With many employees transitioning from the office to teleworking from home, video conferencing has surged in popularity and demand. Wherever your work takes you, consider these best practices to increase the security of your next video conference:

Know the Current Vulnerabilities

With a quick online search, you can stay abreast of the latest vulnerabilities associated with most web conferencing platforms. Following basic tips from security experts will protect your online meetings from compromise.

Avoid Unwanted Visitors and Content

To ensure the content of your video conferencing is shared only with its intended participants:

• Do not post meeting links (i.e. Zoom, WebEx, MS Teams) on public websites or social media.
• Do not use your personal meeting ID for meetings.
• Do not allow participants to share their screen, or require the host to approve participant desktop sharing.
• Disable file transfers unless you know the files to be shared and file sharer.
• Enable features that prevent removed participants from rejoining a meeting.
• Add a passcode to your meetings and only share that passcode with your attendees.
• Enable features that allow participants to join and interact before the host enters.
• Restrict meetings to only authenticated users if feasible.
• Enable “waiting room” features prior to starting meetings so that you can identify participants before letting everyone in.

Take Advantage of Built-In Security Bells and Whistles

Scheduling and configuring the details of your upcoming video conference is best done within the conferencing platform so you can take advantage of the built-in security features.

• If available, ensure encryption is turned on, within the software, for each video conference.
• Use a web camera cover so no one else can use your camera without your knowledge.
• Do not record the video conference unless truly necessary.
• Use background blur, digital backgrounds, or greenscreen settings to conceal information about your location.
• Turn off any “attention tracking” features that track participants during a screenshare.
• Enable muted microphones as default setting.

Your Privacy Matters

Get rid of the crumbs left behind that leave evidence of your video conferencing call so you can avoid unwanted marketing and hackers.

• Use a unique email address specifically for video conferencing.
• Clear cookies and block trackers after every video call.
• Opt out of all secondary data uses where possible.
• When there is a privacy issue, leave feedback with the service about the problem.
• Use other devices for communications during video conferences.
• Don’t sign into video conferencing platforms through third parties like Facebook or Google.

Darius K. Davenport

Practice Areas:

• Cybersecurity and Data Privacy, Practice Group Chair
• Government and Public Sector, Practice Group Chair
• Admiralty and Maritime Law
• Employment Law
• Government Contracting
• Litigation
• Railroad and Transit Law

Contact by email or phone (757) 623-3000.

The post Video Conferencing Best Practices appeared first on CWM Law.

Like your business, our law firm is dealing with a rapidly changing workplace environment as COVID-19 continues to impact our daily lives and operations. Recent amendments to the Family and Medical Leave Act, coupled with Governor Northam’s Executive Order mandating state-wide school closure, present challenges to normal small business office operations. This translates into big changes at the workplace and for those who require time off to support out-of-school children and/or those directly impacted by the diagnosis of COVID-19.

Employees

The Families First Coronavirus Response Act provides relief by expanding paid family and sick leave when employees are unable to go to work or work remotely. For those businesses with less than 500 employees, federal law now gives employees who are unable to telework the right to take up to 12 weeks of job-protected leave to care for children who cannot now attend school.  In addition, the statute expands paid sick leave to employees, up to 80 hours of paid sick leave for full-time employees. 

Businesses

Under the Act, dollar-per-dollar tax credits are available to small businesses who provide paid family leave or paid sick leave to their employees.  Smaller businesses with 50 or less employees may be able to obtain an exemption from the Department of Labor (pending guidance once law is implemented).  These amendments are effective from April 2, 2020 to December 31, 2020.

Please visit the resource page created by
Wage and Hour Division of the Department of Labor for further updates to
employees and employers responding to COVID-19.  

As your partner, Crenshaw, Ware & Martin is committed to helping you and your business navigate through any challenge. We are here to answer questions, deliver solutions and help develop multi-scenario contingency plans. Please let us know how we may be of assistance to you. 

 

Steven M. Stancliff

Practice Areas:

• Admiralty and Maritime Law, Practice Group Chair
• Autonomous and Unmanned Systems
• Government Contracting

Contact by email or phone (757) 623-3000.

 

Alexander R. McDaniel

Practice Areas:

• Admiralty and Maritime Law
• Business Disputes
• Litigation
• Railroad and Transit Law

Contact by email or phone (757) 623-3000.

The post Paid Family and Sick Leave: How it Works in the Era of Coronavirus appeared first on CWM Law.

Teleworking data-security is essential to protecting company data when employees are working at remote locations.  Consider these simple tips to encourage your company and employees to maintain data security outside of the office.

Employees

Secure Connection   Do not access company data via unsecured home or public Wi-Fi networks. When working remotely, protect data by using a Virtual Private Network (VPN) and a home firewall. Directly plug your machine into the router if possible. Segregate and conceal your work connection from other home Wi-Fi traffic.

Data Protection   Avoid transferring sensitive company data to personal devices, non-company applications, and/or prohibited external storage (physical or cloud). Do not share personal or company information online or store in personal accounts (email or cloud). Securely back up files on company storage in case of a data incident.

Device Security   Do not leave your personal or company device unsecured. Physically secure your device and external storage. Enable automatic lock and log-off screens to prevent unauthorized access when away. Do not allow anyone to use computers or devices that have access to company data. Use complex passwords and keep passwords secure when working remotely.

Software & Updates   Ensure all device applications, anti-virus, operating systems, and web browsers are up to date. Run a complete scan of your entire device before accessing company data. Remove all peer to peer, file sharing and outdated/unused applications from personal devices that access company data.

Software & Updates   Ensure all device applications, anti-virus, operating systems, and web browsers are up to date. Run a complete scan of your entire device before accessing company data. Remove all peer to peer, file sharing and outdated/unused applications from personal devices that access company data.

Avoid and Report Suspicious Activity   Contact the company and follow the company’s incident response plan to report all data security issues. Disable pop-ups and do not click on suspicious links or open unknown emails.

Avoid and Report Suspicious Activity   Contact the company and follow the company’s incident response plan to report all data security issues. Disable pop-ups and do not click on suspicious links or open unknown emails.

Do not take any significant business actions (i.e. transfer funds) without verifying the transaction with actual parties to the transaction over the phone.

Businesses

Secure Connection   Ensure Wi-Fi networks are secure, encrypted, and hidden. Configure your firewall to prevent unauthorized access to company data and applications. Provide those working remotely with device security software.

Data Protection   Implement mandatory complex passwords and multi-factor authentication for devices and applications. Limit access to data and applications based on employee roles and information needs.

Device Security   Ensure all devices that access company data are properly configured, i.e. enable automatic screen locks to engage after a period of inactivity. Implement device and communication encryption as needed.

Security Software and Updates    Increase the sensitivity of network security tools. Ensure all applications, anti-virus, operating systems, and web browsers are automatically updating on all devices.

Incident Management   Provide employees with clear data incident response guidance outlining how to report an issue, plan of action, and escalation path for remote technical and security issues.

Security Training   Keep employees trained on best practices and how to handle security issues when they arise. Ensure employees are familiar with device, email, and storage encryption practices when handling sensitive data.

Darius K. Davenport

Practice Areas:

• Cybersecurity and Data Privacy, Practice Group Chair
• Government and Public Sector, Practice Group Chair
• Admiralty and Maritime Law
• Employment Law
• Government Contracting
• Litigation
• Railroad and Transit Law

Contact by email or phone (757) 623-3000.

The post Teleworking Data Security Tips appeared first on CWM Law.