Select Page
Who Knows What You’re Doing For Data Privacy Week?

Who Knows What You’re Doing For Data Privacy Week?

The EstesGroup 2022 data privacy initiative focuses on educating businesses on best practices for collecting data and promoting transparency, respect, and security.

Every second, EstesGroup cybersecurity experts work to protect the data of our customers, our employees, our partners, and our friends. In this spirit, we are once again a Data Privacy Week Champion. As one of the leading cloud providers in the nation, we know full well how important it is to recognize and support the principle that all organizations share the responsibility of protecting information.

Data Privacy Week 2022 Champion

Data Privacy Week Raises Awareness Within Organizations

The COVID-19 pandemic has blurred private environments, like bedrooms and living rooms, into corporate offices, given our increased dependence on remote workforces. A universal respect for privacy has never been more important: the pandemic has also increased international attacks on American businesses, and this has left the homes of remote workers vulnerable to cyberthreats most common in traditional office settings.

EstesGroup helps businesses manage data through advanced cloud-based solutions that offer the protection levels trusted by medical record keepers, law offices, manufacturers, distributors, and more. We promise to guard our clients at every level possible:

We protect online data, and we secure offline data with the same robust approach to risk management that makes even the most sensitive information safe in the hands of our IT staff.

We prevent unauthorized access and ensure that compliance regulations are not only met, but exceeded.

We secure employees wherever they are and train them to protect themselves against the perils of digital harm.

We educate our customers so that they handle their data wisely and keep everyone in their networks and supply chains safe from cyberthreats.

Data collection is only increasing, and the risks are following suit.

The Pew Research Center reports that 79% of adults in the United States are worried about the security of their data as it is handled by organizations. Here are a few tips to earn the trust of your employees and customers by deploying secure privacy management strategies:

  • Save now, secure now: There is no room for procrastination in cybersecurity. If you save the data, protect it.
  • Go now, know now: Choose your cyber pathways wisely, and know who in your company is traveling where and ensure that you are documenting digital tracks so that a breach can be traced after disaster strikes.
  • Collect now, share now: If you are collecting information, inform your employees and customers about how you are saving, using, and sharing information through clear and concise policies that abide by privacy laws.
  • Behave now, train now: Know how to behave and train your employees to do likewise.

Understand Data Privacy

  1. Get a free cyber health check from EstesGroup.
  2. Sign up for a full security audit at least once a year.
  3. Enroll in educational programs at least once a year so that you’re fully informed about how the digital landscape is changing.

Manage Data Privacy

  1. Distribute and post current policies to all employees.
  2. Delete unused applications and move vulnerable data offline using secure backup plans.
  3. Use firewalls, encryption, cybersecurity solutions, and disaster recovery planning services.
  4. Move operations into a private or hybrid cloud environment for the most control over your data, ensuring cybersecurity and privacy at every endpoint.
  5. Ensure that your partners and vendors have up-to-date privacy measures in place so that your employees and customers are also protected in your extended network.

For more information regarding adoption of a robust privacy framework to meet industry compliance regulations, please learn more about NIST. If you would like help understanding the details of NIST Privacy Framework, AICPA Privacy Management Framework, ISO/IEC 27701 – International Standard for Privacy Information Management, please contact the EstesCloud team.

As privacy management champions, we have your back — and can manage your backup, too.

Two Sides to Every Cloud ERP Adoption Story

Two Sides to Every Cloud ERP Adoption Story

Understanding Your Move to the Cloud

Cloud adoption is often as unique as your company culture. However, the common benefits of cloud adoption abound. You can save time and money while increasing security, availability, and scalability. If you choose a cloud-based ERP deployment, what do you need for a successful cloud migration? Do you need to have a Shakespearean team ready to write the future story of your company? Once on the stage, will your cloud adoption tale be a tragedy or a comedy? Let’s try to understand the people behind your move to the cloud to better write your cloud adoption plan.

  • Cloud experts (consultants, migration specialists, engineers)
  • Enterprise resource planning experts (ERP consultants, trained employees)
  • Decision makers (steering committee members, owners, leaders)
  • Cloud ERP users (internal staff, external support)
  • Data center staff (consultants, architects, engineers, help desk team members)
Cloud Adoption Cloud ERP Adoption Plan

Do you need cloud-savvy ERP experts on your team?

Make better decisions when moving your business applications to the cloud by balancing your decision-making team with your hands-on enterprise resource planning (ERP) talent. You can save even more time and money by supporting your in-house managers with ERP and cloud ERP consultants or experts when needed.

Quick Cloud ERP Adoption Planning Tip

An independent ERP consultancy can offer you an unbiased view of your decisions ahead, especially when it comes to newer technology and software releases.

Who will write your first line of cloud code?

Choosing a cloud for an ERP system might begin with someone on your IT team who has a progressive vision for the technological management of your company. Or, an ERP system, like Epicor Kinetic or Epicor Prophet 21, might be purchased simultaneously with cloud ERP project team formation and then guided by key players, such as company owners, CEOs, CIOs, and onward.

Understanding Your Business Cloud Requirements

A cloud ERP vendor might try to convince you that Software as a Service (SaaS) is your best, even your only, option. However, before you sign up for a data migration to a public cloud, consider private cloud or hybrid cloud platforms.

An ERP solution adapts to your unique cloud strategy. Once you understand your cloud ERP solution options and decide that your project plan should indeed migrate away from on-premise infrastructure, it’s time to solidify teams and team strategies. Your ERP implementation team needs both thinkers and doers.

The Thinkers

Your steering group will monitor the progress of your project ensuring it stays on track to complete on time and on budget. This group also will provide support for the project making sure needed resources are available to the project as needed and helping to backfill when those resources are taken from another part of the business.

The project manager is part of this group. Regularly the project manager will provide status reports and predictions for the immediate future of the project. An executive sponsor represents top management and is part of the steering group. That person will report project status to the C-level team.

When there is a champion who was instrumental in moving the software acquisition along and likes their role keeping the business excited about the prospect the software will bring, that champion should be on the steering group. Some representation from departments and functions that will use the new software might also have a seat in this group.

The Doers

Your cloud ERP implementation team should include leaders from departments across the business. They are directly involved in the overall implementation of this software and its IT infrastructure and, in most cases, they and their peers will use the new software daily. Most of the people in this group will be full-time talent serving on the software project but will keep in contact with their former co-workers in the functions they came from.

Often people who were group managers get assigned to this group, but there is no reason to limit the team to managers or former managers. Team members should be passionate about the new ERP system, its infrastructure, and the benefits expected. They should be very knowledgeable in their particular function and have some expertise in the use of the ERP software and process flows throughout the business.

Members of the cloud ERP implementation team will coordinate work in sub-teams that will test transactions related to their functional area. As testing progresses, cloud ERP team members will coordinate testing that extends to more than one function.

This group of people must keep in contact with their previous functional groups ensuring they know about any new changes or challenges. Managers of those functions will want to know the progress of the software implementation and will want to make choices when options in the implementation arise.

This team will help set up training and the training processes that will be used to share knowledge developed during implementation with the users who will need that knowledge to do their work with the new system.

Implementation team members do not need to be information technology gurus. They should understand some basic concepts related to IT and databases. This team will be directly involved in capturing legacy data and moving that data to the new software and, ultimately, to the cloud infrastructure of your choosing.

Look for the following indicators of a successful cloud adoption plan execution when choosing your cloud provider, your data center, and your cloud ERP implementation partner:

  • Is this a vendor trying to upsell you? Can a vendor-managed SaaS ERP system support your growing business?
  • Can your cloud provider meet your budget needs while adapting to your project timeline?
  • Does your cloud provider have a strong history and good reputation?
  • Does your cloud provider’s data center meet your needs for uptime and security?
  • Does your potential cloud ERP partner provide staff that will fit into your ERP culture?
  • Will the cloud provider understand your enterprise resource planning methodology and serve as a source of expertise for your ERP software and the full spectrum of its deployment options?

Will cloud ERP adoption improve your business today?

Enterprise resource planning (ERP) software implementation is a long, challenging commitment that involves dozens of people working together toward a common goal. Your go-live in the cloud will be one of the most rewarding and promising days in your company’s story. You can expect immediate results as soon as your team is empowered by both the software and its underlying technology.

To begin work as cloud ERP implementation team members, training is key. Your cloud provider will enroll your team in an in-depth training for your new cloud-based ERP system. Your team will learn how cloud computing works, especially from the cybersecurity aspect, and will quickly become astute through real-time support for the new business processes. Part of the training will be introductions to developers and system support personnel at your cloud provider. Implementation team members will not need to solve every problem but will know where to look for the answers.

EstesGroup provides on-premise ERP expertise while also fully supporting cloud migrations to private clouds, hybrid clouds, and SaaS projects. Are you ready to take advantage of internet connectivity to move beyond on-site servers? Do you need help building a cloud ERP plan for 2022? We have Epicor Kinetic ERP hosting, Epicor Prophet 21 ERP hosting, Sage hosting, and Syspro hosting experts standing by, ready to answer your questions about cloud migrations for both new and old ERP systems. Our experts can help you meet your business requirements so that you stay competitive while reducing cost across your infrastructure.

6 Tips to Save Time & Money When Customizing Your Epicor Application

6 Tips to Save Time & Money When Customizing Your Epicor Application

Here at EstesGroup, we do a lot of customizations for Epicor ERP and P21 systems. These include adding new logic to processing, adding / changing reports, updating screens to add custom information and creating new dashboards to simplify business understanding. We love customizing both P21 and Epicor Kinetic / E10 because it drives customer efficiency and productivity. But the process of getting things done can be frustrating when delays set in. With that in mind, I want to give you six tips to streamline the customization process and save you time and money!  

Epicor Application Time & Money

Does your Epicor application have you caught in a cycle of subtraction?

#1 – You should consider having an ad-hoc Statement of Work (SOW) setup with EstesGroup.

Doesn’t it always seem that the more urgent the request, the more roadblocks you encounter?

Often you want something quick, but you find that your current SOW has expired. Or maybe is doesn’t have enough hours for the customization. This delays your request and adds more work for you. That’s why we offer our “ad-hoc SOW” as an option.

If you have an ad-hoc SOW established with us, we can skip the step of creating a new SOW (sending emails, getting signatures, entering all of that into systems, etc.) and focus on getting the work done.

Action Step: Contact us and setup an ad-hoc SOW now. Then keep it active so that there is no delay if you have an urgent issue. We usually set them up for 12 months long and we will contact you for approval to renew. And we always get your email approval before starting any work so there are no surprises.

#2 – Have the actual user write up what is needed so that you get the most accurate version of the request.

Remember the telephone game? You whisper in another person’s ear, and they then do the same? What you find is that a request that goes through multiple people can gradually change. Then when the estimate comes back, it doesn’t match the real user’s needs and we’ve introduced more delay in the process.

Action Step: If you are the intermediary at your organization and are gathering the information, have the actual user describe what they want in their own words. Don’t try to interpret it for them or make assumptions you haven’t checked out.

#3 – Focus on describing what you want and how you would like it to work not the details of how the developer should make the code changes.

Often, we get customization requests where the customer focuses on describing the details of how the customization should technically be done rather than what the customization should accomplish.

That’s helpful but overlooks the fact that a developer may know a better way to accomplish the same thing. Plus, realize that developers are naturally prone to find solutions that will not require more work in the future. And there is also a good chance they may have done this same change for another customer.  

Letting them figure out the best way ensures they will offer a solution that doesn’t affect your next upgrade and is also simpler to do.

Action Step: Focus on what you want and how you would like it to work. Describe what the screens must do, or how the report should look. Trust the developer to use their expertise to find the best way to do it.

#4 – Use a standard set of questions for each customization request. Don’t settle for a brief email that can be interpreted several different ways.

We often let requests come in with partial information and the result is a lot of unnecessary back and forth conversations to get the information needed. Your time is valuable, so use a template.

We know that when the user answers the right questions, they offer the best information. And a template is a great way to simplify the process. Of course, we know that in some cases an internal discussion is best to gather the answers. But you can still use the template, right?

Action Step: Ask us how capture the request information up-front.

#5 – Be clear about what you want and don’t rely on assumptions!

Developers will make assumptions. It’s human nature and that will affect how they estimate the time to make, test and deliver the customization. If you can define those assumptions beforehand, it will reduce delays and improve the quality of the estimate. Here’s a list of common assumptions made by the developer:

  1. The customer doesn’t need to license any new modules to complete the solution.
  2. This area of the application hasn’t been significantly modified before.
  3. The customer has a good testing environment they can use.
  4. The customer has good data to test with.
  5. The end user will review and help test the solution.
  6. I’m the only person currently customizing the environment.

Action Step: If these assumptions are incorrect, include the information in your request so they include them in their thinking. Don’t make them guess!

#6 – Don’t wait to verify the developer has good access to your test environment.  

One of the biggest delays in delivering customizations is when the developer cannot get working access to your test environment. We’ve seen delays of several weeks around this problem and we know that is frustrating for you.

Plus, we are prone to assume that because access worked once before, that it still works. New versions of VPN software and minor configuration changes in your network will easily break the process used only several weeks ago.

Action Step: Provide connection information to the developer early in the process and have them test their access as they develop solutions. If you can validate their access yourself by emulating the developer, we highly recommend doing that so that you know your connection information works.

SUMMARY

Customizations are great but the process can be challenging.  As you use these Six Tips to Save Time and Money When Customizing Your Epicor Application, you will simplify the process for your organization and save time in getting the solutions you need. Plus, you will feel less aggravation in the process!

Please feel free to share this information in your organization and let us know if you have any other suggestions as well!

Are you ready to begin a conversation about your Epicor application?

We have Epicor Kinetic / E11 / E10 & Epicor Prophet 21 experts on standby to answer your questions about every aspect of the application – from the software vendor through to the server!

Epicor Kinetic Upgrade: A Customer Perspective

Epicor Kinetic Upgrade: A Customer Perspective

An Interview with an Epicor Kinetic User

I recently had the opportunity to sit down with an Epicor customer to discuss their recent upgrade to Epicor Kinetic 2021.1. For many Epicor customers, this is a decision they will be facing in the next 12 months since the Epicor lifecycle for 10.2.700 will create a decision point in September 2022.

During the discussion, we covered a lot of questions that are commonly asked. My hope is that what you learn here will be an input to your thought process about when and how to upgrade to Epicor Kinetic.
Epicor Kinetic Upgrade

Conservation of Manufacturing Energy

Epicor History

This customer has been using Epicor for almost 8 years after they went live on version 10x. After the implementation they fell into the habit of not upgrading on a cadence. They regretted this because it made upgrades more challenging. Plus maintaining an Epicor upgrade cadence would have benefited them with better Epicor support, fixes, and new features. In their situation they were faced with upgrading to Epicor Kinetic from V10.2.200.

They currently have 35 users and expect to expand to 50 users in the next 12 months. They do light manufacturing and lean more to the distribution side of the spectrum. They also use Electronic Data Interchange (EDI) and a Business Intelligence (BI) solution that interfaces with Epicor.

Upgrade to Kinetic

The upgrade process took them about 90 days of effort. Knowing that future upgrades are released regularly, they invested front-end effort into documenting their business processes, end-user procedures and customizations. They also developed standard test plans that they can reuse in the future when they need to do upgrades.

They are expecting this investment to pay off as they move to 2021.2 later this Fall. During the upgrade preparation they took some time to clean up reports on the system, review their over 300 dashboards and look for ways to reduce the complexity and number of customizations that had accumulated over the years.
They then did very thorough testing in a Pilot Kinetics environment. The testing used formal test plans with each department supporting the effort. They ran all reports and validated cross-functional capabilities of the new system using a copy of their production 10.x data. As they found issues, they created solutions and documented them.

Reports

They found that many of their reports didn’t fully convert over to the new Kinetics format. So, they reached out to get external SSRS support for conversion of these reports. They were able to resolve any conversion issues with their dashboard reports using internal resources. This typically involved compiling them in the new environment and then saving them in the new Kinetic format.

Menus

They also set up two separate menu structures, one with a Kinetic look and one with the Classic look. This allowed users who were hesitant to use the new Kinetic menus some time to adjust. They estimate that they will transition all users away from the Classic view over a nine-month period.

Epicor Kinetic Upgrade Process

The actual upgrade was done on the 3rd weekend of the month to avoid month-end closing activities. They pre-arranged for necessary on-call support and proceeded with the upgrade. It finished and they applied any solutions they had discovered during testing. Then they tested the overall functionality using some pre-determined tests. No glaring issues were found so they were able to release the environment to users.

They found that the minor kinks that remained took them about 30-45 days to resolve. They were pleased that there were no issues with user permissions after the upgrade or with printing and labels.

Lessons Learned

Here are a few Epicor Kinetic upgrade suggestions from the customer perspective:

  • Make sure you have the necessary licenses for your Pilot environment,
  • Don’t forget the testing of integrations that access or share data with Epicor,
  • Make sure that department heads sign off on the test plans, so they understand any gaps/concerns, and
  • Consider using the developed Test Plans to next create new End User Documentation.

In the end, they felt like the Epicor Kinetic upgrade was more of a UI and programming change than a lot of new features for their users.

One More Thing

In retrospect they had one other recommendation that I found valuable.

Since the new Kinetics Users Interface (UI) allows all Forms to be displayed in any popular browser, there is an important decision to make. The decision is whether to allow Users to access Epicor from personal devices (tablets, home computers, phones). Most companies will have security concerns that will affect this decision. In their case, they decided to not allow users to use personal devices for accessing the Epicor application.

Overall, this customer was pleased with the upgraded UI. They found that the new UI is cleaner and more modern. Plus, the users like the ability to sort, and rearrange columns on the screen. In version 2021.1 some of the features they needed still required them to use the Classic interface, but the new release 2021.2 seems to have resolved these problems.

For now, the largest issue has been helping users make the transition to the new User Interface. Some users felt it was a steep learning curve for them and others didn’t. It confirmed for them that users rarely like change particularly in the screens they use each day. That’s why it is important to give them time to experiment and view the new interface well before any upgrade.

The I.T. department didn’t see any speed issues with processing under the new release. And they are looking forward to not having to install/upgrade clients on user laptops/desktops as they fully use the new Kinetics interface.

I hope this quick look at one client’s experience will provide some background for your decision-making and spur some questions that your organization needs to explore. If you have any other questions, feel free to reach out to us.

Ask the Author about your Kinetic ERP Project

Rob Mcmillen ERP Consultant

Rob McMillen is a Senior Project Manager with EstesGroup. He has worked in the manufacturing industry for over 30 years supporting multiple implementations of new ERP systems and leading projects. Because his mom was an English teacher, he grew up with a love of writing. Combined with his working experience, he has written articles for LinkedIn and User Groups, and has published numerous blog posts. He is also a co-author of a book on technology and working collaboratively. He currently lives in the DFW area. Ask Rob a question now by clicking here to visit our “Ask An Expert” page.

Do you need help with keeping your ERP project kinetic?

For 18 years, EstesGroup has helped manufacturers and distributors implement, optimize, and support their ERP systems. With veteran consultants highly skilled in both the old Epicor ERP versions and in the latest version, our upgrade service is all-inclusive. Our Cloud ERP experts can help you understand everything from data migration to upgrade tools. We support companies on every version of Epicor, so whether you want to maintain your old system or upgrade to the latest release, you’ll find everything you need to make your application studio shine.

Kinetic Epicor ERP Project

Are software upgrades or technology upgrades in your future? Our IT experts are here to help with your business. Are you wondering how to upgrade to Epicor Kinetic? Rather than focusing on your Epicor software, or other ERP system, focus on the work you love. Let our Epicor Kinetic experts do the busy work, the maintenance, and the specialized tasks while you focus on manufacturing. Put your data in a private cloud hosted environment for ultimate backup & disaster recovery and cybersecurity.

5 Signs Your Business Needs Cybersecurity Training

5 Signs Your Business Needs Cybersecurity Training

Cybersecurity Education Begins With Ownership

Small and medium sized business owners beware! 65% of attacks that originate in cyberspace are aimed at companies that think they’re too small to be of interest to cybercriminals. If you think you’re at low risk, read on and see why our IT security consultants recommend cybersecurity training for everyone.

Cybersecurity Training Hacker in Network Security Lock

Are you a small business owner? Or are you a once-small company now grown into the medium range of corporate presence? When it comes to cybersecurity solutions for businesses, you always have to structure your services and behavior to prepare as if you’re bigger than you are. This involves a comprehensive security solution that covers your entire company network, from suppliers to employees. Do you have an enterprise-level cybersecurity strategy that protects every connection and end user from digital harm?

If you own a business, you know how precious your data is to daily operations. Profitability depends on good data management behaviors. Because all companies are vulnerable to hackers, your data should be presumed insecure. Cybersecurity should be a proactive approach to cybercrime, rather than a reactive (disaster recovery) move.

Are you on a cybercrime watchlist?

Breaches happen, even to the most prepared companies. Therefore, your risk management policies should be revisited frequently. Business owners should be part of this process. A board of advisors might be beneficial, and it can be cost-effective to outsource this high-level cybersecurity work to a virtual CIO or to a firm with the technology skills that guarantee security for your data.

What happens when a hacker is watching your business?

It takes about a half of a year for business owners to become aware that a hacker has breached the network. It also takes about two months to react to a cyber attack.

Here are five signs your business is at risk and in need of cybersecurity training:

1. You are a small or medium size business.

Far less likely to report cybercrime to the authorities, small and midsized companies are viewed by hackers as a low-risk target. Manufacturers and distributors are often looking to scale, and maintaining a good reputation is key to a successful future. As a growing business, you wouldn’t want your reputation to include a history of victimization by way of ransomware.

2. You think it’s a small problem or that someone else is addressing the issue of cyber safety.

Fear of expense often prevents small and midsize manufacturers and distributors from securing the technology solutions and services they need to protect their data. A good backup solution isn’t enough, even though this is what many company owners depend on for risk management. When planning your IT department budget, price out outsourced help, especially when it comes to cybersecurity. Often, the experts at an IT managed services provider (MSP) will be more friendly to the budget than on-site technology staff.

3. You think you need to cut the IT budget… but IT costs are actually decreasing.

Firewalls and phishing filters are a necessity these days. Due to a mix of popularity and availability, technology cost trends show that business owners can get enterprise-level technology services with affordable pricing. Cloud-based IT services, such as SECaaS (Security as a Service) look at the unique needs of your business and adjust pricing accordingly. Only pay for what you need.

4. Your employees don’t know what they don’t know.

Cybersecurity training might be the most important activity you schedule for the end of 2021 or the beginning of 2022. The time is now. Hackers take advantage of poorly trained employees on a daily basis. 95% of security breaches are successful because of human error. Train, train, and train again. Technology is an ever-evolving field, and this ripples into the dark web as cutting-edge malware. Protecting your talented staff from the dark web is key to employee retention in today’s culture.

Fortunately, cyber education is often free online. Formal training is easy on the budget. If you have a million customers relying on your manufacturing operations to maintain uptime, your cyber security plan needs to defend more than credit card numbers and social security numbers. You need an IT solution that comprehensively protects the countless connections along your supply chain, right down to the home offices of your remote workers. 

Sign up for a ransomware simulation attack today to see if your employees are ready for disaster. Employees are eager to learn security breach mitigation strategies because their personal information is at risk in the event of a data leak. Information security begins with security training.

5. You’re likely to pay the ransom if you are attacked.

More than half of small businesses pay a ransom. Reasons revolve around damage control: you definitely don’t want your data or your reputation harmed by a ransomware attack, so in the moment you are likely to pay the attacker. If you think you’d be likely to pay a ransomer to get your data back, then you stand unprepared. Once you have a solid cybersecurity plan in place with a crew of talented IT staff to support your solutions, you’ll know that you’ll never pay a hacker a dime of your earnings. In the event that you experience a breach, you’ll know that you have an incident response plan that won’t involve a ransom payment.

Today’s cyber landscape is riddled with massive corporations hitting the news for million-dollar ransomware attacks. When was your last security audit? It’s better to act as a big little company in a technology culture in which the hackers are frequently more skilled than even the best IT staff.

  • Empower your workers with the best solutions so that they can use their talents to their full extent.
  • Prevent identity theft of employees by securing personal data and corporate data.
  • Bring in a white hat hacker to test both onsite and remote cybersecurity solutions and services.

Can your staff respond properly to a data breach? Do you have an incident response plan clearly delineated so that all employees understand your disaster recovery process? Have employees been thoroughly trained to recognize cyber threats lurking in their email accounts as phishing attempts?

Cybersecurity training involves both on-premise and cloud-based breach mitigation techniques. EstesGroup offers coast-to-coast onsite and cloud IT services, including everything from project and budget planning to education and monitoring.