M&A Whitepaper Now Available

Even as the world economy begins to show signs of rebounding, many organizations may be considering the merger and acquisition process. In a whitepaper now available on GraVoc.com, the GraVoc information security team analyzes the M&A process and the role of IT and information security considerations within the M&A due diligence step.

In order to access the whitepaper, it is necessary to enter a limited amount of information. GraVoc assures your information will remain confidential and will not be disseminated to any third parties.

Also available on the information security page is more detailed information in PDF files detailing the scope of services provided by the GraVoc team. An additional whitepaper addressing operational risk assessment is also available from this page.

GraVoc Associates, Inc, a full-service consulting firm based in Peabody, MA, is dedicated to providing solutions for businesses through the use of technology. To assist clients in an M&A process, GraVoc would leverage the knowledge of its staff spanning several of its practices. GraVoc provides consulting services in the practices of information systems, IT & professional services, information security, and media production. For more general information about the company and the services offered, please visit GraVoc.com.

"New Set of Eyes"

Every Wednesday, including today, you can check out GraVoc's new advertising spot on Banker & Tradesman's website. This spot features GraVoc's information security services as "a new set of eyes" for regional banks and credit unions looking to verify their compliance with laws such as the Massachusetts Privacy Law and GLBA.

Many regulatory examiners encourage financial institutions to perform due diligence on their risk management and audit vendors, essentially encouraging another set of eyes. Obviously, with three ISACA-certified professionals on staff, we would like to be that set of eyes. Furthermore, we find it to be troubling that many audit firms find no problem performing risk management work and then auditing their own work. GraVoc can be there on either side of the equation, providing true impartiality.

GraVoc is aware that many financial institutions are currently feeling pressure to complete certain projects by the end of the year. With ten weeks left before the new year, we strongly encourage firms trying to accomplish such a task to contact us sooner than later so that we can initiate, perform, and complete risk management and information security projects in a timely fashion.

Among the services offered by GraVoc's information security team include testing of your network perimeter, evaluation of controls within your network, risk assessment services, and business continuity plan development and training. The Peabody, MA-based consulting firm, featuring individuals with the CISA, CRISC, and CISM designations from the Information Systems Audit and Controls Association, also has practices dedicated to information systems, professional & IT services, and media production. For more information about GraVoc, we strongly encourage you to contact the offices at 978-538-9055 or visit gravoc.com.

One Shot

The latest news from GraVoc Associates and their staff:

-On Wednesday, GraVoc was the "Champagne Sponsor" of an untraditional Peabody Area Chamber of Commerce event. The event was a scotch tasting hosted by Scottish comedian Sir Jeremy Bell, who provided an entertaining presentation on three whiskys, featuring toasts and frequent PG-13-rated humor. President/CEO David Gravel, in return for the champagne sponsorship, was subjected to wearing a kilt and plaid hat, and had the opportunity to open a bottle of champagne with a saber. He was given ten attempts, but successfully sabered the champagne bottle in one shot. Photos of the event will be available on GraVoc's Facebook page shortly.

-If Matt Wilkins looks especially tired on his next service call, he has a good reason. On October 5th, Matt and his wife Danielle's first daughter Molly Catherine was born. Both mother and daughter are doing well back at home in Peabody.

-On Friday October 8th, GraVoc was represented with a booth at the Massachusetts Association for Behavioral Health's Annual Provider Celebration.  GraVoc showcased its GHR product - a comprehensive software solution that enables inpatient behavioral health and substance abuse rehabilitation centers to manage their bed capacity, client history, and insurance provider billing in one centralized application.

GraVoc Associates, Inc. is a Peabody, MA-based consulting firm helping business solve problems through a wide variety of technological solutions. GraVoc, in business since 1994, performs services in the practices of information systems, technology & professional services, media production, and information security. For more information about GraVoc, please visit http://www.gravoc.com/.

Dave Gravel, pictured in kilt, sabers a

bottle of champagne on his first try.

Celebrating 100 Posts

The GraVoc News Blog is proud to announce that since its inception on November 7, 2008, it has recorded 100 unique blog posts.  This is an exciting milestone to reach, as a common trend is for an organization to start a blog, publish a dozen posts, and either run out of content, interest, or time to continue posting with any frequency.

Over this time, GraVoc has acquired DivergingSoul Media Production, who set up the original architecture of the blog as a service.  Presently, DivergingSoul's blog services are encompassed under GraVoc's media production services that leverage creative media, including social media, to enhance other businesses' web presence.  GraVoc and DivergingSoul have helped several clients with services such as the establishment of their own blogs.

A key to a successful blog is consistency in post frequency, something we have preached slightly better than practiced while customer projects take priority.  However, GraVoc has published two blog posts in each month since the blog's inception except for two.  We hope, however, that as the blog enters triple digits in post count and as it enters its third year of existence, it can be used as a forum to exchange ideas.  No matter your relationship with GraVoc, we strongly urge you to utilize the comments section.

As we mark this milestone, we would like to thank you for your readership.

GraVoc Associates, Inc, based in Peabody, MA, is a full-service consulting firm serving Greater Boston, New England, and beyond since 1994.  Specializing in the practices of media production, information systems, professional/technology services, and information security, GraVoc's goal is to enhance its customers' operations and profitability through leveraging technological solutions.  In 2010, GraVoc acquired DivergingSoul Media Production, who has been on top of innovation in the fields of social media, blogging, and web development since their inception in 2006.  For more information on DivergingSoul, please visit divergingsoul.com, and for more information on GraVoc's other services, please peruse the previous 99 posts or visit GraVoc.com.

GraVoc featured in MassBanker's e-News

GraVoc is pleased to announce that it was recently featured in MassBanker's e-News.  The article addressed several security risks and changes that the banking industry is currently facing and will have to address in 2011.  Some of these topics included new delivery channels, laptops and mobile devices, virtualization, e-discovery, social networking, and new regulatory stipulations.  To read the full article visit the following link. 

If you'd like to learn more about GraVoc's risk assessment and information security services, please contact Nate Gravel at 978-538-9055 ext. 129 or visit GraVoc' Information Security page at www.gravoc.com/information_security.html.

The Twitter Business Decision

Within the last two years, social media services such as Twitter and Facebook ceased to exist as solely a medium for the computer literate to broadcast themselves publicly. became increasingly popular as free marketing tools for businesses of all sizes. The challenges for businesses to embark onto this frontier were (and still are) the following:

-Maintenance time
-Risk tolerance
-Knowing one's audience

The first two are rather self-explanatory. The first goes off the adage of "time is money." Even if a business is leaving the social media responsibilities to low-cost labor, the time spent keeping the pages current can become significant on the aggregate. This time can be used on other projects. If the business decides that diligent maintenance of their social media outlet is a more productive use of this employee's time than the next-best option, it is a good decision.

The second is slightly trickier. Many of GraVoc's clients, including many who operate social media outlets, are in highly-competitive markets where reputations and corporate images must be finely manicured and maintained. If an unhappy customer were to post a complaint on the business's social media outlet without it being monitored, edited, and administered, significant reputational risks arise. Many financial institutions with Facebook pages assign a person to check the page every 30-60 minutes during the business day.

The third point is perhaps the most intriguing. A recent Boston Business Journal article drove this point home: Individuals who use Twitter prefer businesses who use Twitter. On the flip side, individuals who do not use social media don't care whether the business they use are using social media. Your business, before deciding whether it's worth investing a portion of your employees' time, should consider its typical customer. It is someone who is interacting with social media sites? If so, it might be a smart business decision.

GraVoc Associates, Inc, based in Peabody, MA, is a technology consulting firm serving Greater Boston, New England, and beyond since 1994. GraVoc's business is divided into four practices of media production, information systems, professional services, and information security. GraVoc maintains a Facebook page and the GraVoc News Blog partially as a way to keep customers updated, but perhaps chiefly as an example of how a business can leverage social media to its advantage. GraVoc has declined to expand into Twitter partially due to the effort required to update frequently. To discover more about the company and the ways it can help your business, please visit gravoc.com.

GraVoc in the Community

GraVoc and its staff have historically devoted a lot of their time to making a difference in the community. Within the last month, GraVoc has lent a helping hand in several different projects in Peabody, MA and beyond. A few highlights:

-Peabody Education Council: A few GraVoc employees donated some of their time and effort toward the PEC's late summer/fall activities. Projects included assisting in the design of the 2010-2011 calendar and volunteering at the Welcome Back Extravaganza at the Higgins Middle School. This upcoming Saturday, President/CEO David Gravel will be pulling the winning raffle ticket for the Red Sox Dream Day raffle. Tickets are still available, and you can indicate your interest in purchasing raffle tickets by clicking here.

-Race for Research: GraVoc sent an informal team of five to the 9th Annual Race for Research in Peabody, presented by the Progeria Research Foundation. Information security associate Dan Vassallo took first in the 5K race, narrowly defeating co-workers Connie Leaver, David Gravel, and Michael Roma. Vice President Cathy Gravel took second in her age group. It has not yet been determined whether the company will participate in the 2011 JP Morgan Corporate Challenge in Boston, but there is interest in forming a championship-caliber team if it is aligned with business goals.

-Torigian Golf Classic: Monday, GraVoc put together a foursome at the Torigian Golf Classic presented by the Peabody Area Chamber of Commerce, Peabody Rotary Club, and Peabody City Council. By all accounts, the team was carried by Jason Vlacich of the Information Systems practice. Unfortunately, the team struggled slightly and only birdied one hole. However, the hole they did birdie was the one the firm sponsored.

GraVoc Associates, Inc, an active business in the North Shore community since 1994, is a full-service consulting firm dedicated to helping small businesses leverage technology to improve their profitability. Divided into the four practices of professional services, information systems, information technology, and media production, the firm operates out of an office in Peabody, MA and employs 18 full-time staff, many of which have earned MCSE and/or MCP certifications. For more information regarding the company and the services offered, please consult the archives of the GraVoc News Blog or visit http://www.gravoc.com/.

August Happenings

As summer comes to a close and people return from vacation, GraVoc Associates has been up to many projects and activities worth noting:

-From the certifications category, three of GraVoc's staff members received good news in the mail from ISACA, as all three passed the exam for the Certified Information Systems Auditor designation. They have submitted their applications to the organization, but this is typically a formality. More detail about this upon the official acceptance of their certifications.

-Several employees across departments stayed after hours one night in August, demonstrating their commitment to delivering stronger, more dynamic reporting capabilities. Michael Roma was kind enough to donate his knowledge and his afternoon to a SQL reporting workshop, which was taken advantage of by much of the GraVoc staff.

-Coming soon to the GraVoc website will be some new material about the information security practice and some of the new and revised services offered to respond to customer demand. There will also be a series of new whitepapers being made available shortly.

-A significant cosmetic change is new to the GraVoc offices in downtown Peabody, MA, as the DivergingSoul media production team is making the finishing touches to a new digital sign greeting visitors to the building. Upon the completion of the project, we will post pictures to the GraVoc fan page on thefacebook.com.

GraVoc Associates is a 20-employee technology consulting firm divided into the practices of professional services, media production, information system, and information security. Many GraVoc clients are based in Greater Boston and New England, but several projects take GraVoc's staff around the country and the world. Each practice is explained in more detail on http://www.gravoc.com, and we encourage you to peruse the website and the archives of the GraVoc News Blog, which is nearing 100 posts.

Vassallo Achieves CISM

GraVoc's Dan Vassallo offically became the company's third Certified Information Security Manager in the eyes of the Information Systems Audit and Control Association (ISACA) last week. This designation recognizes an individual's experience and understanding of "the relationship between an information security program and broader business goals and objectives," according to the ISACA website. Vassallo joins roughly 13,000 individuals with the CISM, including GraVoc's David Gravel and Nate Gravel, but joins a smaller group of CISMs who have also displayed the ability to blog about themselves in the third person.

Another recent notable coming from GraVoc is the second-consecutive completion of the Breast Cancer 3-Day by the Flip-Flop Friends, anchored by Vice President Cathy Gravel. The group walked sixty miles in three humid days in July, raising money for Susan G. Komen for the Cure.

GraVoc Associates, Inc, based in Peabody, MA, is a technology consulting firm serving Greater Boston, New England, and beyond since 1994. Now with nearly 20 employees and doing much more than just IT support, GraVoc specializes in the four practices of information security, professional services, information systems, and media production. For more information about the company and the services provided, please visit GraVoc.com.

GraVoc Attends World Partner Conference

Earlier this month, GraVoc travelled to Washington, DC to attend the Microsoft World Partner Conference. Representing the company were Brian Gravel, director of the media production practice, and Dave Gravel, president and CEO. In addition to developing blisters on their feet, GraVoc’s representatives were able to attend speeches and seminars regarding the changes in store for the Microsoft Partner Network, the software giant’s goals amid the expansion of cloud computing, and innovative new features becoming available in the next several months.

A highlight according to the GraVoc attendees was keynote speaker and former President Bill Clinton. Clinton addressed technological advances and how they have re-shaped the way humanitarian efforts are coordinated.

Brian Gravel noted that attending the event, which drew an estimated 14,000 attendees, was certainly worthwhile. “It was fantastic to see the new features coming out and the ideas they’re coming up with.” He was especially impressed with the company’s new “Surface” concept, where a table-top becomes, in essence, an interactive touch-screen that can interact with mobile devices. (Click here for more information on Microsoft Surface.) The reaction by the director of DivergingSoul, GraVoc’s media production practice, to the eye-catching flashiness of the emerging product should come as no surprise.

This was the first time GraVoc had sent attendees to the World Partner Conference, but is the second major Microsoft event attended by the company after three staff members attended Microsoft Convergence in Atlanta in April. There are no definitive plans to attend the 2011 event in Los Angeles, but it is obviously still early in the game.

GraVoc Associates, Inc, based in Peabody, MA, is a Microsoft Gold Certified Partner. A technology consulting firm with a diversified range of services, GraVoc finds Microsoft at the center of its professional services and information systems practices. The professional services practice specializes in network infrastructure design, planning, and maintenance, and the information systems practice specializes in the implementation and customization of enterprise resource planning systems. For pictures from the WPC, please visit the GraVoc page on thefacebook.com, and for more information on the company, please visit www.gravoc.com.

Wilkins Earns Certification

Certification season is in full bloom at GraVoc Associates, as Matt Wilkins of the professional services practice is now a Microsoft Certified Technology Specialist in configuring Windows 7.  Matt passed the exam last Wednesday, affirming his own and his company’s commitment to keeping up to date with technological changes.  As businesses are switching over to Windows 7 faster than any previous operating system, Matt’s efforts toward passing this exam are greatly appreciated.

Ron Smoller, also of the professional services practice, completed June with not one, but two certifications.  He followed up his Microsoft certification mentioned in the most recent blog post with a Double-Take Software sales certification.  This strengthens GraVoc’s partnership with Double-Take, and positions the company to better offer products for customers’ redundancy, disaster recovery, and data migration needs.

GraVoc Associates, Inc, based in Peabody, MA, is a technology consulting firm serving Greater Boston, New England, and beyond in the practices of professional services, information systems, media production, and information technology.  The professional services practice specializes in IT support, network infrastructure design and maintenance, and the procurement and selection of the correct tools that will help businesses’ telecommunication and storage processes work more efficiently.  Due to the dedication and competency of GraVoc’s staff, the company is recognized as a Gold Certified Partner by Microsoft. For ore information about GraVoc and the services offered, please visit GraVoc.com.

GraVoc Welcomes Koudanis, Congratulates Smoller

This week, GraVoc’s information security team has brought aboard Costas Koudanis.  Costas, a graduate of Northeastern University who had previously worked at an auditing firm in Boston, will enhance the information security practice’s ability to respond to upcoming projects.  He also brings a wide range of skills from both an auditing and a technology background that can give GraVoc further insight into security issues facing its customers.  GraVoc is happy to have the Topsfield, MA native aboard.

Also notable is that GraVoc’s Ron Smoller has achieved another certification from the Microsoft Corporation.  He scored strongly in configuring Active Directory, Network Infrastructure, and Applications Infrastructure for Windows Server 2008, and therefore passed the exam to upgrade his Windows Server 2003 MCSE designation to Windows Server 2008 Technology Specialist.  Ron focuses on the professional services practice of the company and assists several customers in their network design and support needs.

GraVoc Associates, Inc, based in Peabody, MA, is a consulting firm focusing on technology in the four practices of professional services, information technology, media production, and information systems.  Founded in 1994, GraVoc employs roughly twenty professionals who are dedicated to providing a wide range of technology-based solutions and services to a diverse customer base.  For more information about the company and the products and services offered, please visit http://www.gravoc.com.

This Week: Certifications and Gas Grills

Two members of GraVoc's information security team, President/CEO Dave Gravel and his son Nate Gravel, have been grandfathered into the Certified in Risk and Information Systems Control (CRISC) certification by the Information Systems Audit and Control Association (ISACA). The CRISC certification is the newest of ISACA's four certifications.

This certification is for "IT professionals who have hands-on experience with risk identification, assessment, and evaluation; risk response; risk monitoring, [information systems] control design and implementation; and [information systems] control monitoring and maintenance." As the certification requires eight years of experience in information security and risk management, the CRISC designation is perhaps the most selective of ISACA's widely-accepted certifications.

Meanwhile, limited parking, rain showers, and unseasonably cool temperatures weren't enough to deter dozens of members of the North Shore business community from attending GraVoc's barbecue Thursday night. This event was part of the Peabody Area Chamber of Commerce's "Business After Hours" networking event series. The event was characterized by an extensive spread of burgers, hot dogs, beverages, and desserts. GraVoc is extremely appreciative of everyone who attended, and hopes everyone was satisfied by the atmosphere and the food.

GraVoc Associates, Inc, based in Peabody, MA, is a technology consulting firm focused on helping businesses in the practices of information security, professional services, information systems, and media production. For more information regarding GraVoc's wide range of services (the diversity of which became a punch line at Thursday's barbecue), please peruse the archives of the GraVoc News Blog or visit http://www.gravoc.com.

GraVoc Heads to Las Vegas

GraVoc’s DivergingSoul Media Production practice jumped on a plane to Las Vegas earlier this week for the InfoComm 2010 conference at the Las Vegas Convention Center.  Representatives Brian Gravel and Matt Molk are attending the conference to learn about current ideas and stay on the cutting edge of AV communications.  Notably, the conference is showcasing advances in digital signage, so it presents an opportunity to share ideas regarding the DS2 digital signage network.  The conference lasts through the end of the week, and a recap will likely be posted to this blog shortly upon their return.

GraVoc also made itself available at a more-local tradeshow, attending a conference staged by the Massachusetts Bankers’ Association.  The Annual Bank Technology/Retail Banking Conference addressed, among other things, mobile banking and whether it is an inevitable new step that brings with its benefits a slew of risks.  GraVoc saw many familiar faces, and got to meet several new people in the industry.  GraVoc and other attendees participated in several constructive conversations regarding risk management in the face of the marketplace trending toward mobile banking.

GraVoc Associates, Inc, based in Peabody, MA, has been serving customers in Greater Boston, the North Shore, New England, and beyond.  A technology consulting firm, GraVoc specializes in the practices of media production, information security, information systems, and professional services.  For more information about the services and products offered by GraVoc, please visit www.gravoc.com or peruse the archives of the GraVoc News Blog.

May Updates

It’s been a busy month of May for GraVoc Associates, so busy that there has been little time to tend to matters like updating the GraVoc News Blog.  Some quick updates on what is happening at the company:

• GraVoc is excited about hosting the Peabody Area Chamber of Commerce’s June “Business After Hours” event.  This version of the business networking event will feature a barbecue in front of GraVoc’s building in downtown Peabody.
• GraVoc attended the Massachusetts Association for Behavioral Health’s Annual Meeting.  Dan Vassallo and Paul Lincoln represented the business there and met representatives for several mental health associations throughout Massachusetts.  GraVoc was at this event to promote the GHR system designed specifically for inpatient mental health and substance abuse recovery service organizations.  Meanwhile, GraVoc’s team has been working furiously on improvements to this application, enhancing its overall functionality.
• The DivergingSoul media production division has initiated an aggressive phase of research and development regarding Facebook’s “Open Graph” feature.  This latest Facebook development, in short, allows a Facebook user to integrate his or her entire web surfing experience into his or her Facebook profiles.  This includes “liking” articles, blog posts, or other websites as one can “like” events on Facebook.  By clicking above, you can “like” this blog post.  DivergingSoul is also headed to Las Vegas for an event in June.
• An update on the last post:  It is debatable who is enjoying retirement more:  Ron Davis, whose retirement from GraVoc has opened up more time to focus on his wife’s business, or Nate Gravel, whose retirement from running (he ran under three hours on May 2nd in the Providence Marathon) has opened up more time to focus on GraVoc’s information security practice.
• This summer, look for at least two pertinent whitepapers becoming available on the GraVoc website.

GraVoc Associates, Inc, located in Peabody, MA, has served clients in Greater Boston, New England, and beyond with consulting services since 1994.  GraVoc’s services are all based in technology, and are now divided into the four practices of information systems, professional services, information security, and media production.  GraVoc utilizes the GraVoc News Blog to announce events and occasionally offer some advice regarding topics relevant to clients and potential clients.  For more information about GraVoc and the wide range of services provided, please visit GraVoc.com.

Quick Hits

A few brief notables from the last week at GraVoc:

• The company would like to offer its sincere thanks and a fond farewell to Senior Associate Ron Davis.  Ron, who has handled business development for half of GraVoc’s sixteen-year history, is stepping down Friday afternoon and going into semi-retirement.  Going forward, Ron will spend much of his time assisting his wife Debra in her entrepreneurial pursuits.  The Davises own and operate Chili Choice, a New Mexican cuisine retailer and distributor in Gloucester.
• Another update on the rubber chicken video:  DivergingSoul’s footage has now even caught Keith Olbermann’s attention.  See his commentary from an episode of MSNBC’s “Countdown” by clicking here, browsing the “oddball” section, and clicking the April 28th edition (the one about the Obama nightclub).
• Director of Information Security Nate Gravel will be competing in Sunday’s Cox Sports Marathon in Providence, RI.  Nate, a competitive runner formerly of Peabody Veterans Memorial High School and Trinity College, should be among the leaders of the race, as his previous best of 2:30:00 in the 2008 Madrid Marathon is several minutes faster than the Providence course record.

GraVoc Associates, Inc, based in Peabody, MA, is a full-service technology consulting firm offering a dynamic range of services to clients in greater Boston, New England, and beyond.  Founded in 1994, GraVoc specializes in the practices of information systems, information security, and professional services.  For more information about the firm, please visit www.gravoc.com or feel free to browse previous posts of the GraVoc News Blog.

Update: Rubber Chicken World Record Set

Last week, the GraVoc News Blog brought you the news of a world record attempt being held in Boston for the most rubber chickens tossed at the same place, at the same time.  As expected, the world record was set pending the approval of the Guinness Book of World Records staff—and caught on video by GraVoc’s DivergingSoul Media Production team.

DivergingSoul’s Brian Gravel captures the tense moments before the record attempt.  Photo courtesy Haywire Group.

Officially, 265 rubber chickens flew during the promotional event for the Haywire Group’s Flickin’ Chicken game, which raised money for the Charles River Watershed Association.  DivergingSoul’s video was picked up by several media outlets, resulting in a great deal of publicity for the game manufacturer and its beneficiary charity. 

GraVoc Associates, Inc. is a full-service technology consulting firm located in Peabody, MA specializing in the practices of information systems, professional services, and information security.  Upon the firm’s joining forces with DivergingSoul Media Production, clients in Greater Boston, New England, and beyond contract GraVoc for services ranging from the implementation of ERP systems to business continuity planning to filming the flight of hundreds of rubber chickens.  For more information about the company and how those three services could possibly be connected, please visit GraVoc.com.

GraVoc to Film World Record Attempt

In what is rumored to be the organization's first project in the rubber chicken throwing industry, GraVoc Associates will be filming a world record attempt in Boston this Sunday, April 25th. GraVoc's media production staff will be on hand as the folks at Haywire Group are orchestrating an attempt to set a world record for the largest number of rubber chickens tossed simultaneously.



The event will take place on Artesani Park on Soldiers Field Road in Brighton, MA Sunday at 3:00 PM, and the public is encouraged to attend, witness, and participate in the event. Rubber chickens will be available for purchase for $1 and all proceeds are to go toward the Charles River Watershed Association. This event is being organized by Haywire Group, a Western Massachusetts firm that designs family board games including the popular "Flickin Chicken" game.



Most world record attempts require the presence of an official adjudicator or a long list of evidence to verify the record. The DivergingSoul team (now a division of GraVoc) is responsible for compiling video evidence of the event. Audio/video production of events like Haywire's world record attempt is one of the services regularly offered by GraVoc's media production team.



GraVoc Associates, Inc, a Peabody, MA-based technology consulting firm, expanded into media production in 2010 with its acquisition of DivergingSoul Media Production. Together they serve Greater Boston, New England, and beyond with media-related services such as A/V production, web design, web 2.0 services, and the popular DS2 digital signage network. GraVoc also specializes in the practices of professional services, information systems, and information security. For more information about DivergingSoul and GraVoc, please visit http://www.gravoc.com/ or http://www.divergingsoul.com/.

GraVoc to Attend Great New England Credit Union Show

Next week, GraVoc Associates, Inc. will be sending some of their information security team to the Great New England Credit Union Show in Boxborough, MA.

This will be GraVoc's first appearance at the show, and they can be found in booth 70, in between Enterprise Car Sales and FMS (Financial Management Solutions). An estimated 700 attendees from credit unions across the New England region are planning to be at the event, which features thirteen seminars of interest to credit union executives. Additionally, eighty vendors are expected to exhibit.

GraVoc's information security team will be on hand to explain more about their wide range of information security services that can be found both on the gravoc.com website and in past posts of the GraVoc News Blog. The GraVoc booth will feature typical tradeshow fare, such as a video display, candy, and handouts. We hope to see many familiar faces there, as well as new faces.

GraVoc Associates, Inc, founded in 1994, provides a dynamic range of information security services to financial institutions throughout Greater Boston and New England. The Peabody, MA-based company specializes in business continuity planning, LAN/WAN testing, and risk assessments. Lately, among its more popular services have been social engineering testing and services to help clients comply with the Massachusetts Data Security Law. Beyond information security, GraVoc also specializes in the fields of professional services, media production, and information systems. For more information about the services GraVoc provides, please visit http://www.gravoc.com/.

GraVoc Participates in Peabody Education Council Events

In the last few weeks, GraVoc has made efforts to give back to the Peabody community through a pair of educational programs.  Historically, GraVoc has an ongoing relationship with the Peabody Ed Council, and President/CEO David Gravel is the council’s current chair.  Recently, GraVoc has participated in the mentoring program and in Friday’s Peabody Veterans Memorial High School Career Day.

Several students interested in various aspects of business visited GraVoc for a taste of job shadowing.  Students with interest in business administration, computer programming, and media production spent a few hours behind the scenes at GraVoc.  Programmers Matt Coraccio and Paul Lincoln offered advice to a student who was interested in programming but had not yet taken any programming classes in high school.  “I only took one programming class in high school, and didn’t take any more until my sophomore year of college,” Coraccio said.  “I told him not to worry, and he had plenty of time to take classes.  It was great to see a student interested in what we do.”

GraVoc also sent three representatives to PVMHS Career Day, also put on by the Peabody Ed Council, this morning.  Aside from the free stress balls and candy selections, students asked questions about GraVoc, the types of services they offer, the level of education achieved by their employees, and the fields of study GraVoc’s employees pursued.  As GraVoc is a dynamic business with employees from many different backgrounds, students were encouraged to study fields they were interested in as undergraduates.

GraVoc Associates, Inc, based in Peabody, MA and serving Greater Boston, New England, and beyond in the practices of information systems, professional services, and information security, is a 17-employee firm whose professionals bring backgrounds from accounting and finance to communications to English to computer science.  Like many small businesses, GraVoc prides itself on its time spent on community service.  For more information about GraVoc, please visit www.gravoc.com, and for more information about the Peabody Education Council, please visit www.peabodyedcouncil.com.

GraVoc Holds Compliance Consortium

GraVoc’s information security team would like to extend its gratitude toward North Easton Savings Bank for hosting the first quarterly information security & risk management consortium.  The event was held Tuesday morning March 30 at NESB’s new corporate offices in South Easton, and was attended by several GraVoc information security clients and friends.

Led by GraVoc’s Nate Gravel and Dan Vassallo, the meeting was the first of hopefully several where financial service executives both within IT and outside IT can share ideas, concerns, and observations regarding the current compliance landscape for regional financial institutions.  Among the many topics discussed this quarter were the changes in Regulation E that require customers and members to opt in for courtesy overdraft payment, challenges brought on by the popularity of social media outlets, and current patterns in regulatory exams.

The GraVoc information security team is grateful that some of its clients braved adverse weather conditions to attend the event, and hopes that all attendees considered the event a conduit for discussion that was worth the drive.  If you are interested in attending the next event, most likely to be held in June, please contact either Nate or Dan by calling the GraVoc offices at 978-538-9055.

GraVoc Associates, Inc., based in Peabody, MA, has served clients in greater Boston, New England, and beyond in the practices of information security, information systems, and professional services.  Some of the more pertinent services offered in the information security practice include business continuity/disaster recovery planning, Massachusetts General Law 93H/201 CMR 17.00 compliance services, and social engineering simulations.  For more information about the services provided by GraVoc, please visit http://www.gravoc.com.

Social Media Restrictions – Your Company’s Responsibility?

Now might be the best time to address the issue of an enterprise’s employees’ use of social media and whether a business should—or even has the right to—regulate their employees’ use of Facebook, blogs, Twitter, and other sites known as “social media” sites.  This has become a concern as of late because now that Facebook is well over five years old, it does not look to be a fad that is going away.  It has become a breeding ground for computer viruses and worms, such as the one circulating this week.  It has also been a platform for social engineering attack tactics.  Similarly, blogs (including this one) have been occasionally prone to spammers and potential attackers.

Even beyond the virus and social engineering risks associated with social media sites, business are faced with several dilemmas surrounding social networking.  These include the following:

• Content filtering:  Businesses must decide whether to completely block sites such as facebook.com or blogspot.com so that employees spend less time wasted on the internet and more time working.  On the other hand, some Facebook pages or blogs (especially the GraVoc News Blog) could provide helpful information.
• The Organization’s Use of Social Media:  GraVoc obviously has a blog and a Facebook account, as do many of our clients.  In fact, one of the services we provide is helping a business leverage social media as a business tool.  But who is responsible for updating and regulating content posted on these sites?  Is the organization going to devote several hours of labor to monitor employees’ status updates and/or regularly write articles like this one?
• Employees’ Behavior on Social Media:  Organizations don’t want their employees to be posting Twitter updates or blog posts about how much they hate their boss, how rudely they were treated by a customer, or how they are not motivated to be working on a Friday afternoon.  They also don’t want their employees to be posting R-rated material on their Facebook page while listing who their employer is on their profile.

Ultimately, it is most likely going to become necessary for most businesses, even the smallest businesses, to develop written policies dictating what is allowed and not allowed on social media outlets.  For liability purposes, it is probably necessary to document what an employee is responsible for and what the employee can or cannot do surrounding social media and how they can affect the organization’s reputation or information systems.

GraVoc Associates, Inc, a Peabody, MA-based technology consulting firm, uses social media including a Facebook page and the GraVoc News Blog to inform customers, potential customers, and friends about relevant topics such as this one.  GraVoc’s practices of information systems, information security, and professional services interact with social networking from several different directions, as GraVoc provides information security services that could help an organization draft policies or detect social engineering tactics, web 2.0 development services that help businesses generate business through these sites, and IT services that could help an organization safeguard itself with technological risks associated with the use of social networking sites.  For more information about the wide variety of services offered by the organization, please visit http://www.gravoc.com. 

GraVoc Website Updates

The last week has brought some changes to the GraVoc website.  The transformation of the GraVoc Software website (http://www.gravocsoftware.com) is now complete and much easier to navigate and get information on the software products offered by the company. 

Some of the products offered include the GFS field service management platform, several utilities to integrate into Microsoft Dynamics GP, and the versatile GCMS cemetery and crematory management application for GraVoc’s many clients in the death care industry.

Also new to the GraVoc website is a case study regarding GraVoc’s Massachusetts General Law 93-H services.  GraVoc’s information security team launched a recent project to help a client comply with the standards presented by the Massachusetts Data Security Law.

To access this case study and to learn more about GraVoc’s Mass. Data Security Law services, please click here.

GraVoc Associates, Inc, founded in 1994 and based in Peabody, MA, serves the Greater Boston area, New England, and beyond in the practices of information systems, information security, and professional services.  We strongly encourage you to explore the revamped GraVoc website, available at http://www.gravoc.com, in its entirety to learn more about the company and what it can do for your business.

GraVoc Welcomes Paul Lincoln

Earlier this month, GraVoc added Paul Lincoln as an associate to its information systems practice.  Paul, a Microsoft Certified Professional, brings experience both in programming and network infrastructure to the table, so Paul also adds depth to GraVoc’s IT service offerings.

Paul, originally an Austin, TX native, is the second employee hired to the IS practice in the past six months, as Stefanie Marsh was also added to the team in August 2009. 

Paul comes to the Northeast after most recently working at VersaCall Technologies in San Diego, CA.  He and his wife just moved to Worcester, MA.  Paul is no stranger to moving, as he carries an impressive military background.  A graduate of the U.S. Naval Academy, Paul spent many years in the U.S. Marine Corps where he earned, among other honors, the Navy Commendation Medal.  In his spare time, Paul enjoys working out and spending time outdoors.

Also notable this month, GraVoc would like to thank Karen Morey for her contributions to the information security practice over the past three years, and would like to wish her the best of luck at her new job.

GraVoc Associates, Inc, now a 17-person firm, offers a wide range of technology-based solutions in the practices of information systems, information technology, and professional services.  Based north of Boston in Peabody, MA, GraVoc has served the North Shore, New England, and beyond for sixteen years.  For more information about GraVoc, please visit the recently-revamped http://www.gravoc.com/.

93H: There Is A Reason For This

As the deadline for compliance with the Massachusetts Data Security Law approaches (March 1st is now two weeks away), many businesses are undoubtedly looking at the new burdens that are being thrown at them and wondering if it’s necessary.  Perhaps the Massachusetts legislature got bored one day and decided to inconvenience businesses by requiring them to write information security policies and implement safeguards.  Maybe they have friends in the encryption or consulting industries.  But a recent report has given further evidence to what many already knew:  Identity theft is a growing problem and businesses that handle people’s sensitive information should make efforts to make sure that if this data is stolen, they are not the ones responsible for it.

A research group concluded there were over 11 million US identity fraud victims in 2010, a 12-percent increase perhaps caused by bad economic times (hat tip to the ISMG).  Surprisingly, over two-thirds of this crime was executed using non-technical methods, emphasizing that identity theft prevention is not specifically an IT burden.  This growing crime cost victims $54 billion in 2010.  By comparison, ID theft victims lost three times what all of Bernie Madoff’s victims lost during Madoff’s entire career.

GraVoc Associates, Inc’s information security team, which has worked primarily with the highly-regulated financial services industry in the past, has begun to work with non-financial clients with Massachusetts Data Security Law (M.G.L. 93H or 201 CMR 17.00) compliance services.  A free on-demand webinar has been recorded and distributed to existing GraVoc clients, and will be made available on GraVoc.com later on this week.  The standards required by this law, while they are not nearly as aggressive as they were when originally penned, can require a lot of work, and many businesses have gone to GraVoc for advisory and help with compliance with this law.

GraVoc Associates, founded in 1994, provides a wide range of solutions in the fields of information security, information systems, and professional services.  The GraVoc News Blog has been following developments regarding the Mass. Data Security Law since the blog’s inception in 2008, and you may find value in perusing the archives for more information.  For additional information about GraVoc’s services in all three fields, we strongly encourage you to browse GraVoc.com.

New Look News Blog

If you are reading this post through Facebook or through your RSS feed, we strongly suggest you go to the new-look GraVoc News Blog available at http://gravoc.blogspot.com.  There, you will be able to more easily navigate the blog, sign up to receive posts via Real Simple Syndication (RSS), and still be one click away from the three GraVoc websites at GraVoc.com, gravocsoftware.com, and divergingsoul.com.  You will also be able to read archived posts by date and by topic.

Obviously, if you are reading this on the blog itself, you can already see this.

In the aftermath of acquiring DivergingSoul Media Production in January, GraVoc has increased their time spent in web design and leveraging “web 2.0” services, including setting up and administering blogs for clients.  GraVoc wanted their own blog to reflect how easy a blog can be to navigate.

GraVoc Associates, Inc., based in Peabody, MA, specializes in the fields of professional services, information systems, and information security.  Among their professional services offered are offer web design, blog maintenance, financial consulting, and network services.  GraVoc’s clients have spanned Greater Boston, New England, and beyond.  For more information about GraVoc, please visit http://www.gravoc.com.  

Apple’s Next Frontier: Real, Exaggerated, or Both?

As mentioned in a previous entry of the GraVoc News Blog, we can now look back on Windows Vista and conclude that it may have been the worst thing to happen to Microsoft.  Its hype and ensuing lack of popularity among end users, especially in favor of an older operating system in Windows XP, led to it becoming a complete flop.

Meanwhile, this failure has opened a small crack for Apple to penetrate the business/enterprise market, as explained in this recent whitepaper.  Apple’s popularity with students who have since graduated and entered the business world, in conjunction with the ubiquity of the iPod and iPhone, has enabled Apple to gain market share in the enterprise.  Granted, some outlets spin it in different ways than others--the whitepaper, which is ultimately promoting a cross-platform systems management application, cites a report stating that 80% of businesses have at least one Mac, while other reports claim that even after quadrupling their market share, Apple’s 4.5% share is dwarfed by Microsoft’s 94.9%.  However, even if there is only one Mac in an enterprise, administrators must account for its well-being, both in terms of installing necessary software, fixing problems, and enhancing its information security measures. 

Nonetheless, if this trend continues and Macs someday represent 1/10th of the machines in an enterprise, businesses will face the challenge of administration and maintenance of both Windows-based and Mac OS-based machines.  This will inevitably result in higher costs, either in terms of labor/training time, more time doing manual implementations, or investing in a product that manages across platforms.  With the advent of the heralded iPad tablet, and with enterprises still hesitant to make Windows 7 the operating system of choice, management of Macs in the enterprise may soon become a relevant topic.

Since 1994, GraVoc Associates, Inc. has been providing clients in Greater Boston, New England, and beyond with services in the fields of information systems, information security, and professional services.  Among their professional services offered include network infrastructure design and management services.  For more information about GraVoc, please visit http://www.GraVoc.com.

Windows XP: Is It Time?

It is now 2010 and today was supposed to be the two-year anniversary from the end of Microsoft Windows XP sales.  (It was eventually pushed back several months due to public outcry and the flop of Windows Vista.)  We are coming up on XP’s ninth birthday this summer.  Most enterprises are stubbornly sticking to Windows XP, even when purchasing new machines, as about 60% of machines in businesses still use Windows XP.  Of course, vendors are also helping the operating system perpetuate its dominance as it becomes obsolete by continuing to offer Windows 7 or Windows Vista with the option of an XP downgrade.  But who can blame them?  The market is demanding that XP continues to be available.

Most agree that Windows Vista came with more than its fair share of problems.  It may have been the single worst thing to ever happen to Microsoft, as Vista hurt its reputation considerably and some users  have decided to use other operating systems (more on this in the next entry).  End users and administrators alike are hesitant to adopt Windows 7 for the fear that, like Vista, the product has too many unfamiliar features (notably security settings) that get in the way of doing business as expediently as possible.

However, it has been almost four months since Windows 7’s hyped-up release.  And while the XP downgrade is still available in many places, it will not be around forever.  Windows 7, meanwhile, has started to be adopted more steadily by enterprises.  There is no way around it:  XP is almost nine years old and it is probably time for many businesses to make the switch.  Think of it this way:  Is your automobile eight years old?  How many cars have you purchased since August 2001?  Chances are, your operating system is older than your current car, and possibly your last car.  Windows 7 has enjoyed a warm reception, and it’s not early in the game anymore.  XP is becoming obsolete, and it’s time to wonder if business will keep their death grip on XP until support is completely extinct in 2014.  It may be time to say goodbye to the familiar system and move forward.

Since 1994, GraVoc Associates, Inc. has been providing clients in Greater Boston, New England, and beyond through technology in the fields of information systems, information security, and professional services.  GraVoc is based in Peabody, Massachusetts and its wide range of services include hardware and software procurement, network infrastructure design and management, and enterprise resource planning (ERP) systems integration.  For more information about GraVoc, please visit http://www.GraVoc.com.

Take A Few Minutes This Afternoon; Protect Your Computer

Microsoft has sent out an alert intended for all Internet Explorer users regarding a critical patch that protects the applications from at least eight different vulnerabilities and exploits..  As Microsoft typically sends alerts on a regular basis, this “out-of-band” alert highlights the importance of the update that is not available.

The majority of Windows/Internet Explorer users automatically run a Windows Update application, and security patches like this one will typically be installed automatically as these users shut down the computer at the end of the day.  If not, a user can go into the computer’s control panel and select “Windows Update” to see if they have any important updates to install.  While the automatic updates as Windows shuts down are typically vexatious as the computer user is eager to go home but cannot leave until the updates are finished, this one is especially important.

GraVoc Associates, Inc, based in Peabody, MA, is a consulting firm specializing in information systems, information security, and professional services.  A Microsoft Gold Certified Partner, GraVoc is committed to providing customers with worthwhile information such as this message to make sure their systems continue to work as they should.  For more information about GraVoc, please visit GraVoc.com. 

H1N1 Past Peak…For Now

The World Health Organization announced last month that the second wave of the H1N1 (swine) flu pandemic had abated slightly after reaching its height in the United States in November.  However, the organization warned of additional waves of the pandemic event and claimed that the event will likely linger through 2010 and perhaps 2011.

A characteristic of most pandemic events is that they come in waves.  The United States have already seen two waves of the H1N1 outbreak, the first coming in April through early June, and the second taking place as autumn arrived.  Viruses typically mutate over time, such as the Tamiflu-resistant strain that spread in small circles this fall, but they typically do not change so dramatically that someone who has already had the virus or a vaccine would become ill again.  Once the majority of the general population has developed an immunity toward the virus (through infection or immunization), the virus typically returns to patterns similar to the seasonal flu.

Effective pandemic planning strategies take into account additional waves of pandemic outbreak.  Many measures taken by organizations in response to the last two waves of 2009 H1N1 have readied businesses for an additional wave of H1N1 or an appropriate response to the feared H5N1 (avian) flu virus, which has not been widespread, but is feared to be more virulent.

GraVoc Associates, Inc., based in Peabody, MA, is dedicated to providing customers with solutions in the fields of information security, information systems, and professional services.  Serving Greater Boston, New England, and beyond since 1994, GraVoc offers pandemic planning services to ensure that your organization is prepared to respond to widespread illness, supply chain interruptions due to a pandemic event, and widespread employee absenteeism.  For more information about GraVoc, please visit GraVoc.com.  For previous blog posts on H1N1 on the GraVoc News Blog, please click here.

Buddy List Blues

In a recent whitepaper issued by MessageLabs, a division of Symantec, security risks surrounding instant messaging within a company are addressed in vivid detail.  The document, entitled “Bullet-proofing Instant Messaging,” claims that 80% of “corporate or enterprise users” utilized an instant messaging service.  While the practice of instant messaging opens up the possibility of many efficient opportunities in business processes, such as instant file transfer and rapid communication that allows multi-tasking more than the telephone does, users of instant messaging either on a business level or a personal level know that many risks come associated with it as well.

Some of the risks involved include the following:

• Quick spread of worms and malware from clicking links and automatically downloading files.
• Transfer of corrupted/untrusted files.
• Insecure access controls – IM services typically do not require industry-standard authentication procedures in terms of password strength or multifactor authentication.
• Liabilities with file sharing and copyright infringement:  If a user’s “buddy” sends, for example, an illegally-downloaded music file to the user, both the user and the company could be liable for copyright infringement.
• Perhaps most importantly, cleartext transfer of potentially confidential data.  Unlike internal email, this information typically does travel outside the organization’s firewall.

The document also outlines a variety of solutions to mitigate the risk that comes with instant messaging as a business solution.  Predictably (as it is their product), MessageLabs promotes software-as-a-service solutions as a way to secure instant messaging platforms.  They also mention options such as internally-developed secure IM platforms so that employees can IM each other from within the network.  Perhaps the most practical solution, however, is employee diligence:  If employees are careful about their behavior and the behavior of others surrounding their use of instant messaging, or of an organization strongly discourages instant messaging, opting to use email as a comparable mode of communication, many of the risks surrounding this practice can be reduced.

GraVoc Associates, Inc., located in Peabody, MA, is dedicated to providing solutions to its customers in Greater Boston, New England, and beyond through the use of technology.  Specializing in the practices of information systems, professional services, and information security, GraVoc occasionally uses the GraVoc News Blog as a way to call customers’ and visitors’ attention to relevant, engaging topics such as this one.  For more information on the company, please visit the GraVoc website at http://www.gravoc.com.

DivergingSoul Now Part of GraVoc

Effective January 1, 2010, DivergingSoul Media Productions is now a division of GraVoc Associates, Inc. This is an exciting milestone as these two companies become one and GraVoc’s staff increases to twenty with the addition of DivergingSoul’s Brian Gravel and Matt Molk. DivergingSoul has served both individuals and businesses since 2006 in the fields of audio and visual media production, web design, and creative marketing strategies.

DivergingSoul brings an additional creative influence to GraVoc, who currently serves Greater Boston, New England, and beyond in the fields of information systems, professional services, and information security. Some of the services DivergingSoul brings to the table include the DS2 Network, which leverages digital signage in high-traffic areas, and Web 2.0 services, which use creative strategies and the use of user-friendly technologies (such as blogs like this one, Facebook, RSS feeds, etc.) to promote a company’s message and web presence.

GraVoc President/CEO David Gravel considers the merger a logical step in line with industry demands: “There is a blurring of the lines between the technology practices,” he said. “More and more of our customers are asking us to be able to support their web and training needs. In that light, the merge with DivergingSoul is natural as it further extends our ability to address our customers’ needs.”

“We’ve had a strong working relationship in the past and we are looking forward to a new chapter in our company’s history,” said DivergingSoul co-founder Brian Gravel. “The worlds of IT and AV have been rapidly merging together and the combination of DivergingSoul and GraVoc will create a one-stop solution for media and information solutions.”

DivergingSoul will keep its brand identity while operating as a division of GraVoc: This is currently reflected on the revamped divergingsoul.com. More information about the services offered by GraVoc’s newest practice is also contained on the website.

As a result of the merger, the GraVoc website has undergone some changes in look and functionality. To see these changes, learn more about GraVoc, or learn more about GraVoc’s newest division, please visit http://www.gravoc.com.