Business Continuity & Backup in the Ransomware Era

What Is the Best Way to Protect My Business from Ransomware Disasters?

Ransomware attacks don’t just encrypt your files—they can exploit gaps in your backup and sync processes, bringing operations to a halt. Modern continuity planning demands more than on-premises snapshots: it requires layered defenses, cloud-native backups, and real-time monitoring.

Embrace a “Defense-and-Recovery” Mindset

• Prevent: Deploy a SASE framework to enforce Zero Trust access, inspect traffic for threats, and reduce your attack surface—wherever your people work.

• Detect & Respond: Leverage Endpoint Detection & Response (EDR) and 24/7 monitoring to catch intrusions in minutes, not days.

• Recover: Use a purpose-built Microsoft 365 backup solution that retains point-in-time copies of SharePoint, OneDrive, Exchange, and Teams—isolated from synchronization loops.

Why Backup Alone Isn’t Enough

• Sync-Deletion Risks: Local file-syncing can propagate accidental—or malicious—deletions across your entire tenant.

• Ransomware Encryption: Some strains corrupt backups stored on shared drives or network-attached storage.

• Immutable, Isolated Copies: Your backup system must store versions in a separate service or “vault” that ransomware cannot reach.

Case Study: Saved by Microsoft 365 Backup

Scenario: An employee tidied up their desktop—and unknowingly deleted a synced SharePoint folder. The sync driver purged the cloud copy within seconds.

Detection: A colleague spotted missing project files and alerted IT.

Recovery: Go West IT’s managed backup tool restored the entire folder to its state 10 minutes earlier—no data loss, no disruption.

Lesson: Immutable, point-in-time backups for Microsoft 365 are a business-saving necessity.

Building Your Continuity Plan

1. Risk Assessment: Identify critical data sources (e.g., SharePoint libraries, SQL databases).

2. Layered Protections: Combine SASE, EDR, email security, and network segmentation.

3. Backup Policies: Schedule at least hourly snapshots for high-value data—daily for less critical assets.

4. Fallback Testing: Quarterly restore drills to validate recovery steps under real-world conditions.

5. Runbooks & Playbooks: Document decision trees for incident response, communication, and escalation.

Frequently Asked Questions

Q: How often should I test my backups?

A: No less frequently than annually.  Critical systems should be tested more frequently.

Q: Can ransomware encrypt my cloud backups?

A: It depends.  If the backup solution is share-mounted, if backup credentials are compromised, if systems with access to backups are compromised, or if backup vendors are compromised, cloud backups could be encrypted; choose an immutable, service-isolated backup.

Q: What role does SASE play in continuity?

A: By inspecting and securing traffic at the edge, SASE prevents many ransomware payloads from ever reaching your network.

For a broader framework on how these terms fit into an overall security program, see the NIST Cybersecurity Framework: https://www.nist.gov/cyberframework

Ready to Future-Proof Your Business?

Don’t wait for the next outage—or the next ransom note. Partner with Go West IT for a continuity strategy that combines cutting-edge SASE security with enterprise-grade Microsoft 365 backups.

Contact us today to build your resilient IT roadmap.

Additional Questions You Might Be Asking

• What’s the difference between business continuity and disaster recovery?

• How do immutable backups work in practice?

• Which SASE vendors integrate best with my existing firewalls?

• How can I train my team to avoid sync-deletion mistakes?

Feel free to reach out—our experts are here to help you answer these and more.

The Hidden Risks of Ignoring Firmware Updates

Why Proactive Maintenance Matters for Network Hardware and Server Security

When it comes to cybersecurity, most businesses focus on software patching, antivirus protection, or endpoint detection—and for good reason. But there’s one often-overlooked area that can quietly leave your network exposed: firmware updates for your firewalls and servers.

In the managed IT world, ignoring firmware updates is like locking your front door while leaving the back wide open. These updates often address critical vulnerabilities that attackers actively exploit, and failing to apply them can give threat actors exactly what they’re looking for: an easy entry point into your network.

Why Firmware Updates Matter

Firmware is the base-level software embedded directly into your hardware devices—like firewalls, routers, and servers—that tells them how to function. These updates can:

• Patch newly discovered security vulnerabilities

• Improve performance and compatibility

• Add support for new features or configurations

• Prevent known exploits and bugs

But here’s the challenge: applying firmware updates isn’t always simple. Firmware updates frequently require a reboot and a pre-update backup is prudent if you need to revert to a known working state.  A botched update can take down a critical piece of infrastructure, making preparation, planning, and expertise essential.

Common Pitfalls of Neglecting Firmware Maintenance

Let’s look at some of the hidden risks of pushing firmware updates to the bottom of your IT to-do list:

• Unpatched Vulnerabilities: Hackers actively scan for outdated firmware on business networks, especially firewalls and edge devices.

• Downtime Risks: Incompatibilities between outdated firmware and updated software can lead to service disruptions.

• Compliance Gaps: For industries like finance and legal, outdated firmware can create audit or cyber insurance liabilities.

• Manual Headaches: Without a maintenance routine, updates become disruptive instead of proactive—leading to missed updates or risky ad hoc fixes.

Why You Need a Strategy, Not Just a To-Do List

At Go West IT, we help clients move from reactive to proactive. That means working with you to develop pre-approved, scheduled maintenance routines that handle firmware updates the right way—with planning, documentation, and fallbacks in place.

The struggle isn’t knowing firmware updates are important—it’s making time for them.

That’s why we schedule firmware patching in advance and have processes in place to apply urgent “out of band” patches for critical security vulnerabilities. 

For best practices and resiliency strategies, explore NIST’s official guidance on firmware protection: NIST SP 800-193.

Don’t DIY Your Network Security

Firmware updates may sound simple—but they’re anything but. One misstep can lead to downtime or a misconfigured device. That’s why it’s critical to have trained professionals handle this work. Our engineers ensure that every update is rolled out with care, and a pre-update backup is taken to preserve a path to revert to a known working state if the firmware update has unintended consequences. 

—

Firmware updates aren’t just IT housekeeping. They’re a critical line of defense for your network and infrastructure. If your firewall or server firmware hasn’t been updated in months (or longer), now is the time to take action.

Let’s build a secure, automated strategy that doesn’t leave your business exposed.

Frequently Asked Questions: Firmware Updates & Network Security

Why are firmware updates important for business cybersecurity?

Firmware updates address critical vulnerabilities in hardware like firewalls, routers, and servers. Without them, your network can be left exposed to known exploits that cybercriminals actively search for.

What happens if firmware updates are ignored?

Neglecting firmware updates can lead to security gaps, unexpected system outages, and even compliance issues. Outdated firmware is a known attack vector and can create serious liabilities for businesses.

How often should firmware be updated?

Ideally, firmware should be reviewed and updated on a quarterly basis, or sooner if a high-priority security patch is released. Regularly scheduled updates help avoid last-minute scrambles and reduce risk.

Can firmware updates cause downtime?

Yes, if not handled properly. Improperly executed updates can disrupt critical infrastructure. That’s why updates should be planned, tested, and deployed by trained professionals with backup and recovery options in place.

What’s the difference between software and firmware updates?

Software updates apply to operating systems and applications. Firmware updates apply to the embedded code in hardware devices, controlling how they operate. Both are essential, but firmware often goes overlooked.

Do outdated firmware versions affect compliance or cyber insurance coverage?

Yes. In industries like finance, healthcare, or legal services, outdated firmware can lead to compliance violations or cyber insurance exclusions. Regular updates support audit readiness and risk management.

How can businesses automate firmware updates safely?

The most effective approach is to create a structured update routine with a trusted IT partner. At Go West IT, firmware updates are staged, tested, and scheduled during approved maintenance windows—ensuring stability and security.

Where can I find official guidance on firmware protection?

Refer to the NIST SP 800-193 guidelines for comprehensive strategies on firmware and platform integrity protection.

The Business Cost of Downtime: Planning for IT Resilience

What is the business cost of IT downtime? How do IT outages affect financial firms? What is a resilience-first IT approach?

These are all common questions we are asked here at Go West It. So, what is the true cost of IT downtime to a business? For financial firms, accounting professionals, and attorney practices, it’s more than just lost hours—it’s lost trust, delayed transactions, regulatory risk, and potential damage to reputation. When client data becomes inaccessible or communications go dark, even briefly, the impact can echo far beyond the outage itself. That’s why a resilience-first IT approach isn’t just a smart strategy—it’s a critical business imperative. By planning for disruption before it happens, firms can protect operations, preserve client confidence, and stay focused on growth instead of damage control.

IT Outages Don’t Just Interrupt—They Impact Everything

An IT outage isn’t just an inconvenience—it’s a chain reaction. For financial firms, accounting professionals, and attorney practices, even a short disruption can bring operations to a standstill, strain client relationships, and trigger costly compliance concerns. When systems go dark, so does visibility, responsiveness, and credibility. In a space where trust and timing are everything, consistent uptime is not optional—it’s foundational.

That’s why forward-thinking firms are shifting their focus to IT resilience: a proactive strategy that ensures business continuity, protects data, and keeps services running even when technology falters.

Case Study: When Minutes Turned Into Thousands

Let us share a quick story to bring home the level of impact an IT outage can have on your business. Last quarter, a Denver-based wealth advisory firm experienced a full-day outage during peak client reporting season. A failed firmware update on their firewall triggered a cascade of failures. Their internal IT support couldn’t recover the systems fast enough, and client communications stalled.

The fallout?

• Delayed reporting for dozens of high-net-worth clients

• $33,000 in emergency IT response and client retention costs

• A reputational hit that affected three potential client deals

• Team morale and productivity took weeks to rebound

It wasn’t just the actual outage that impacted this organization—it was the recovery, the distraction, and the business opportunities lost.

What an Outage Actually Looks Like

Outages are more than a few moments of screen-free frustration. In a financial services environment, they can spiral quickly:

• Internal communication grinds to a halt—no email, no CRM, no internal chat

• Files become inaccessible—advisors can’t pull up needed documentation

• Phone systems fail—calls are missed or dropped

• Scramble mode kicks in—staff shift focus from core tasks to damage control

• Tension rises—leadership juggles vendors, legal concerns, and client reassurance

By the time systems are restored, the firm isn’t just catching up—it’s cleaning up.

QUOTE: When asked about best practices for staying protected from IT outages, David Lewien of Go West It commented, Essential planning focuses not only on how to resume services but how to manage communications internally and with clients when key systems are down.  Ask, how do we communicate internally or with clients if we don’t have access to email, Teams chat, or phones?  Planning for alternative communication paths, such a private messaging apps for internal communications and pre-planned methods to send client communications from hosted CRM systems or via websites, are common approaches.”

The Turnaround: Partnering with Go West IT

After the incident, the advisory firm brought in Go West IT as its managed services partner to assess and rebuild its IT strategy. Go West IT got to work and implemented a resilience-first approach designed to keep downtime from spiraling into disaster:

• Risk-based firmware update planning with approved maintenance windows

• Business continuity and disaster recovery planning tailored to preserve communication options

• Layered cybersecurity controls to minimize single points of failure

• 24/7 monitoring to catch early signs of failure

• Cloud-based backups for critical data availability

• Quarterly system health checks and testing routines

Today, their team runs confidently knowing they’re supported by proactive infrastructure and a partner that’s always thinking ahead.

Downtime Costs More Than You Think

A momentary outage can ripple into:

• Loss of trust from clients expecting real-time visibility and uptime

• Regulatory concerns if communications or financial data are delayed

• Operational disruption as teams scramble to recover and regroup

• Business development setbacks occur when attention is pulled away from growth

IT Resilience Isn’t Luck—It’s a Plan

IT security should always be in a proactive mode to reduce the need to be reactive. Here’s how financial firms, accounting professionals, and attorney practices are preparing:

1. Mapping critical vulnerabilities across systems and workflows

2. Building redundancy and cloud-based failovers

3. Automating maintenance, especially for firmware and patching

4. Defining downtime protocols so no one scrambles in a crisis

5. Partnering with experts like Go West IT to monitor and guide the entire strategy

Don’t Wait for the Next Outage

Downtime is inevitable. Disruption doesn’t have to be. Go West IT gives financial firms, accountants, and lawyers, along with other businesses, the foundation to bounce back and bounce forward. Because real resilience is proactive, not reactive.

Talk to us today and future-proof your firm.

Why EDR Is Essential for Cybersecurity in 2025

In the past, installing antivirus software may have felt like a solid cybersecurity strategy. It scanned files, blocked known threats, and reassured business leaders they were protected. But in today’s threat landscape, that’s simply not enough.

Enter EDR: Endpoint Detection and Response.

While antivirus is designed to prevent attacks, EDR is built to detect and respond when prevention fails. And make no mistake—threat actors will eventually get in. The real question is: how fast can you detect the intrusion and shut it down?

Why EDR Is No Longer Optional

In 2025, attackers move fast. According to the CrowdStrike Global Threat Report, the average eCrime breakout time dropped to just 48 minutes, with some intrusions moving even faster. If you don’t have real-time detection and response in place, your organization could suffer significant damage before you even realize there’s a problem.

EDR enables your business to:

• Identify unusual or unauthorized activity on endpoints in real-time

• Automate immediate containment and isolation of threats

• Provide forensic data for root cause analysis

• Support remote/hybrid environments with decentralized device protection

• Reduce ransomware dwell time and stop lateral movement across your network

It’s no longer a “nice to have.” It’s an operational requirement—especially if your business isn’t confined to a physical office space.

Beyond Antivirus: Why EDR Complements Prevention

Traditional antivirus tools focus on signature-based detection, meaning they’re limited to known threats. EDR, however, uses behavioral analysis, threat intelligence, and machine learning to identify malicious activity even when it doesn’t match known malware.

This makes EDR especially effective at catching fileless attacks, hands-on-keyboard intrusions, and zero-day exploits—which are on the rise.

“Antivirus protects against the known. EDR protects against the unknown—and helps you recover when the inevitable breach occurs.”

Learn more about our Advanced Endpoint services.

A Must for Hybrid Work and Remote Teams

Remote and hybrid work has removed the safety net of corporate firewalls. Employees are now accessing sensitive data from home offices, airports, and cafés.

EDR ensures that security doesn’t stop at the perimeter. With device-level visibility and response capabilities, you can extend protection to wherever your people work.

The Go West IT Advantage

As a CrowdStrike Certified Partner, Go West IT deploys industry-leading EDR solutions backed by 24/7 monitoring, real-time alerting, and expert support. We align EDR with your broader cybersecurity posture—whether you’re a financial institution, law firm, or growing business managing sensitive data.

Want to know if EDR is right for your environment?

Talk to an expert at Go West IT today.

New NIST Password Rules for Businesses

The Shift in Password Policy Thinking

Historically, password guidance encouraged frequent password changes, strict complexity rules, and user responsibility for remembering strong combinations. However, this approach often led to weaker security. People reused passwords, wrote them down, or made only minor changes—actions that left systems vulnerable.

NIST’s updated Digital Identity Guidelines (SP 800-63) flip the script. The focus is now on longer passphrases, limiting password reuse, and eliminating frequent reset policies unless a breach is suspected. This change is rooted in real-world data on how users behave and how attackers exploit predictable password habits.

Why This Guidance Matters Now

As cyberattacks grow more sophisticated and identity-based breaches become more common, password hygiene is no longer a “set it and forget it” exercise. Poor password practices can expose your organization to serious risk—especially if users recycle passwords or fall victim to phishing.

This real-world example shows how a single compromised account during tax season led to a serious breach—and how Go West IT helped the firm recover through improved email security, identity management, and employee training.

Key Takeaways from the NIST Guidelines

  1. Eliminate routine password expiration

Forced resets often lead to simple, guessable variations (like Fall2024! → Winter2024!). Instead, passwords should only change when there’s a known compromise.

  • Use longer passwords or passphrases

A string of memorable words is more secure and easier to remember than a short, complex mix of characters. Think “CoffeeTableSunset” instead of “P@ssw0rd1!”

  • Block known breached passwords

Systems should check new passwords against a list of previously exposed ones. This is especially important for enterprise accounts.

  • Support password managers and MFA

Encourage tools that help users manage unique passwords and add multi-factor authentication (MFA) for added protection.

How Go West IT Helps You Stay Aligned

As part of our identity and access management services, Go West IT aligns your password and user policies with current best practices—whether you’re operating on Microsoft 365, managing remote employees, or scaling your systems.

We’ll help you:

• Configure strong authentication requirements

• Integrate password screening tools

• Implement MFA across key systems

• Reduce risk exposure due to weak or compromised credentials

Looking Ahead: A Simpler, Stronger Approach to Security

Password fatigue is real, and so is the risk of ignoring modern password hygiene. NIST’s guidance is a smart reset, giving businesses a clear path to user-friendly, effective security. Want to evaluate your current password policy? Let’s talk and see how we can help strengthen your identity management and close critical gaps.

Why Your Business Needs a DMARC Reject Policy

Email remains a primary communication tool for businesses. However, with the rise of cyber threats such as phishing, spoofing, and email impersonation, ensuring the security of your email communications has never been more critical. One effective way to protect your business from these threats is by implementing a DMARC (Domain-based Message Authentication, Reporting, and Conformance) reject policy. But what exactly is a DMARC reject policy, and why is it so valuable for your business? Let’s dive in.

What is DMARC?

DMARC is an email authentication protocol that helps protect your domain from being used in email spoofing attacks. It works by aligning two existing email authentication technologies: SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail). By setting up a DMARC policy, you can instruct receiving email servers on how to handle emails that fail SPF and DKIM checks.

The Role of a DMARC Reject Policy

A DMARC policy can be set to one of three modes: none, quarantine, or reject. The reject policy is the strictest and most effective option. When you set a DMARC reject policy, you are instructing receiving email servers to outright reject any emails that fail DMARC checks. This means that fraudulent emails attempting to spoof your domain will never reach the recipient’s inbox.

Practical Value for Business Owners

  1. Enhanced Email Deliverability: By implementing a DMARC reject policy, you ensure that only legitimate emails from your domain are delivered to recipients. This reduces the chances of your emails being marked as spam or junk, thereby improving your email deliverability rates.
  2. Brand Protection: Email spoofing can severely damage your brand’s reputation. When cybercriminals send fraudulent emails pretending to be from your domain, it can lead to a loss of trust among your customers and partners. A DMARC reject policy helps protect your brand by preventing these malicious emails from reaching their targets.
  3. Customer Trust and Confidence: Customers are more likely to trust and engage with your emails when they know that your domain is protected by DMARC. This trust can lead to higher open rates, click-through rates, and overall engagement with your email campaigns.  DMARC policies are easily queried to see the status of your policy.

Cybersecurity Value

  1. Protection Against Phishing and Spoofing: Phishing attacks often rely on email spoofing to trick recipients into believing that the email is from a trusted source. By implementing a DMARC reject policy, you can significantly reduce the risk of phishing attacks targeting your domain.
  2. Compliance with Security Standards: Many industry regulations and security standards now recommend or require the use of DMARC to protect email communications. By setting a DMARC reject policy, you demonstrate your commitment to cybersecurity best practices and regulatory compliance.
  3. Actionable Insights: DMARC provides detailed reports on email authentication results, allowing you to monitor and analyze email traffic. These insights can help you identify potential security issues and proactively address them.

Conclusion

Setting a DMARC reject policy is a crucial step in safeguarding your business’s email communications. It not only enhances your email deliverability and protects your brand but also provides robust cybersecurity benefits. By taking this proactive approach, you can build customer trust, comply with industry standards, and stay ahead of cyber threats. Don’t wait until it’s too late—implement a DMARC reject policy today and secure your business’s digital future.

Go West IT now offers a service to implement a DMARC Reject Policy and monitor DMARC for new sending sources and potential spoofing attacks. Contact us to discuss protecting your business email communications.

Go West IT: 8 Years of SOC 2, Type II Compliance

At Go West IT, trust and security are at the heart of everything we do. That’s why we undergo a SOC 2, Type II audit every year—ensuring that our managed IT services meet the highest standards of data security, operational integrity, and compliance.

This year marks our 8th consecutive SOC 2, Type II audit, reaffirming our unwavering commitment to safeguarding sensitive business data and providing financial services firms with a secure IT environment.

What is a SOC 2, Type II Audit?

A SOC 2, Type II audit is a rigorous, independent assessment conducted according to standards set by the American Institute of Certified Public Accountants (AICPA). Unlike a one-time certification, this evaluates our security controls over an entire year to ensure ongoing compliance in three key areas:

  • Security – Protecting systems and data from unauthorized access
  • Availability – Ensuring IT services remain accessible and reliable
  • Confidentiality – Keeping sensitive business information secure

For financial institutions and other regulated businesses, this certification provides assurance that Go West IT has policies, procedures, and controls that are appropriate for the services we deliver and that we adhere to those controls.  Further, it provides our clients with a simple way to validate the same and check the vendor management box by reviewing our audit on an annual basis.   

Why SOC 2, Type II Audits Matters

While many IT service providers claim to prioritize security, few go through the demanding process of annual SOC 2, Type II audits. Why? Because it requires:

  • Comprehensive internal security controls
  • Continuous monitoring and evaluation
  • Strict adherence to data protection best practices
  • Transparent, third-party validation

Many IT providers simply lack the processes, procedures, controls, or commitment to undergo this level of scrutiny. At Go West IT, we embrace it because we know it’s what our customers need to stay compliant, secure, and resilient against cyber threats.  Constant Improvement is one of our core values and regular audits help us improve every year.

Read everything you need to know about SOC 2 certification here. 

The Financial Services Advantage

For financial institutions, regulatory compliance is a constant challenge. Working with a SOC 2, Type II-audited IT provider like Go West IT means:

  • Stronger security posture aligned with regulatory expectations
  • Reduced audit burdens—our certification provides key compliance documentation
  • Peace of mind knowing your IT provider meets strict industry standards

Learn more about how we help financial institutions meet IT compliance.

Committed to Security, Year After Year

Completing a SOC 2, Type II adit isn’t a one-time achievement—it’s a continuous effort that requires ongoing investment in cybersecurity, compliance, and operational excellence.

At Go West IT, we don’t just meet the standards—we set them. Whether you’re in financial services, legal, or another regulated industry, you can trust us to provide secure, reliable, and compliant IT solutions that support your long-term success.

Want to ensure your IT provider meets the highest security standards? Contact Go West IT today.

IT Security & Compliance FAQ: Essential Terms Explained

Navigating IT security and compliance can feel overwhelming, especially when dealing with complex technical jargon. To help, we’ve compiled a list of frequently asked questions that break down key IT security concepts in a straightforward way.

1. What is Endpoint Detection & Response (EDR)?

Answer: EDR is a cybersecurity solution that continuously monitors user devices like computers and servers to detect and respond to threats like malware or ransomware. It provides real-time threat analysis and response to help prevent cyberattacks before they cause major damage.

2. What is a Firewall, and why is it important?

Answer: A firewall is a security barrier that monitors and controls incoming and outgoing network traffic based on security rules. It acts as a protective shield between trusted internal networks and untrusted external sources, blocking malicious activity and unauthorized access.

3. What does ‘End of Life (EOL)’ mean for software?

Answer: EOL refers to the point when a software vendor stops providing updates, patches, or technical support for a product. Running outdated, unsupported software increases security risks, as vulnerabilities are no longer fixed.

4. How does Multi-Factor Authentication (MFA) enhance security?

Answer: MFA requires users to verify their identity using two or more authentication factors, such as a password and a temporary code sent to their phone. This extra layer of security helps prevent unauthorized access, even if a password is compromised.

5. What is Dark Web Monitoring?

Answer: Dark Web Monitoring involves scanning hidden areas of the internet where stolen data is bought and sold. Businesses use this service to detect leaked passwords, financial information, or other sensitive data before it is exploited.

6. What is the difference between a Security Event, Security Incident, and a Breach?

Answer:

  • Security Event – Any observable occurrence related to an organization’s security, such as receiving a phishing email.  Events occur regularly and do not always lead to a security incident or breach.
  • Security Incident – When a security event leads to a violation of a company’s security policy or controls.  A security incident is often a pre-cursor to a breach but early detection of and reaction to an incident may prevent a breach. 
  • Breach – Unauthorized access to data, applications, network, or devices that results in or may result in information being exposed, leaked, stolen, destroyed, or altered. 

7. What does a Password Manager do?

Answer: A password manager securely stores and encrypts passwords for various accounts. It helps users improve password hygiene by making it easier to create and store long, strong, unique passwords.  Improved password hygiene  reduces the risk of security breaches caused by weak or reused passwords.

8. How does a VPN (Virtual Private Network) improve cybersecurity?

Answer: A VPN encrypts traffic (data) as it is passed across the public Internet.  A VPN connection might be established between a user’s device and a corporate network, or between two networks, or by using a VPN service which encrypts and anonymizes Internet browsing from a specific device.  Encrypting traffic, with A VPN, helps prevent hackers from intercepting sensitive information, especially when employees work remotely or use public Wi-Fi.  However, a VPN does not make a device or network impervious to threat actors.   

9. Why is regular Patching important for businesses?

Answer: Patching involves updating software to fix vulnerabilities, bugs, and security gaps. Cybercriminals often exploit outdated software, so applying patches regularly reduces the risk of threat actors taking advantage of known vulnerabilities.

10. What is Phishing Training, and why does it matter?

Answer: Phishing training educates employees on how to recognize and report fraudulent emails designed to steal sensitive information. Regular simulated phishing campaigns help reduce the likelihood of falling victim to real phishing attacks.

11. What is DMARC, and why is it critical for email security?

Answer: DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that prevents attackers from sending fraudulent emails using your domain. Implementing DMARC protects businesses from phishing, email spoofing, and brand impersonation.

13. What is Secure Access Service Edge (SASE)?

Answer:  SASE is a service that combines always-on VPN encryption with robust network traffic monitoring to prevent and detect malicious or unauthorized activities.  SASE can also provide a very secure remote access solution to supplant traditional VPN services and it provides a conditional access additional mechanism to only allow certain user devices to connect to corporate resources on the network or in the cloud.

How does Go West IT help businesses with IT security and compliance?

Answer: Go West IT helps businesses secure their IT infrastructure in alignment with compliance requirements. Our services include:

  • Managed next-generation antivirus, patch management, and devices monitoring.
  • Managed firewall configuration, vulnerability patching, and alert monitoring.
  • Managed Endpoint Detection & Response (EDR)
  • Managed password manager solutions including dark web monitoring.
  • Vulnerability scanning
  • DMARC configuration and ongoing monitoring.
  • Managed backup, login analysis, threat detection, and phishing protection for the Microsoft 365 environment.
  • By providing a SASE solution for remote access security, monitoring, and conditional access controls.

Understanding IT security terminology is key to protecting your business from evolving threats. If you have questions about your organization’s cybersecurity posture or need expert guidance, Go West IT is here to help.

Need IT security support? Contact Go West IT today to ensure your business stays secure and compliant.

Avoiding a Cybersecurity Upset: How One Business Lost Big During Tax Season

March Madness isn’t just for basketball—it’s also the perfect metaphor for cybersecurity. In the world of college hoops, you can’t rely on last year’s strategies to win this year’s championship. Your competitors are constantly improving, analyzing past plays, and adjusting their tactics. The same applies to cybersecurity—especially for businesses handling sensitive financial data.

Unfortunately, one accounting firm learned this lesson the hard way last tax season. Before working with us, they believed their existing security measures were enough to protect them, but cybercriminals were playing a much more advanced game. Their lack of email security and data hygiene left them vulnerable, and when tax season rolled around, they suffered a devastating loss.

The Play-by-Play: A Costly Mistake

Everything seemed normal in early March. The firm’s accountants were busy filing returns and managing financial documents for their clients. Then, it happened—one of their employees received an urgent email that appeared to be from a longtime client requesting a tax return update. The email was well-crafted, used the client’s real name, and contained no obvious red flags. Without second-guessing, the employee responded, attaching sensitive financial documents.

A few days later, the real client called, confused. They hadn’t sent that email. It was a business email compromise (BEC) attack, and now, the cybercriminal had access to highly confidential tax documents, Social Security numbers, and financial records. By the time the firm realized what had happened, thousands of dollars were stolen in fraudulent tax refunds, and their reputation was on the line.

What Went Wrong?

Just like trying to rely on the same roster year after year in basketball, the firm was relying on outdated security strategies. Here’s where they fell short:

  • No DMARC Policy – Their email domain lacked proper authentication protections, allowing cybercriminals to spoof their email addresses and trick employees.
  • No Multi-Factor Authentication (MFA) – A hacker had previously compromised an employee’s email account, and without MFA, it was easy to use that access to gather more intelligence.
  • No Secure File Transfer Policy – Employees were sharing sensitive tax documents over email instead of using encrypted portals.
  • Lack of Employee Awareness – The firm had no regular cybersecurity training, so employees weren’t trained to spot sophisticated phishing scams.

Adjusting the Game Plan: How They Recovered

After the breach, they reached out to Go West IT for help, and we immediately stepped in to strengthen their cybersecurity, ensuring they never faced an upset like this again. We implemented:

DMARC, DKIM, and SPF Policies – To prevent email spoofing and ensure only legitimate emails were sent from their domain.

Multi-Factor Authentication (MFA) – Adding an extra layer of security for email logins and financial platforms.

Encrypted File Sharing – Transitioning the firm to a secure document-sharing platform rather than using email attachments.

Phishing Awareness Training – Conducting simulated phishing campaigns to test and train employees to recognize scams.

24/7 Email Monitoring – Installing advanced email security solutions to detect and block suspicious activity before it reaches employees.

Tax Season & Cybersecurity: Don’t Leave Your Business Vulnerable

Tax season is already stressful enough—don’t make it harder by leaving your business exposed to cyber threats. Cybercriminals are constantly evolving, just like the competition in March Madness. If your security strategy hasn’t been updated recently, you’re taking a gamble on your business.

Instead of guessing who might attack next, fortify your defenses. Let Go West IT help you develop a winning cybersecurity game plan that protects your business from tax fraud, email compromise, and financial theft.

Are your cybersecurity defenses ready for the next big game? Contact Go West IT today to ensure you’re prepared for whatever threats come your way.

Why Businesses Need to Act on DMARC Reject Policies Now

Email security is undergoing a major shift, and if your business relies on email communication (as most do), it’s time to pay attention. You may start hearing more about DMARC (Domain-based Message Authentication, Reporting, and Conformance) and its impact on email deliverability. Large email providers like Google and Yahoo are now enforcing stricter DMARC policies, requiring organizations to adopt better authentication measures—or risk having their emails rejected outright.

Ignoring these changes could mean disrupted communication with clients, vendors, and partners, increased susceptibility to email fraud, and damage to your business’s reputation. Here’s what you need to know and how to ensure your organization stays protected.

What is DMARC and Why Does It Matter?

DMARC is an email authentication protocol designed to prevent email spoofing and phishing attacks. It works in conjunction with SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) to verify that the sender of an email is authorized to use a given domain.

With stricter DMARC enforcement policies now in place, emails that fail authentication may be rejected entirely or flagged as spam—significantly impacting your email communication and business operations.

How to Tell if an Email is DMARC Approved or Rejected

Understanding how DMARC policies impact email security is crucial. When an email is sent, email servers verify whether it passes authentication checks before allowing it into an inbox. If these checks fail, the email is either marked as spam or rejected altogether.

Here’s a quick comparison of what a DMARC-approved email looks like versus one that fails authentication:

DMARC Approved (Passes SPF, DKIM, and DMARC Checks)DMARC Failed (Rejected or Marked as Spam)
✅ From: support@yourcompany.com❌ From: support@yourc0mpany.com
✅ Sent via: yourcompany.com❌ Sent via: unknownserver.com
✅ SPF Alignment: Verified❌ SPF Alignment: Failed
✅ DKIM Signature: Valid❌ DKIM Signature: Missing or Mismatched
✅ DMARC Policy: Pass❌ DMARC Policy: None or Reject
✅ Lands in Inbox❌ Marked as Spam or Rejected

If your legitimate business emails are being marked as spam or failing to reach recipients, it may be time to review and implement a strong DMARC policy. Without it, your business could face email spoofing risks, phishing attacks impersonating your domain, and a loss of trust from customers.

The Business Risks of Ignoring DMARC Reject Policies

If your company’s domain lacks proper DMARC configurations, you could face:

  • Email Deliverability Issues: Emails sent from your domain may not reach clients, partners, or employees if they fail authentication checks.
  • Increased Cybersecurity Risks: Attackers frequently use domain spoofing to impersonate businesses in phishing scams. Without DMARC, your domain is vulnerable to misuse.
  • Regulatory and Compliance Challenges: Many industries, especially finance and legal sectors, are tightening email security requirements. Non-compliance could lead to fines or reputational damage.
  • Customer Trust Erosion: If fraudulent emails appear to come from your domain, your brand’s credibility takes a hit—leading to lost business and damaged relationships.

How Businesses Can Adapt and Secure Their Email Communication

The good news is that Go West IT has a solution. As a Managed IT and cybersecurity provider, we specialize in configuring and enforcing DMARC, SPF, and DKIM policies to secure business email communications. Here’s how we can help:

  • DMARC Policy Implementation: We assess your domain and establish an appropriate DMARC policy (Monitor, Quarantine, or Reject) to enhance security without disrupting legitimate emails.
  • Email Authentication Configuration: We properly configure SPF and DKIM records to align with your email-sending sources, ensuring all authorized emails pass authentication.
  • Ongoing Monitoring & Reporting: DMARC reports provide insights into who is sending emails on your behalf. We analyze these reports to detect unauthorized use and prevent future threats.
  • Strategic Rollout to Avoid Business Disruption: Enforcing DMARC too aggressively without monitoring can lead to unintended email rejections. We implement a phased approach, allowing you to monitor and adjust policies before moving to a full reject mode.

Stay Ahead of Email Security Threats

Email remains a primary attack vector for cybercriminals, and with the latest enforcement of DMARC policies by major providers, businesses must take action to protect their domains. Go West IT ensures your email security is up to modern standards—reducing your risk, maintaining email deliverability, and keeping your business communications secure.

Don’t wait until email failures or phishing attacks disrupt your business. Contact Go West IT today to ensure your email domain is secure and compliant with the latest DMARC policies.

CONTACT

Go West IT, Inc.
7951 E Maplewood Ave
Suite 260
Greenwood Village, CO 80111
Phone: 303.795.2200
Stay informed. Join Our Newsletter.

Subscribe

LATEST NEWS

The owner of this website has made a commitment to accessibility and inclusion, please report any problems that you encounter using the contact form on this website. This site uses the WP ADA Compliance Check plugin to enhance accessibility.