities The ramifications of a Cyber breach could be both financially and operationally catastrophic to any hospitality company. Losses could include costs associated with litigation expenses and fines as well as defense. The cost of business interruption and loss of income could be debilitating.
  • anonymous on 01 Oct 20
     
    This is an article providing a very high-level introduction to the potential risks faced by the hotel industry from cybersecurity. It outlines some initial steps that hotel companies might consider in their risk-management process and also gives some very specific examples of risk related to franchise contracts.
10More

Data Security in the Hospitality Industry: Post-COVID Era | LoginRadius Blog - 0 views

www.loginradius.com/...-security-hospitality-industry
shared by kjeewan on 04 Oct 22 - No Cached
  • The frequency of cyberattacks against business databases can be attributed to the fact that the hospitality industry largely depends on credit cards as a medium of payment. This may increase the chances of a hacker receiving access to sensitive information. Investing in proper data security in hospitality can work to protect not only the consumer but also the business from losing large sums of profit.
  • databases in the hospitality industry also happen to be the most vulnerable to data breaches.
  • The aforementioned reliance on payment cards can greatly increase the chances of information leaking. However, other virtual methods of payment like online payment and more can create the potential for cyber attacks.
  • ...6 more annotations...
  • The data collected and the people who can access it differ from country to country.
  • Staff training is restricted to the service aspect of the business. However, training employees to carry out processes in maintaining data security in hospitality like data collection and storage in the right manner is overlooked.
  • This process can involve the addition of two-factor authentication that will protect the data from being accessible to non-employees. This encryption can prevent identity theft.
  • : Employees will require thorough vetting regarding the importance of proper data storage. This training can also work towards reducing the chances of insider attacks as only a few employees will have access to the databases.
  • This includes the addition of firewalls, traffic filters, and network monitors to guard against malware present online.
  • , investing in proper data security in hospitality can work to protect not only the consumer but also the business from losing large sums of profit.
  • kjeewan on 04 Oct 22
     
    Personal information collected can range from generic data like names and phone numbers to sensitive data like bank accounts. Databases in the hospitality industry are the most vulnerable to data breaches. Reliance on payment cards or virtual payments can increase the chances of information leaking or potential for cyber attacks. Staff training in maintaining data security is overlooked. two-factor authentication, Employees training to reduce insider attacks, and cyber security measures such as adding of firewalls, traffic filters, and network monitors to guard against malware present online can ensure data security for consumers and the business.
11More

Suspected Ransomware Attack on InterContinental Hotels Affected Over 4,000 Guests | Spi... - 0 views

www.spiceworks.com/...s-group-cyberattack-ransomware
shared by erinkieltyka on 04 Oct 22 - No Cached
  • Ransomware generally entails infiltration and compromise, exfiltration of data, and the encryption of data/systems/networks. Hospitality was the eighth most targeted sector by ransomware groups between March 2021 and April 2022.
  • 4,053 ICH users and 15 of its 325,000 employees were compromised in the attack whose perpetrator remains unknown.
  • The company was unable to accept online bookings
  • ...7 more annotations...
  • determine whether the latest cyberattack is more significant than the 2016 breach of the ICH systems. Initially thought to have been a minor breach that affected 12
  • Between September 29 to December 29, 2016, 1,175 properties were infected by malware designed to steal credit card data
  • Marriott International has been breached thrice, resulting in the compromise of the personally identifiable information of up to 338 million guests
  • Marriott was also fined ÂŁ18.4 million ($23.8 million) by the U.K’s data regulator Information Commissioner’s Office for failing to protect the data of the 338 million guests
  • This is yet another reminder of the damaging impacts of cybercrime. Not only is IHG potentially getting held to ransom for its data access, but it is also losing out on customer bookings
  • Organizations should use this as a warning to never gamble with their cyber defenses. After all, the cost of preparing and preventing an attack is far less than the cost of recovering from one
  • Data breaches, on average, cost organizations $4.25 million in 2022, according to IBM’s 2022 Cost of Data Breach report.
  • erinkieltyka on 04 Oct 22
     
    This article discusses a recent cyber-attack on ICH that is believed to have been a ransomware attack. It's stated that hospitality is the 8th most targeted sector for ransomware as of recently. The recent attack on ICH 4,053 users and 15 employees were compromised, which is actually far less than their last attack in 2016 that effected 1,175 properties. Hotels must take as much precaution as possible against cyber attacks because not only does it decrease their bookings, but they can also be charged millions in fines for information breaches.
8More

12 Ways to Increase Hotel Security - LODGING - 1 views

lodgingmagazine.com/ays-to-increase-hotel-security
shared by linanzhang on 16 Jun 18 - No Cached
  • “When department managers and other employees think more about safety and security, you can prevent a lot of theft and minimize dangers.”
  • 1. Update locks. Locks that can track who goes in and out of rooms can serve as a deterrent to theft.
  • 2. Make time for safety meetings. Perhaps as part of a regular meeting, schedule time to talk about guest safety
  • ...3 more annotations...
  • 3. Monitor activity with software. Having closed-circuit television to monitor the property doesn’t matter too much if no one is looking at the monitors.
  • 4. Evaluate and improve—quickly.
  • 5. Meet and greet. One of simplest, but most effective, ways of securing a property is to provide excellent customer service.
  • ehida004 on 16 Jun 18
     
    This article talks about ways to increase hotel security. Although hotels may have proper security and policies in place to protect the property, they are often subject to cyber cyber-attacks, break- ins, theft, fraud, and other crimes. Lack of proper security in hotels may lead to increased guests losing belongings to theft. As vice president of global safety, Callaghan spent 35 years with Marriott International. He was responsible for properties throughout the United States, Latin America, and the Caribbean. During his career, he could manage everything from the integration of new technologies such as electronic locks and computer surveillance systems to implementing anti-terrorism procedures. The following list shares Callaghan tips on guest safety, internal theft, and cyber security that can help owners and operators avoid down time, reputation loss, liability, and lawsuits. This ensures property security and that information in up to date.
  • linanzhang on 22 Oct 18
     
    Security is really important in the hospitality industry. It's vulnerable to cyber attacks, break-ins, theft, fraud, and other crimes. The security means a better, safer, guest experience. Since the Las Vegas shooting, we need to pay more attention to the safety and security. There are many ways to increase hotel security. Like the update locks. Locks that can track who goes in and out of rooms can serve as a deterrent to theft. Make time for safety meetings. Monitor activity with software. We also can use closed-circuit television to monitor the property doesn't matter too much if no one is looking at the monitors. We can evaluate and improve. For the Las Vegas shooting, hotel said that they should do something immediately to protect from another event happening. We also can use meet and greet to improve the security problem. It's the effective and simplest way. Employees should also look out for people who don't fit the profile of the hotel's typical guest.
9More

What Recruiters Need To Know About What Makes Cybersecurity Unique - 0 views

www.forbes.com/...hat-makes-cybersecurity-unique cybersecurity
shared by Yueyu Peng on 25 Oct 18 - No Cached
  • Cybersecurity is under pressure. There are an increasing number of attacks, an increasing amount of regulation and a predicted skills shortage of 1.8 million workers by 2022.
  • Just knowing about the job or the client is not enough; they expect their recruitment partner to know details about a huge number of qualifications and different security tools.
  • Candidates can obtain job offers very quickly, and there is a gap between the number of vacancies and the number of skilled people available.
  • ...5 more annotations...
  • Unemployment within cybersecurity is effectively zero,
  • gender diversity
  • We discovered that the number of women in cybersecurity has increased from 11% to 18% since 2011.
  • Paying the right amount for the role shows candidates that you understand their industry, which is very important to them.
  • Candidates can obtain multiple job offers within weeks of applying for a job. At the senior end of the market, this takes a little longer due to the number of roles available. They will still most likely have several opportunities tracking.
  • Yueyu Peng on 25 Oct 18
     
    This article is about the cybersecurity recruitment. It point out some points to ask the recruiters to pay attention.
5More

Security: Something No Hotel Can Ignore - 0 views

www.hospitalityupgrade.com/...magazine_Detail.asp
shared by berkley7 on 14 Jul 18 - No Cached
  • Security has always been a key issue for hoteliers.
  • Technology plays a major part in meeting today’s security requirements, but there are other important factors in implementing effective security measures.
  • McShane emphasizes that the people link to technology is critical in the successful use of any security system. The attitude of the hotel staff must be oriented toward security and the proper use of the equipment that is installed.
  • ...1 more annotation...
  • Security Innovations, Incorporated (SII) specializes in online and real-time access control systems for the lodging industry. SII provides security products that integrate standard electrical and building specifications.
  • berkley7 on 14 Jul 18
     
    The following article does a great job outlining different aspects of cyber security within the hospitality industry. Security is one of the main departments that need attention and an additional budget in order meet todays security requirements. After doing some research, it is clear to see that all employees must have the same focus in order to provide the best security for their guest. Hotel security can provide things like: facility protection and control, guest and visitor monitoring and assistance, security command center monitoring (cameras, alarms systems and surveillances), maintain emergency response plan, etc. "Security has a difficult job of enforcing the rules and regulations of the establishment while making the guest feel welcome." The article goes over different security systems and what differentiates them, I thought that it gave a lot of insightful information into various cyber security systems.
15More

Top 5 risks and security challenges for hotels in 2015 - eHotelier - 0 views

ehotelier.com/...-challenges-for-hotels-in-2015
shared by apate114 on 08 Oct 17 - No Cached
  • 1. Identity theft leading to credit card fraud
  • Identity theft and credit card fraud is the new form of pick pocketing, but on a much larger scale. The number of compromised credit cards is expected to increase this year.
  • 2. Silent invasions
  • ...11 more annotations...
  • 3. Longer or no security audit cycles
  • APTS are considered the most dangerous type of cyber-attack as they simply bypass the defenses that are in place.
  • Cyber-crime shows up on the security radar as the second highest risk the hotel industry is exposed to.
  • Nearly 1.26 million hotels worldwide are dealing with all sorts of safety & security issues.
  • The gap between the low number of qualified security auditors worldwide and new hotels built is getting bigger and bigger.
  • 4. Physical crime will remain an issue for hotels
  • Physical crime ranges from professional burglaries using nifty social engineering techniques to temporary drug laps in hotel rooms.
  • Holdups at night involving firearms have increased since hotels are easily accessible and less protected compared to other industries operating at night.
  • 5. Loss of competitive advantage after a major security incident
  • The recovery costs after a security incident, including the attention of the media, are often much higher than the investment in security and risk management.
  • Reputation is a vital yet fragile advantage that requires its very own security plan in a strong competitive market where guests nowadays love to make their booking decisions with the help of online travel review sites such as Tripadvisor & Co.
  • apate114 on 08 Oct 17
     
    The article highlights the top five risks and security challenges in the hospitality industry. The following are the top five security risks according to the article. 1. Identity theft leading to credit card fraud - compared to other industries, the hotel industry is at more risk for credit card fraud and identity theft. This is because hotels are highly targeted by hackers. Hotel properties for the most part have credit card information for each and every guest that has stayed at a specific property. Hotels must be ahead of the technology curve when it comes to security however this is not always the case. 2. Silent invasions - This consists of all the cyber attacks that can affect a business by infecting the network. As discussed during the first module, hotels run majority if not all of their business using technology. If a hotel were to have their networks hacked it would leave them in a very bad situation. Since hotels operate their entire business using technology and multiple different systems, they would not be able to operate if they experienced a network breach. 3. Longer or no security audit cycles - Most branded hotels are required by the franchise to have consistent security audits done for each property. Independent hotels are deemed greater at risk for a security attack because they are not mandated to have security audits. These hotels sometimes skip audit cycles to save money. 4. Physical crime - This ranges from professional robberies to drug laps in hotel rooms. Hotels are at risk for armed robbery due to to lower chance of security compared to other industries that operate overnight. 5. Reputation risk - Hotels that experience a security breach almost always will see some sort of loss in competitive advantage. Nowadays with social media and the news travelers are more aware with what is going on and they would be more inclined to book their reservation somewhere else if they heard of the property having a security breach.
1More

Safeguarding a Hotel Property Against Cyber Attacks - 0 views

lodgingmagazine.com/property-against-cyber-attacks
shared by bdolman on 21 Mar 18 - No Cached
  • bdolman on 21 Mar 18
     
    The article "Safeguarding a Hotel Property Against Cyber Attacks" is quite insightful as to what attracts Cyberthieves in the hotel industry. According to Garfinkel and Kosturek, " International or U.S.-based hotels can be attractive to hackers because of the disruption, embarrassment involved, but mostly for monetary gain." The authors relate recent examples of Cyberthieves hacking an Austrian hotel's computer system so that hotel room doors were lacked, and all guests had to wait in the lobby until this security issue was fixed. This showed guests that Cyberthieves have significant access and control, which is alarming and frightening. Credit and debit cards are the preferred target of hacking and these are compromised when Cyber criminals access POS systems or property management systems with malware. Apart from the monetary aspect of stealing credit card information, Cyberthieves are able to attack franchises and invade internal information such as employee check ins and door locks. In my opinion, this is something that hotels should consistently review and anticipate loopholes in which they think hackers can easily access information. To the eyes of the general public, the hotel needs to build trust so that clients can know that they can give out their confidential information.
15More

Hotel Security: How to Optimise It | By Lillian Connors - Hospitality Net - 0 views

www.hospitalitynet.org/...4086484.html
shared by msant228 on 19 Mar 18 - No Cached
  • Invest in surveillance software It's not easy operating in the dark, so the first thing you want to do is to obtain a pair of eyes that will allow you to monitor the activity in your hotel, and catch any illegal activity should it occur.
  • This will not only help your guests feel safer, but it will also discourage anyone who's up to no good to proceed with their plan. Likewise, it will give you a clear overview and allow you to keep a tight ship the guests will want to board.
  • Hold regular security meetings Security meetings should be the staple of your customer safety efforts.
  • ...10 more annotations...
  • you want to use these meetings to familiarize yourself with any potential weak points you might have in your security system, and improve where needed. You will also get the opportunity to strategize your next move should a situation arise.
  • Upgrade the locks One of the most important aspects of hotel security is lock quality, durability, and upkeep. The hotel room lock is the last line of defence against assailants and thieves.
  • Likewise, make sure you keep a reliable 24-hour locksmith on speed dial to address any problems as soon as they arise. From lock malfunctions to replacements and upgrades, and even fixing the locks after a break-in, having a locksmith who can come at a moment's notice is imperative.
  • Improve constantly Trial and error breed success, but only if you work hard to improve on your past mistakes.
  • So make sure you always think of new ways you can improve your customer's safety.
  • Meet your customers One of the most effective ways to keep a close eye on what's going around in your hotel is to meet your guests.
  • This is not only a chance for you to check out the type of people staying at your hotel, but it's also a chance to ask them if there is anything you can do to improve their overall experience.
  • Prevent cyber attacks Nowadays, cyber-attacks are becoming more frequent than ever, and you want to ensure your guests' data is protected from malicious activity. To this end, you want to form an IT department that will work on improving the hotels cyber security, and be on call to help your guests with any IT related issues. This will help you provide a better service, and increase your brand's reputation.
  • Do background checks of your staff Finally, you need a reliable staff by your side to make all of the aforementioned tactics work.
  • This way, you will be able to prevent any criminals from infiltrating your business and elevate the overall security of your hotel.
  • sliu043 on 19 Mar 18
     
    No matter how much hotels invest in security, there are still vulnerable areas where hotels should improve to prevent thefts, break-ins, fraud, hacking, and numerous other crimes from happening. In this article, the author has introduced certain ways to optimize hotel security, including increasing the invests in surveillance software, holding regular security meetings, upgrading the locks, meeting your customers, paying attention to cyber-attacks, and carrying on background checks of staff.
  • msant228 on 13 Jun 18
     
    This article is about hotel security and different ways to optimise it to meet your needs. Some of the topics discussed were the integration of surveillance software, the importance of regularly scheduled security meetings, lock upgrades, and customer interaction. The article touches upon each of the topics mentioned and explains how the integration of all of these practices helps create a safer and more cohesive security system. I liked how it focuses on the need to interact with customers as they are the ones you are protecting the most. I think that interaction really makes a difference.
9More

Data Security in Hospitality: Risks and Best Practices | By Limon Wainstein - Hospitali... - 0 views

www.hospitalitynet.org/...4091056.html
shared by afigu115 on 30 Sep 19 - No Cached
  • Information security is a pivotal aspect of many industries, not least the hospitality industry due to the nature of the data collected by companies operating within hospitality.
  • hospitality appears to offer an ideal target vector for conducting crimes such as identity theft and credit card fraud due to the existence of multiple databases and devices
  • ybercriminals use this reliance on cards to infect point-of-sale (POS) systems with malware that steals credit and debit card information by scraping the data.
  • ...5 more annotations...
  • Restaurants, hotels, and other companies in the hospitality sector often have complex ownership structures in which theres a franchisor, an individual owner or group of owners, and a management company that acts as the operator.
  • A vital part of protecting data is training staff to securely gather and store personal information.
  • The high level of turnover and high degree of staff movement between different locations makes it a real challenge to maintain teams of well-trained staff
  • Industry and political regulators are becoming stricter in governing how organizations process and store personal data.
  • This type of data risk is more subtle and it involves employees selling data to third parties without the knowledge of the organization that employs them.
  • afigu115 on 30 Sep 19
     
    Information security is absolutely crucial within the Hospitality industry. There is so much important guest and customer information that is submitted via technology. This includes, credit card details, addresses, and phone numbers, with so much of this information being sensitive companies need to install security systems. The hospitality industry depends strongly on credit card as a form of payment which is why the POS needs to be secure. It is also extremely important that staff members are trained to gather and store guests personal information. The industry overall has become stricter in the ways that information gets gathered and processed in order to avoid cyber attacks. The last thing that companies must keep an eye on are insider threats, a lot of the time it's the employees from the company that are giving away valuable and confidential information to third parties. This is why I believe that technology has had a great impact on this industry but there needs to be strong security systems in order to avoid cyber attacks.
1More

Redcar cyber-attack: Council using pen and paper - BBC News - 0 views

www.bbc.com/...technology-51504482
shared by aleliason1992 on 16 Feb 20 - No Cached
    • aleliason1992
      aleliason1992 on 16 Feb 20
       
      This article is about cyber security. I liked this article because it demonstrates cyber attacks on a smaller scale that still shows a massive inconvenience to those who do not back up their data and do not have their security systems up to date. it is clear to me that the easiest attacks of the future are cyber based and to leave yourself vulnerable to save a few bucks is a thing of the past.
1More

Pros and Cons of Cyber Security Jobs: We Asked 21 Professionals – StartaCyberCar... - 0 views

startacybercareer.com/nd-cons-of-cyber-security-jobs Cyber Security
shared by kmert005 on 29 Mar 20 - No Cached
  • kmert005 on 29 Mar 20
     
    This article has asked 21 professionals about the pros and cons of cybersecurity jobs. The first pro is the salary; overall, they are paid quite well. They also say cyber jobs are everywhere, being in a high demand job, ability to advance in your career, having the opportunity to be self-employed, and the chance to learn new things. The cons of cybersecurity jobs consist of being on call and demanding hours, some tasks are boring or repetitive, job pressure, continuously learning, and lack of resources. In conclusion, there are pros and cons to every job to overall cybersecurity jobs seem to have a high retention aspect to them.
9More

Cybercriminals are capitalizing on coronavirus fears, security firm warns - CBS News - 0 views

www.cbsnews.com/...rs-cyber-firm-crowdstrike-says technology hospitality solution business
shared by lavendersheshe on 12 Mar 20 - No Cached
  • A leading cyber security firm says criminals and a group affiliated with China are capitalizing on growing fears over the coronavirus, leading to a spike in malicious online activity.
  • "They've been sending people emails to prey on people's fears and open attachments
    • lavendersheshe
      lavendersheshe on 12 Mar 20
       
      It is important to be careful on opening suspicious emails and rely on watching the news to learn about the coronavirus updates. Opening such emails and downloading attachments can launch a harmful virus into your system and lead to your computer being hacked
  • China-based adversary known as PIRATE PANDA uses major news events as a lure to implant malware that allows remote access to a victim's computer network
  • ...3 more annotations...
  • Another group, identified by CrowdStrike as MUMMY SPIDER, is using the coronavirus theme in an "email thread-hijacking technique" that "ultimately led victims to download malware
  • The security firm said the strategy can be used to steal financial information or login credentials, and expanded to other targets
  • CrowdStrike also reported a surge in queries from companies who anticipate employees will work from home over the next three months, which can leave company data more vulnerable
    • lavendersheshe
      lavendersheshe on 12 Mar 20
       
      If employees work from home then an organization has less control over the security of online systems and exposes the company to more risk.
  • lavendersheshe on 12 Mar 20
     
    Cybercrime has been on the rise since the outbreak of the coronavirus and hackers are capitalizing on the fact that people are now more concerned about protecting themselves and their loved ones. It is important to be more aware now as an organization in making sure that employees are informed on safety measures on using systems when there at home, using the needed resources in increasing Cyber security and backing up important information.
« First ‹ Previous 41 - 60 of 196 Next › Last »
Showing 20▼ items per page