Blog Layout

Wondering about the strength of your passwords?

Points North • May 14, 2019
In today’s world, it’s more important than ever to safeguard your online data in every way possible. News stories about hacking and data breaches are becoming all too common, with even major companies being regularly affected. A recent example is Marriott Hotels, who in November 2018 announced that they had discovered a massive data breach potentially involving as many as 500 million people.

So what can you do to make sure your online data is as safe and secure as possible? For many of us, reviewing the strength and quality of our passwords (or passphrases, as you will see below) is a great place to start.

National Institute of Standards and Technology (NIST) Guidance
The National Institute of Standards and Technology (NIST), is a branch of the Department of Commerce and provides technology, measurements, and standards to aide U.S. industrial competiveness in the world. Every few years, NIST issues guidance on how to create strong and secure passwords, and the latest recommendations call for using "passphrases" (a series of associated words) rather than traditional passwords. The three steps below illustrate how you can build a strong passphrase:

    Think about familiar items that have a relation to each other, such as items in your living room. Identify associated items that have meaning to you.
    Make sure the associations are very unique. Passphrases should be words that can easily go together in your head, but that no one else would ever suspect. As mentioned before, a good example would be the items in your living room (e.g., BlueCouchFlowerBamboo). A bad example would be the names of your children or relatives, since those associations can be easily discerned by others.
    Make the passphrase something that you can easily picture in your head; this will help you to recall the passphrase without needing to have it written down. The living room items example works here as well, as it is easy to picture your living room in your mind.

You can see how creating a passphrase rather than a traditional password can lead to a far more unique result, and the more unique a password is, the less likely that it will end up being figured out by someone who may have malicious intentions.

Key Elements to a Strong Password
If you decide that a passphrase isn’t for you and you prefer a more traditional password, NIST has guidance for those as well. Some of the key elements that NIST recommends for creating a strong, secure password include:

    A minimum of 8 characters and a maximum of 64 characters
    The use of special characters, such as exclamation points and asterisks
    Avoiding sequential and repetitive characters (e.g., 12345 or ZZZZ)
    Avoiding anything commonly used or easily guessable (e.g., P@ssw0rd)

Learn More about NIST and Cybersecurity
Keeping up with the latest security developments takes time and effort, and NIST is a great resource to utilize. To view their entire report on Digital Identity Guidelines, which contains more detail on the content in this blog, visit https://pages.nist.gov/800-63-3/sp800-63b.html. To learn more about NIST in general, visit their website at: https://www.nist.gov/
By Points North 26 Jun, 2020
Once employers have familiarized themselves with the ACA obligations, they should also know of the penalties associated with non-compliance. Identifying and paying for full-time employees is fairly easy because of the straightforward details of their job but for variable hour employees’, it is not as simple. Some organizations make use of the ‘limiting’ strategy to manage such schedules but this strategy as its own set of problems. Problems such as workforce scheduling and variable labor requirements are factors that make this strategy impracticable. We’ve combined some of the best ways to ensure ACA compliance in this article and examined how ‘guidance’ can help you limit penalties.
By Points North 14 Jan, 2020
The new year brings new policies and regulations, so it's important to do a comprehensive review and update of your legal and HR compliance to make sure that you're on top of any new laws and regulations. Begin 2020 on the right foot, with the knowledge you'll need to answer any questions from corporate leadership, supervisors, and employees. Here's what you need to know.
By Brad Smith 03 Oct, 2019
Though federal rules from the Department of Labor (DOL) give employers some flexibility in determining when to issue final compensation to workers leaving an organization, final paycheck compliance laws differ from state to state, and those rules also change periodically.
ACA Reporting Is Required and Strictly Enforced by IRS
By Brad Smith 06 Sep, 2019
As the fiscal year closes the employers have many queries regarding the status of the Affordable Care Act (ACA) Reporting. It is questioned every time the tax filing season looms. The answer to all these queries is that Yes! ACA is still the law and employers who tend to ignore their obligations towards ACA reporting can face some heavy penalties.
By Brad Smith 29 Aug, 2019
When your company starts growing it means more success but it also means more responsibility. Once your company grows beyond a certain point, the US government requires you to submit additional information regarding your company being an equal opportunity employer.
Looking for a solution to data aggregation?
By Points North 02 Aug, 2019
It is important to choose a reliable and secure data aggregation solution which provides you with the best data. If you manage to get financial data which is cleaned and enriched then you can make accurate assessments of the financial situation of your customers. Following are some of the things which you should look for while choosing a solution to data aggregation.
Handling compliance with the Affordable Care Act
By Points North 09 Jul, 2019
Handling compliance with the Affordable Care Act - If you're the one in charge for handling compliance with the Affordable Care Act (ACA) reporting and audits then read on; those who aren’t compliant will face penalties from the IRS.
Common IRS Error Codes
By Points North 01 Jul, 2019
Due to the complexity of the process, utilizing a reputable software vendor to file your 1094/1095 data electronically with the IRS is considered to be a best practice. One reason for this is that if it turns out that there’s a problem with some of your ACA data, the IRS doesn’t necessarily make it easy to figure out what went wrong.
What is Payroll Data Aggregation?
By Points North 17 Jun, 2019
Employers often have to face complex issues regarding employee withholding taxes. This gets even more challenging when employees on their payroll, earn a mix of regular and non- standard income.
Are all employers required to e-File with the IRS?
By Points North 31 May, 2019
We are dedicated to helping our clients navigate the complexity of ACA and employee eligibility reporting. Below you will find information regarding whether or not all employers are required to e-File with the IRS.
More Posts
Share by: