b'ACCOUNTING COLUMNA culture where individuals are punished for accidentally4. Develop a simple process to identify and reportfalling victim creates a sense of self-preservation and willa security concernresult in security concerns going unreported. For more people, cyber security is a very complicated subject, and implementing complex ways to report a concern or 2. I mplement multi-factor authentication wherever expecting individuals to understand all the emerging threats you can is unrealistic. Instead, implement a simple set of rules and Multi-factor authentication (MFA)also known as two-stepa simple process to spot and report a concern, like a shared or two-factor authenticationis a simple process where anemail inbox.individual validates their authentication beyond a username5. Use a password manager to improve the strength of and password when logging into a system or service. Itaccount securitycan be as simple as a six-digit code via text message, anFinally, account security is paramount to maintaining a authenticator app (like Google or Microsoft authenticator)secure organization, and passwords are right at its core. or a fingerprint scanner. This means if a malicious actorImplementing an organization-wide password management compromises the credentials of an individual in thetool (like LastPass or Dashlane) will ensure every password is organization, the MFA is an additional step that preventsunique and complex enough to remain secure. It also makes it them from getting access. easy to give access to shared services and keep track of account information within the organization.3.Implement a zero-trust strategy to informationIndividuals in your organization should only be given accessBy focusing on the benefits of embracing the technology to information on a business need-to-know basis. Consideravailable, youll be able to better understand where a cyber employing the trust-but-verify approach everywhere,security attack might come from and how best to protect meaning when someone is carrying out a request (likeyourself against threats. Its time to start proactively protecting changing account information of a vendor or supplier),your organizations most valuable assets. a process exists to follow up and verify the request. ItsFor more information on how to protect your business, contact Brian important to not assume that any request, even fromLaveck, Regional Leader, Real Estate and Construction Services, someone you recognize, is automatically legitimate. Thompson-Okanagan at 250-979-1731 or brian.laveck@mnp.ca.Lay your foundation for continued successYou can keep growing and boost your efciency, even in this economy. Were here to help you get started.Jessica Grantham, Partner, CPA, CA|250.979.2588 | jessica.grantham@mnp.caMNP.caSICA CONSTRUCTION REVIEWSpring 202429'