Category: IT

Video conferencing systems / b.r.m. offers data protection-compliant video conferencing solution

There are many providers of video conferencing and online meetings - b.r.m. has been offering a video conferencing solution that meets the highest data protection standards for several months now. In this blog post, you can find out why video conferencing tools are important and how the various providers differ.

The coronavirus pandemic has fundamentally changed our everyday lives in a short space of time. Professional and business life in particular had to react quickly to new regulations and requirements. Meetings and conferences could no longer be held on site and people had to work together from home. However, such crises must not paralyze everyday working life. That is why it is important to implement a secure and stable collaboration solution in the company. In addition to traditional coordination meetings, documents also need to be exchanged or processed in parallel. 

It is undisputed that a classic telephone call does not have the same effect in the long term. You have to be able to see the other person. So we need the opportunity to exchange ideas without direct contact and location restrictions - but with data protection and additional functions that make our work easier: the conference solution.

The major providers of such digital conferencing solutions are Zoom, Microsoft Teams, Skype, Skype for Business and Google Meet (formerly Google Hangout). Only Zoom and Skype for Business can be hosted on their own server - in other words, only here can a particularly high level of data protection be guaranteed. In addition to the option of hosting it yourself, Zoom also offers an extremely intuitive user interface. The costs and installation effort for Zoom are kept within limits. 

Of course, the other providers (Microsoft Teams, Google Meet) also have some (supposed) advantages, but data protection cannot be guaranteed here. Although the data is encrypted in transit (via the internet), it is decrypted on the server of the respective provider. The service provider therefore has complete control over this personal data - trust is an absolute prerequisite here. 

The big difference to the b.r.m. conference solution is the data storage. With us, the data is not decrypted on the server of the respective (American) provider, but is sent from the Internet with 265-bit AES encryption to the b.r.m. data center and are only decrypted there. This corresponds to "real" data protection without any problems of mistrust. In addition, Zoom is the first provider to work on "extended" end-2-end encryption so that data is not passed on to Facebook, for example. 

In summary, the b.r.m. Zoom video conferencing solution offers the ideal basic requirements for your company. The best user interface on the market is paired with the highest data protection promises (hosting on our own server in Bremen). An extensive range of functions, e.g. the option to exchange documents, makes day-to-day work easier. A manageable set-up and support effort as well as fair prices round off the offer. 

Please contact us for further information. 

IT review 2021: Log4j/Log4Shell

As part of our review, we would like to look back at various major developments in IT in 2021. This blog post is about the Log4j/Log4Shell security vulnerability. 

Log4j/Log4Shell stands for a security vulnerability in the Java library that was discovered at the end of 2021. This vulnerability has received particular attention due to various warnings from public authorities. For example, the German Federal Office for Information Security (BSI) classified Log4j as an "extremely critical threat situation". This classification corresponds to the highest of the four possible levels for cyber security warnings. In addition, this Java library is used in a particularly large number of applications and the vulnerability can be exploited relatively easily.

As with all IT vulnerabilities, fixing the problem involves quickly and thoroughly identifying the error and installing the appropriate updates (which are intended to close the gap). This process has taken a long time due to the increasing complexity of digital applications.

After a few days, the problem was solved in most cases, but the concern and risk remains that in the meantime hackers have installed another backdoor through which the system could later be attacked. In such a case, the attack could no longer be linked to the Log4j/Log4Shell issue.

IT industry of the future / b.r.m. provides training

Today's world is digital and the future will be even more digital and technological. IT experts are therefore important and in demand. IT and digital technologies are the industry of the future. b.r.m. business resource management from Bremen offers training in IT.

When looking for a suitable apprenticeship, in addition to the question of a correspondingly high salary, there is no getting around the question of how future-proof that professional field is. For technology enthusiasts and IT, both questions can be answered very quickly and easily. Jobs in IT are more in demand than ever and are therefore extremely well paid - even before the pandemic. In the future, however, technical professions will become even more important. IT experts are the engineers and machines of the modern age - (almost) nothing works without them.

The statement that professions in IT will be in demand and needed in the long term is not just an assertion, but is repeatedly confirmed by experts and the media. Headhunters are on the lookout for good employees every day - and more and more of these are IT professions. However, these IT jobs are no less demanding - cloud applications and smart data analysis are now playing a prominent role. Cyber security is also becoming more important, as more and more digital offerings also increase the "digital risk". 

Both in technical professions and in other sectors, the fact that there are fewer and fewer skilled workers makes things even more difficult. IT experts do not always need to have studied for certain jobs. This makes it all the more important to offer appropriate training positions. b.r.m. business resource management from Bremen has been an expert in IT systems for decades, from efficient data centers to GDPR-compliant digital applications. Shortly after it was founded, b.r.m. began focusing on sustainability in IT. In the field of green IT (i.e. resource-saving data centers), b.r.m. is an absolute pioneer and has already received several national awards for this. 

We have summarized the four most promising IT professions below:

  • The IT auditor

The task of this rather unknown working title is to monitor IT systems. An IT auditor checks the relevant infrastructures and systems in order to quickly identify weaknesses or implement optimizations. 

  • The cyber security expert

Cyber security experts are responsible for the security of the constantly growing number of digital IT systems. In an emergency, they are the person who initiates countermeasures in the event of a (digital) attack.

  • The software developer

Due to the ever-increasing number of possible applications for digital systems, the corresponding software must also be developed and programmed time and time again. Software developers enable us to make the benefits of digitalization tangible and usable.

  • The network administrator

The need for IT experts is also demonstrated by the fact that there are (and must be) several equally important positions for the management of IT systems. The network administrator is an absolute expert in the administration of the various IT systems. They are responsible for ensuring that everyone involved can use the relevant applications without any problems.

Are you interested in training in IT? Then take a look at our job vacancies and become part of the IT experts from Bremen. We look forward to receiving your application.

Malware: Trojan displaces virus

In Latin, 'malus' means bad, evil or vile. And this is also how malware programs behave. They nest in computers or servers in order to execute unwanted functions. Although we also count 'computer viruses' as malware, simply infecting or destroying a computer is on the decline. Today, malware typically appears in the form of Trojans, which secretly board the bridge, usually unnoticed by the user.

Trojans are a problem for the external IT service because the fault usually lies with the person operating the customer's mouse or keyboard. It is this person who opens the gates for the intruder. In most cases, Trojans get onto the computer through the careless downloading of email attachments or programs from obscure sources, or through under-complex passwords.

Our IT service therefore focuses primarily on user training. After all, being alert and informed is the best protection against intruders. Our service also includes analyzing obscure attachments. Our customers can forward suspicious cases to us before they carelessly press the mouse button.

IT service: What are services?

Any support that is not based on an exchange of goods or merchandise is referred to as a service. Users do not buy 'things' from service providers that they can unpack and touch, they primarily buy expertise and experience. Services are always 'immaterial' at their core, even if concepts or carrier media are handed over at the end.

Our IT service includes, for example, tasks such as 'consulting', 'planning' or 'implementation' among its services. The remuneration for these services is paid via a work or service contract. It obliges the contractor to provide precisely defined services, either on a one-off or permanent basis.

With our services, we primarily provide our customers with security and data protection for the problem-free and reliable setup and operation of their electronic data processing. This is the core of our IT services.

E pluribus unum: Blade servers in IT service

Many pages make a book: The word 'blade' in 'blade server' does not refer to 'blade' or 'cutting edge'. In such a computer, circuit boards are combined like 'blades' in a housing under a 'cover'. The idea is to operate several computers on a single power supply, on a single shared storage medium and with a single ventilation system. This saves space, energy and simplifies the system architecture.

Our IT service uses such 'blade servers' wherever it makes sense to do so. These circuit boards - 'blades' - with the microprocessors and the main memory are pushed side by side into a server. Today, the standard rack accommodates more than 80 such blades, i.e. far more than 5,000 processors. The main advantages are the compact design, high power density, scalability, simple cabling and quick and easy maintenance.

However, the energy design and ventilation of this 'high-density computing power' requires a good deal of technical expertise, which is why small and medium-sized enterprises (SMEs) in particular are increasingly outsourcing such tasks to a competent IT service provider.

Securely re-certified: EcoStep 5.0 for perfect IT service

In December 2017, the IT service company b.r.m. successfully completed the next stage of Eco-Step certification. The company has regularly had its integrated management system put through its paces there since 2008. Among other things, the implementation of the following industry standards was tested with the help of EcoStep are specially adapted to the requirements of small and medium-sized enterprises (SMEs):

- ISO 9.001 Quality management
- ISO 14.001 Environmental management
- OHSAS 18.001 Occupational health and safety.

This regular re-certification is mandatory for all customers of our IT services a guarantee that they are working with a company that perfectly fulfills all their corporate compliance requirements.

Sustainability: thinking outside the box ...

Forestry has coined the term sustainability: a forest should always be managed so carefully that, firstly, the biotope remains healthy and, secondly, the timber yield does not decrease over the generations. Sustainability therefore describes a long-term method of management. In the course of the ecological debate, this principle was then transferred to other sectors of the economy.

The concept of sustainability has also found its way into IT. At the end of the life cycle, the raw materials used should be recycled. Secondly, the energy used to operate the computers should come exclusively from renewable sources. The latter can be easily achieved today. This is nothing more than a question of goodwill. The complete recycling of technical components, on the other hand, cannot yet be fully implemented in IT services. However, our servers are working at the current maximum level of sustainability.

Where elephants fight, the grass suffers

For most laypeople, the 'Secure Sockets Layer' (SSL) is just a Chinese IT term. The term actually refers to the network protocol for the secure transmission of data. Only those sites that have been certified in accordance with SSL are considered secure transmitters in global data traffic.

When an Internet giant like Google now distrusts an estimated tenth of all sites SSL distrust and no longer recognizes and no longer recognizes their certificates, then this is like a medium-sized earthquake in the IT world.

Officially, the Google browser 'Chrome' is withdrawing its trust from the affected Symantec sites because security is no longer guaranteed there. Unofficially, the issue is more likely to bethat Symantec is said to have distributed masses of SSL certificates without authorization. A battle of the giants - which in this country would also affect 'Spiegel Online', 'Golem' or 'Wechat', for example, and even 'amazon' would be in a tailspin from October 2018, i.e. from the next version of Chrome. After all, Google Chrome is the world's leading internet browser.

With the release of 'Chrome 66' in April 2018, the announced penalty will take effect worldwide. When accessing affected pages, Chrome users would then receive a warning that the content of the selected website is 'not trustworthy'.

Our IT service recommends that all website operators check the certified SSL security of their website with SSL-Labs to check the certified SSL security of their website. If you have any questions, just give us a call.

Bremen, February 22, 2018

Facebook: Return to Sugar Mountain

Since Facebook founder Marc Zuckerberg began to thoroughly 'clean out' his network, the platform has been getting closer to reality again. It was not only the American election campaign that showed everyone how easily Facebook could be misused as a 'fake news sling' under the old rules. The loss of advertising revenue and the increasing exodus of the younger generation probably also contributed to the major rethink.

We at b.r.m. are honoring these efforts on the social media platform and are returning to Facebook with our account and the range of IT services we offer. Interested parties can find our presence there at www.facebook.com/brmbremen/ .

Bremen, February 28, 2018