Blog

The Sarnia Lambton Chamber of Commerce is about to begin the lead-up to the annual Outstanding Business Achievement Awards gala, which this year takes place on Friday, October 18 at the Imperial Theatre in downtown Sarnia.

On Wednesday, May 8, the official launch of the nomination period takes place at an event to take place at noon at the Imperial Theatre.

Thanks to the generous support of Libro Credit Union, a great partner who is returning as the title sponsor, the Chamber is well poised to make this 30th anniversary event another great one for companies and individuals.

The key for those who are nominated is to put their best foot forward in showing the entire community what it means to set new standards of achievement in the 16 categories of the OBAAs.

In a spirit of continuous improvement, an operating philosophy that many organizations have embraced over many years—even decades—the Chamber is working to make it easier for companies and individuals to be nominated.

There was a day, not so very long ago, when mounds of paper were the norm, starting with paper-based nomination forms, plus the submissions of those nominated for an Outstanding Business Achievement Award.

During last year’s event, the Chamber took big steps toward slimming down the paperwork. This year staff and volunteers hope to do even better, not just by continuing with the online nomination form but with improvements to the workflow that will make tracking each nominee through acceptance, submission and judging more efficient.

It’s a task that Chamber president and CEO Shirley de Silva hopes will improve the entire process, even as she expresses gratitude for those who lend their expertise to the process.

“Three decades of focusing on the achievement of so many companies has become a big part of the narrtive that those who attend the OBAA event are able to share throughout the year,” said de Silva.

“It’s events like the Outstanding Business Achievement Awards gala that help push us forward, even as we look to our peers for encouragement and congratulations on the kind of accomplishments that we can all celebrate together.”

Look to the Chamber website (and this newsletter) for upcoming news on the 2019 Outstanding Business Achievement Awards gala, including a link to the digital nomination form.

Cybersecurity is a pretty big deal if you own a business.

It’s no big revelation that strong cybersecurity measures are a necessity, for a lot of reasons. We’re all familiar with hackers and viruses and high-profile attacks generally speaking. But we also assume “Hey, of course they’re going to target the CIA or a massive billion-dollar enterprise. But why would they bother targeting my coffee shop in Cornwall?” Here’s the real deal though: companies with fewer than 250 employees comprise almost a third of those targeted by cyber attacks. Attackers go for the targets who have the weakest defenses, so they look at smaller businesses, knowing they might not be taking security as seriously as they should. Which means your business needs to be prepared. And the best way to start preparing is to actually understand the types of threats out there.

So, to help you get started, let’s do a rundown of common threats small and medium businesses frequently come up against, as well as the weaknesses that attackers tend to exploit with businesses like yours.

Be malware aware

Let’s start by looking at the term “malware”: it’s a broad term, used to refer to any piece of software or firmware that is used to harm a device or system. Here’s a closer look at some of the more specific kinds of malware your business might have to face.

Virus

What is it? No doubt, you’re familiar with this term. Simply put, this category of malware is a piece of code that inserts itself into a program. The affects can range from minor annoyances—like a program slowing down or freezing up—to major security breaches.

What does this mean for my business? While any virus can affect the day-to-day operations of your business’s computer systems and programs, there’s a specific type of virus that is especially significant if your business runs on a network of computers, known as a Worm: a self-replicating virus. They don’t just affect one computer because they’re capable of making their way through an entire network, which means your whole business can slow to a halt if the virus is damaging enough.

Memory scraper/dumper

What is it? Here’s the deal with scrapers and dumpers: they essentially access a device’s memory and copy it over to the attacker, giving them access to any information stored on it.

What does this mean for my business? Scrapers and dumpers are major players in a lot of cyber attacks against businesses. Every business has sensitive information. Even if you’re thinking “hey, I’m not a law office or a financial institution, what ‘sensitive information’ could possibly draw an attacker to me?” Well, for identity theft, your employee’s personal information, for instance. And if you’re a retailer, your point-of-sale terminal is pretty appealing, filled with valuable credit card information stored in them. Which means your customers are also put at risk if you don’t have proper (and frequently updated) firewalls set up on your POS system. This is a huge liability for your business that could result in legal consequences for you as the owner.

Spyware/RATs

What is it? You would think that anything with the word “spy” in it would at least be a little bit cool. Turns out, great film genre, but a terrible malware problem to encounter. An attacker uses spyware to monitor activity on a device or network, so they can see everything from your online activity, to log-in credentials, and even keystrokes. There are also remote administrative tools, or RATs². While spyware lets attackers monitor your system, RATs fully hand over control of the device to the attacker, as if they were sitting right at your desk.

What does this mean for my business? It’s easy to brush off spyware by thinking “who would want to spy on little ol’ me and my business? It’s not THAT interesting.” The reality is, whether or not you think your business is “worth” hacking is beside the point. (P.S.: of course your business is interesting! And we don’t just mean to hackers!).

What it really comes back to is what we mentioned before: you probably have more sensitive information stored in your business’s network than you realize that spyware could access: employee information, customer payment details, your financial information and more.

Ransomware

What is it? Like the name implies, ransomware is like a hostage situation. An attacker encrypts their target’s files so they are unable to be accessed until a ransom is paid—usually some form of cryptocurrency sent to an untraceable account. These have been in the news a lot recently, like when the city of Atlanta had to pay over $2.6 million in response to ransomware attacks that infected the city’s municipal systems³. To look at the big picture here, one study actually showed that the downtime from ransomware alone could be costing businesses more than $8,500 per hour⁴.

What does this mean for my business? This is a little more direct of a threat than someone trying to get a hold of your sensitive information. It skips the middleman, basically, and gets straight to turning a profit for the attacker, who can block a business’s access to files—such as your customer list, projects you’re working on, etc.—programs like crucial software or email services, or networks until their demands are met. So, whether you’re a multi-billion-dollar company or our old friends at that coffee shop in Cornwall, you could be a target.

How’d you get in there?

We know what kinds of attacks are commonly used against small and medium businesses now, but how do they even get into our systems in the first place? Let’s take a look at some of the techniques hackers use to give you an idea of what you need to be cautious of.

Downloader

What is it? You’ve probably heard these referred to as Trojans, like the big ol’ wooden horse in the story. Same idea here: hide something dangerous in something that looks totally harmless.

How could my business be targeted? Malware is hidden within folders that might contain actual files you do need, making them appear perfectly safe. For example, folders containing programs, apps, media or documents you found online that seem like they could be useful. That’s why you should always make sure you trust the source that you’re downloading folders from, and always make sure your antivirus software is regularly updated to scan for these kinds of hidden files.

Phishing

What is it? Phishing is becoming one of the most common techniques used against businesses, because on the surface, it can seem like a perfectly legitimate business inquiry or—even more anxiety-inducing—an urgent notice. And that’s where the bait-and-switch happens: a link or download contained in the email contains malware.

How could my business be targeted? Some attackers go beyond just the typical random email that seems, well, phishy. More and more, attackers are using a technique known as “social engineering” to increase the likelihood of success, gathering information off of company websites, or even over the phone to get employee names, job titles, and other relevant information to make the eventual phishing email, text or call seem more legitimate. No matter how much you trust your employees and know you’ve hired smart and cautious people, good phishing schemes can be hard to identify when they get to this point. That’s why company-wide training in security is so important. You and your employees should all be armed with knowledge that can help you identify suspicious calls from unknown people looking for company information that attackers will later use for a phishing scheme.

DDoS

What is it? A distributed denial of service attack (DDoS) targets a company’s website, overwhelming the site from multiple attack hosts to the point of blocking any other visitors to access the site.

How could my business be targeted? Say you have a potential customer who’s looking for whatever product or service you offer. Or maybe their neighbour recommended your shop or restaurant. Where’s the first place they’re likely to go to find out more? You guessed it: your website. But that’s only if they can access it. Without proper up-to-date network and web application firewalls, your site could get attacked. And here’s the thing: DDoS attacks are cheap on the black market for attackers to acquire, so it’s an easy way for them to get to you. While they have your site locked up, you could lose potential customers or clients to a competitor whose site is working. Hackers believe you’ll pay to avoid that kind of potential loss of business.

Exploiting personnel oversights

What is it? You may have the greatest employees in the world. But… when it comes to digital security, people are always going to be one of the weakest links. Only 1 in 5 businesses use regular employee training as a method of preventing online security breaches.

How could my business be targeted? Let’s go the opposite direction this time and ask: How can your business avoid being targeted? Company-wide policies, processes, and training can be the difference between an attack being stopped before it even begins, and a huge security breach. You can give yourself a huge advantage by keeping everyone in your organization on the ball. Everything from educating employees on having strong passwords, implementing policies to flag suspicious calls or emails, or setting procedures for what to do if a device containing company information is lost or stolen. They say that teamwork makes the dream work, but it can also prevent a security nightmare.

You’re off to a great start by keeping yourself informed on the types of cyber threats your business might face. Spreading this knowledge to your team and letting it inform how you handle your business’s cybersecurity procedures is the next step to ensuring that you, your staff, and even your customers can be confident that your private information is safe.

This article appeared on businessblog.cogeco.ca and was reprinted with permission.

In celebration of National Economic Development Week, the Sarnia-Lambton Economic Partnership is hosting a Community Open House on Tuesday, May 7  from 4 p.m. — 6 p.m. The event will take place at SLEP’s offices in the Western Sarnia-Lambton Research Park at 1086 Modeland Road.

During the event, residents of Sarnia-Lambton, including businesses who are members of the Sarnia Lambton Chamber of Commerce, will be able to engage with staff, learn about economic development initiatives and why they are important to the community.

Residents are encouraged to share with staff members ideas and opinions as to what they would like to see in their communities.

“The Sarnia-Lambton Economic Partnership is pleased to celebrate National Economic Development Week and its importance to the growth of all municipalities in the region,” said Stephen Thompson, SLEP’s CEO.

“This is a fantastic chance for the entire community to see what the team and its partners are working on daily to support the growth of Lambton County, as well as provide feedback on what they want to see in their communities,” he added.

The Open House will also be a chance for the Economic Partnership to showcase the work it does with its various community partners and how collaboration between a variety of organizations benefits the Sarnia-Lambton area.

The Sarnia-Lambton Economic Partnership will also be celebrating National Economic Development Week by hosting a joint information session with the County of Lambton’s Planning Department, as well as City of Sarnia planning and economic development staff.

This session will provide an opportunity for each group to update each other on ongoing initiatives, future endeavours, and the sharing of ideas as they continue to elevate the features that make Lambton County an ideal place to live, work, and raise a family.

Visitor parking is available in the roundabout outside of the Economic Partnership office, while overflow parking is also available in the East Parking Lot.

The Sarnia-Lambton Economic Partnership is located on the ground floor of Building 1050 at the Western Sarnia-Lambton Research Park.

NOVA Chemicals reached out to the Sarnia Lambton Chamber of Commerce to help launch FinditLambton, a combined website and smartphone app that will help the 800-1000 construction workforce involved in its $2.2 billion expansion connect with local businesses.

In a launch event held last Thursday and following articles announcing the initiative in the Chamber newsletter, businesses were invited to create a free listing at FinditLambton.ca.

Once the listing is reviewed by NOVA officials, it becomes part of the smartphone app database that workers, from out of town and even here in Sarnia-Lambton, can use to find out about services, resources and places to eat, play and connect.

When Chamber president and CEO Shirley de Silva was approached by NOVA to help with the launch, her response was immediate.

“It’s a key part of our mission to help the business community, especially our members, not just grow but to connect and create value for the entire business community, which NOVA is doing with FinditLambton. We congratulate them on this innovative initiative and we were pleased to be a part of their launch.”

FinditLambton is up and running and ready for any and all local businesses to create a free listing and take advantage of several hundred new customers who will be coming into the area, many for the first time.

From left are pictured: Mike Elliott, a former Chamber Chair and Integration manager at NOVA, Meaghan Lawrence of NOVA, Shirley de Silva, Julia Iacovelli (also from NOVA), and Scott Palko, president of CCI Studios, which developed the smartphone app.

The Sarnia Lambton Chamber of Commerce is in the early stages of developing a series of workshops intended to help members stay current and up-to-date as they deal with ever-changing conditions in business.

Shirley de Silva, president and CEO of the Chamber, says the initiative is needed if members are to stay competitive in whatever business sector they happen to be in.

”It’s been said that if you’re standing still in business, you’re actually falling behind,” said de Silva. “We firmly believe that and are looking to help members effectively compete in this environment.”

The Chamber is already at work identifying resources—local and beyond our community—where members will be able to become even more competitive through various workshops.

Even as we work to put together this series of learning experiences, we invite you to touch base with any specific needs your business may have.

So what are your learning gaps?

We’re interested in hearing from business leaders who are keen to share their own expertise in areas where Chamber members will benefit.

Love to hear from you—by email (CLICK HERE) or by calling (519) 336-2400.

As we work together, we grow stronger, more prosperous and everyone wins.

Express Employment Professionals is once again bringing in one of its executives, Art Atkinson, who is vice president of the staffing agency’s Express University, to conduct a learning opportunity: Holding People Accountable.

While many leaders think of holding people accountable in a positive manner, there is a better way to view accountability, says Atkinson.

Attendees will learn some of the methods that he says are much more effective and productive, including:

—how to get your team members to “want to do what you want them to do.”

—how to determine why someone is not doing what you want and the ways you, as a leader, can get them to do those things.

—How important it is that your vision and each team member’s vision aligns.

—What effective one-on-ones look like and the benefits of consistently doing them.

The Tuesday, May 7, 2019 event, which has been pre-approved for two continuing professional development hours through the Human Resources Professionals Association (HRPA), will take place at the Sarnia Golf ancd Curling Club (500 Errol Road West), from 8 a.m. To 10:30 a.m. The cost is $35 plus HST and seating is limited. Breakfast is included.

Online registration is required by going to expressspeakersbureau.eventbrite.ca.

Further information about Atkinson can be seen here: