Skip to content

Good teleworking practices according to our great department heads

Do you know what good teleworking practices? We tell you everything!

Hey dear readers! This time our article may be particularly useful for you, are you teleworking while reading this? Yes? Well be honest, are you wearing your pants? You can shake your head with a smile on your mouth, or simply say to the monitor in front of you: “No, I NEVER wear my pants during work hours, THANK YOU TELEWORK!”. Yes, teleworking has brought very good things, such as less stress, reduction of expenses for the company, and decrease in absenteeism. For this reason and to emphasize that even if we do not wear pants we are responsible and mature, today, in Pandora FMS blog we want to discuss good teleworking practices.

As you know, in this blog we are more empirical than Aristotle and David Hume together, so we will address the question of good telework practices by asking our heads of department. They, more than anyone else, take charge of the situation and manage it among their workers, with enviable leadership and musky affection.

What are the good teleworking practices you promote in your department?

Sara Martín, head of Human Resources, Training and Community of Pandora FMS.

Between HR and management, we had to start by creating a manual of operating procedures for teleworking, or good teleworking practices. Creating basic rules so that people would be as comfortable as possible reconciling their family and work lives. Among the good teleworking practices that we try to carry out, are the following: a flexible schedule, breaks during the day, give importance to security with access through a VPN, a safe antivirus, use internal tools such as the company’s chat or videoconferencing, and then each department chooses how to organize themselves, there are some who prefer a daily meeting, another twice a week, etc.

Then there are several recommendations we make for anyone who is telecommuting:

  1. Have your own fixed schedule routine. (Breakfast, break, lunch.)
  2. Have your computer protected by password. So your child and cat don’t write messages when you’re in the toilet or eating.
  3. Your computer must have up-to-date security updates.
  4. Socialize through collaborative tools, don’t let telecommuting make you forget that you’re still working with people.
  5. Take special care of communicating with the rest of the team. Use the webcam and video conferencing whenever possible.
  6. Separate your personal life from your work life. When your workday is over, you should be able to disconnect.
  7. Ask your colleagues for help as if we were all in the office.
  8. Go to HR whenever you need it, their job is to help you.
  9. Take into account digital disconnection: workers have the right to forget about emails or work calls outside of their working hours.
  10. Respect the right to privacy.

Kornelia Konstantinova, Head of the Marketing and Communication Department.

In Communication, we are proud of our “Decalogue, formal but incredible, for good teleworking”. A series of flexible guidelines like the junco and robust like the quebracho. Someday we will sculpt them in stone or make T-shirts. Here I list them:

  1. Flexible working hours.
  2. Camaraderie.
  3. Team trust.
  4. People come first.
  5. Take care of mental health.
  6. More efficient and less time-consuming meetings.
  7. Information security and data protection.
  8. Physical activity and exercises.
  9. Healthy eating.
  10. Rest.

They are so practical and versatile that they can be both good teleworking practices and a self-help manual for dealing with the fact that you have reached thirty.

Daniel Rodríguez, Head of the department of QA

The fundamental rule for us QA is basic, but of course important and conciliatory with the work: Keep a schedule as regular as possible.

Keeping track of work time is the key, since being from home it is very easy to get distracted and keep on thinking “I finish this and I’m done” or some similar procrastination thought.

Regarding this, we could add an appendix to our motto:
Try to have a different work space than that for leisure. You know, if possible another room or table… Especially not to continue in the same place once the day is over. You have to discern.

Mario Pulido, head of the Department of Systems/Support

I no longer know if they are good practices or not, but the truth is that from minute one we started teleworking, the contact between the entire team has been constant. We have a meet constantly open where we are present when we are available, or need each other, and where we comment on whatever happens to us. Just like we would in the office.

The team also shares their screens when a test or intervention is complicated, and the rest of us are there, to support and indicate possible solutions. That way, despite not being together, we never feel alone.

Sancho Lerena, CEO of Pandora FMS

The key point here is to understand well what is expected from you and define objectives. Share those goals and how to measure them. The more mature a person is, the more freedom they can have. In the end, it all comes down to setting goals and being able to evaluate them. Having good communication so that when there are problems, those objectives can be redefined or corrections made to reach the established goals. Everything else is incidental, and what the global Covid pandemic has shown us is that a paradigm shift is possible. Have I already said that we are a 100% teleworking organization?

Ramón Novoa, leader of the Artificial Intelligence department of Ártica PFMS

First of all, it is very important to define what is understood by teleworking and adapt the procedures to each situation. An offshoring team is not managed the same way as one that occasionally allows teleworking.Communication in hybrid teams in which one part works remotely and the other actually present is particularly complicated.

Examples of good practices that have helped us so far are: maintaining good documentation, easily accessible and without duplication; establish procedures and expedited communication channels that avoid misunderstandings; define clear goals and measurable objectives; etc.

Having the right tools to carry out these tasks is no less important, but today it is easier thanks to the number of applications available in the cloud. In any case, they must be well documented to avoid compatibility problems. Open formats can be of great help.

Finally, I would like to highlight the importance of fostering informal communication to improve personal relationships. We have to be able to take advantage of the many advantages that teleworking offers, and minimize the inconveniences.

And that was it, I know that our program of testimonies of the departmental heads about good telework practices seemed short. Any day we will create something like the Opra’s…, “Pandora’s”, what do you think? Would you like it? We would make loads of money with that talking show.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

居家辦公,自動切換資安政策很重要

異地工作的資安挑戰

當疫情大流行而迫使組織,從完全在公司內辦公,或混合辦公室/遠端辦公,快速轉向配置遠端工作環境。這一轉型最緊迫的挑戰之一是:公司要在極短時間內給居家人員準備設備,另一方面全面性調整資安架構與政策。重要的是考慮遠端工作的員工所使用裝置,除了工作之外,可能同時用於購物、支付帳單和一般 Web 瀏覽活動,這會增加洩漏露組織資料的風險。

  • 基礎建設配合
    不光是上班,不少家長也經歷了在家上課。突然一夜之間,需要線上教學的量大增,學校校務系統不堪負。除了學校之外,住家本身的網路應該也備受考驗。正常的情況下,大部分的人並沒有考慮到家裡的設施。就像企業需要員工在家上班,應該都不會徵詢員工家裡的基礎建設狀況。
  • 職場監視的範圍
    雖然,有些國家允許對員工的工作活動進行監督,但是在司法上存在許多實務限制。例如,要求僱主在監控雇員之前,必須徵得使用者的同意。而在家上班,到底算不算工作場所? 為了辦公使用自己的設備,應該受到監控? 職場監視在這樣的情境下適用嗎?
  • 傳統的固定規則
    我們都知道存取控制規則,應授予使用者最少最小可完成工作的必要存取權;限制使用者在複製或儲存資料方面活動行為。例如,網路存取控制技術,有助於限制對使用者、設備和應用程式的存取控制,使被授權員工才能與指定的資料進行存取,等等。當我們可以分辨信任區域,信任使用者,信任裝置的前提下;固定規則判斷什麼可以,甚麼不行,規則清楚分明。
    但企業在疫情下面臨應變趨勢:機動工作、遠距工作的員工突然增加,和雲端服務的廣泛採用,使得傳統的外圍界線已不容易區分和防守。同樣,網路活動的”好”與”壞”就變得模糊不清;靜態規則就無法正確的適用在這種變化的環境。
  • Endpoint防護扮演的角色
    對員工在家的工作環境,基礎建設或設施,組織能夠提供協助有限,強制力也無法落實。遠距工作的地點也可能有變化,存在著不同的運作差異。原本在組織內部署的資安防護,可能大部分都不適用。歸結下來,最有效的控制就在端點本身,不論身處任何地方,

 

— 部署在端點上控制機制永遠有效。

 

參考NIST 的指南:Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security (NIST 800-46r2) 其中的部份建議,遠端工作時

  • 不需要工作時,請關閉網絡功能(例如藍牙)。
  • 打開個人防火牆(如果有)。
  • 在存取企業網絡之前,要求多因子驗證。
  • 限制設備上允許的其他應用程序。

 

很明顯的都需要在端點設備上部署防護方案,對應上述建議而運用防護功能如下 

  • 控管裝置連線:VPN 連線到公司時,禁止其他連線,禁止連接裝置
  • 禁止未經授權的程序(使用者、系統)或應用程式發起連線
  • 多因子驗證,及存取控制
  • 應用程式控管及白名單機制,防止未經授權或不明的程式執行

 

自動切換資安政策,IT反應更迅速

這是資安管理上的一個哲學(不是技術)挑戰,何時該允許檔案被分享或傳送?什麼時候應該禁止?靜態政策通常以固定True / False 判斷允許或拒絕,但我們的工作不會這麼單純。很多組織採取分流措施,A/B組輪流到辦公室上班,其餘在家工作。除了以人的角色為主的安全政策外,也因應上班位置、時間自動切換政策。為了解決靜態規則無法適當應對變動的環境,主動適應政策根據不同環境條件,建立不同對應行動計畫,可簡化團隊管理複雜度,並減低對使用者工作的干擾。

 

主動適應切換條件考量

  • 遠距工作 
    遠距工作者所使用的裝置,可能是公司的受控設備,也可能自攜帶裝置。工作的場所也可能是咖啡廳、自宅,所面臨的風險不一。依照工作形式切換必要的管理政策,防止不當連線或資源存取。
    • 以公司裝置利用VPN 存取公司的服務
    • 以自用裝置RDP 連入公司裝置
    • 以公司裝置RDP 到另一台公司裝置 
  • 所在地理區
    不同國家、地區因基礎建設完善度不一,可能安全性不足等顧慮。
  • 跨廠區工作
    配合當地的安全管理政策。 
  • 應用程式執行或連線至重要網站時
    當指定應用程式被執行,或連結公司內部敏感站台時,安全層級對應調整。 
  • 使用者自決(User Override)
    部分事件可由使用者自行決定放寬,變更後系統依據條件學習並自動處置。
  • 管理者(主管)核准
    除使用者自決外,部分事件變更須經過管理人員核准。
  • 威脅等級變化
    威脅等級升高,關閉部分功能,甚至凍結防止事態擴大。

 

結論

目前疫情尚未明朗,依賴遠端工作的環境可能會成為常態。通過識別遠距工作及威脅環境變更,主動適應性政策,自動應對威脅等級,並採取必要的行動。組織將處於更有利、更具主動積極防禦的位置,從而維持業務連續保持競爭力。

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於精品科技
精品科技(FineArt Technology) 成立於1989年,由交大實驗室中,一群志同道合的學長學弟所組合而成的團隊,為一家專業的軟體研發公司。從國內第一套中文桌上排版系統開始,到投入手寫辨識領域,憑藉著程式最小、速度最快、辨識最準等優異特性,獲得許多國際大廠的合作與肯定。歷經二十個寒暑,精品科技所推出的產品,無不廣受客戶好評。

Will CVSS v3 Change Everything?

Common Vulnerability Scoring System (CVSS) allows companies to make use of a common language when dealing with vulnerability threats. Since it was created in 2003, CVSS has been widely implemented by many companies. 

Continue reading

GREYCORTEX Team Takes Third Place in NVIDIA Hackathon

During the 30-hour NVIDIA DPU virtual hackathon, participating teams worked on technologies for furthering advancements in AI , cloud and accelerated computing. Our GREYCORTEX team was among them, and our solution was awarded third place.

The goal of the hackathon was to validate the potential of using DPU (Data Processing Unit) accelerator cards for AI , networking, security and storage. The teams worked on developing a solution demonstrating the possibilities of using DPU in a data centre infrastructure.

In a competition made up of teams from all over Europe, the jury awarded third place to the project of the GREYCORTEX team, consisting of Petr Chmelař, Marek Brychta, Ondřej Kvasnica, Marina Volkova and Jozef Mlích. Our team used NVIDIA BlueField DPU cards for a DDoS attack detection and mitigation system.

With the DPU , Mendel will be able to process traffic faster, smarter and at a lower cost than before.

“ At GREYCORTEX , we are involved in a number of research projects outside of Mendel product development, trying to anticipate where market and customer needs will go. We are looking for ways to solve these problems and challenges,” says Pavel Jurka, CTO of GREYCORTEX .

One of the topics we have been working on over the past year is the processing of big data streams and their analysis using advanced methods that leverage machine learning and artificial intelligence. At the same time, we are looking at how to actively defend against such advanced attacks, which can be aided by hardware-level acceleration.

Participation in the hackathon followed our testing of the latest generation of NVIDIA BlueField DPU cards, which allowed us to demonstrate our intentions for how to use DPU in practice.

“ We hope that this technology will move into production deployment in the near future and we will be able to use it to provide better security for our customers,” concludes Pavel Jurka.

For more technical information, please contact our research team.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About GREYCORTEX
GREYCORTEX uses advanced artificial intelligence, machine learning, and data mining methods to help organizations make their IT operations secure and reliable.

MENDEL, GREYCORTEX’s network traffic analysis solution, helps corporations, governments, and the critical infrastructure sector protect their futures by detecting cyber threats to sensitive data, networks, trade secrets, and reputations, which other network security products miss.

MENDEL is based on 10 years of extensive academic research and is designed using the same technology which was successful in four US-based NIST Challenges.

將科技和直覺的溝通方案帶入法庭——馬克藍尼爾使用案例分享(Mark Lanier Case Study )

馬克藍尼爾 (Mark Lanier) 使用愛比科技 VZ-X 無線教學攝影機向觀眾展示註釋

簡介:
馬克藍尼爾 (Mark Lanier)

The Lanier Law Firm 律師事務所創辦人、《國家訴訟律師》雜誌(National Trial Lawyers)的「年度訴訟律師」(Trial Lawyer of the Year)和「美國前 50 大最有影響力律師」。《國家法律》雜誌(National Law Journal)不只一次評選為全美前十大訴訟律師,美國司法協會(American Association of Justice)頒予「終身成就獎」等。

華爾街日報(The Wall Street Journal)、紐約時報(The New York Times)、洛杉磯時報(the Los Angeles Times)、波士頓環球報(The Boston Globe)、彭博新聞(Bloomberg News)和星士頓紀事報(Houston Chronicle)等許多知名報社都報導了馬克在法庭上的成功以及他的訴訟觀點。他亦是各種廣播和電視網路的新聞和商業節目常客。

***

馬克是位美國訴訟律師,經過35年以上的職業生涯,已是北美最著名的律師之一,他的審判成功案例成為許多文章和書籍題材的靈感來源。

由於工作性質,若有合適的工具能在法庭上呈現證物資料給陪審團觀看,對馬克來說相當重要,他特別重視攜帶方便和使用效率這兩項特點。在使用愛比科技產品之前,一直很難找到切合心意的工具。馬克說,在遇到愛比科技之前,使用過其他視訊攝影產品。有些體積笨重、攜帶不變,而方便攜帶的則解析度低於愛比科技的視訊教學/協作攝影機。其他品牌產品的確有其優點,但已經不符合時代需求。

馬克藍尼爾 (Mark Lanier) 使用愛比科技 VZ-X 無線教學攝影機向觀眾展示註釋

愛比科技視訊教學/協作攝影機讓馬克能流暢的與陪審團互動,呈現更專業而完整的簡報,分享資訊的方式更進化。

「改用愛比科技的產品後,在很多方面帶來很大改變。首先,產品的高解析度呈現驚人畫質,與高畫質螢幕搭配使用也沒有問題。 IPEVO 免費軟體提供出色及專業的影像編輯功能。軟體介面非常直覺好操作,幾分鐘之內就能熟練使用。此外,愛比科技產品有一款具備無線功能的機種,還在使用電源線就已經過時了。無線功能的機種電池壽命長,產品整體非常輕巧。最後,由於相機鏡頭可以旋轉,因此我將愛比科技產品當成方便攜帶的攝影機。曾經在演講的時候,將愛比科技視訊教學攝影機鏡頭上下反轉,便能夠展示天花板上的壁畫。」

愛比科技 VZ-X 的內建LED燈使馬克即使在黑暗環境中也能清楚地看到他的内容

在馬克將愛比科技產品列為工作必需品後,他表示將向其他專業人士推薦愛比科技:

「我已經向數千人推薦愛比科技。我至少每週都會使用到愛比科技的產品,例如在有著成千上萬聽眾的演講場合、網路上發表的演講、以及在法庭中。我使用愛比科技是因為它是我簡報、演講的最佳工具。因此很自然地,我讓所有認識的人都知道愛比科技的產品。我在每場教授人們簡報、演講技巧的研討會中,告訴他們去買一台愛比科技產品吧,它將會改變他們的工作!」

馬克藍尼爾 (Mark Lanier) 於 2019 年舉辦第四屆「藍尼爾訴訟學院」

相關報導:美國頂尖律師法庭上的祕密武器──來自台灣的實物攝影機

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於IPEVO
IPEVO源自於PChome Online硬體事業部門,2007年7月正式獨立。自2004年於台灣營運Skype網絡電信服務,使台灣成為Skype全球發展中最成功的市場。2005年起以IPEVO品牌推出一系列Skype專屬硬件產品,將Skype虛擬服務轉化為使用者實質經驗。IPEVO以簡單、實際且具有價值的經驗為產品目標,其簡潔俐落的產品風格呼應著IPEVO的核心思考與產品精神。目前已研發之產品包括:Skype有線USB話機、Skype無線話機、Skype會議系統、Skype視訊設備、Stand-alone免電腦Skype話機。