Tech Republic

How To Use SCP (Secure Copy) With SSH Key Authentication

Anyone who administers Linux machines likely knows secure shell. Without this tool, administering those servers remotely would be quite challenging. It would also become harder to move files back and forth, at least with a modicum of security. That’s where secure copy comes into play. With the SCP command, you can copy files to and from a remote Linux server through an encrypted SSH tunnel. SEE: How to View Your SSH Keys in Linux, macOS, and Windows However, with the help of SSH key authentication, you can make that even more secure. I want to show you how you can use secure key authentication and SCP so you can rest assured your files are being moved back and forth securely. I will demonstrate on an Elementary OS client and Ubuntu 16.04.1 server and assume you have a secure shell installed and working. 1 New Relic Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Analytics / Reports, API, Compliance Management, and more 2 Rippling IT Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Activity Monitoring, Automated Provisioning, Configuration Management, and more 3 Zoho Assist Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Analytics / Reports, API, Document Management / Sharing, and more SSH keys The first thing that must be done is to create an SSH key pair. To do this, open up a terminal window and issue the command: ssh-keygen -t rsa You will be asked to name the file (use the default) and give the keypair a passphrase. Once the key’s randomart prints, your key is ready to go. The next step is to copy the key to the remote server. This is done with the command: ssh-copy-id USER@SERVER Where USER is the username of the remote server, and SERVER is the address of the remote server. You will be prompted for the remote user password. Once you successfully authenticate, the public key will be copied to the server. You’re ready to go. SEE: Securing Linux policy (Tech Pro Research) Using SCP with your key Now that our keys are in all the right places, let’s see how we can use them through SCP. Assuming you accepted the default name for your SSH key upon creation, the command to send a file to your remote server using your SSH key is: scp -i ~/.ssh/id_rsa.pub FILENAME USER@SERVER:/home/USER/FILENAME Where FILENAME is the name of the file, USER is the username on the remote machine, and SERVER is the address of the remote server. You should be prompted for the SSH key password (not the user password). Once authenticated, the file will be transferred. The same holds true if you need to pull a file from the remote server. The structure of that command would be: scp -i ~/.ssh/id_rsa.pub USER@SERVER:/home/USER/FILENAME /home/USER/FILENAME Again, you will be asked for your SSH key password, and the file will be pulled from the server and copied to the local machine. SEE: How to Add an SSH Fingerprint to Your known_hosts File in Linux Forget that password Let’s say you are about to undergo a long session of copying files to your server. Sure, you could tar them all up into one bigger file. But say they need to all be placed in different directories. That’s a lot of typing. You can make this slightly more efficient by using the ssh-agent and ssh-add commands. That’s right, using the combination of SCP, SSH key authentication, and ssh-agent works well. This will keep you from having to type that SSH key password every time you issue the SCP command. The one caveat is that you must remember the PID of the agent session and kill it when you’re done. Here’s what you have to do. Before issuing the SCP command issue eval ssh-agent to start the session. Make a note of the Process ID you are given when the session starts. Add your SSH key to the session with the command ssh-add. Start using SCP to copy your files. That’s all there is to it. When you’re done with the session, ensure to issue the command kill PID (where PID is the actual number given to you when you started the ssh-agent session with eval). SEE: 20 quick tips to make Linux networking easier (free PDF) (TechRepublic) Is SCP still secure? Someone asking if SCP is secure has likely read the 2019 release announcement for OpenSSH 8.0, which stated that the SCP protocol is “outdated, inflexible and not readily fixed” and recommended SFTP and Rsync as alternatives for file transfer. Before OpenSSH 8.0, SCP could not verify file integrity during transfers, leaving users exposed to unauthorized overwrites and injection attacks if their server was compromised (CVE-2019-611). However, the update introduced stricter filename checking as the default for the SCP command, making it more secure, and moved its previous non-checking behavior to the command scp -T. Then, in OpenSSH 9.0, released in 2022, SFTP was adopted as the default backend for SCP instead of the legacy SCP/RCP protocol, meaning that transfers are now encrypted and authenticated with the SSH protocol. While widely regarded as secure, users should still be wary of other risks like misconfigured servers or outdated software versions. What can I use instead of SCP? SFTP: While SCP defaults to using the SFTP protocol, you can consider using native SFTP clients for advanced file management as it allows for more operations, such as viewing directories and file deletion. Rsync: Ideal for synchronizing files and directories, especially for incremental backups and large datasets. See TechRepublic’s guide on how to back up a network using Rsync. FTPS: A secure option for traditional FTP transfers with SSL/TLS encryption, but it can be complex to configure. HTTPS-based tools: Such as curl or wget, for secure downloads over HTTPS. This is great for

How To Use SCP (Secure Copy) With SSH Key Authentication Read More »

What Is Patch Tuesday? Microsoft's Monthly Update Explained

On the second Tuesday of each month, Microsoft and other tech companies release patches for consumer and enterprise users. These updates, including bug fixes and security enhancements from the previous month, are known as “Patch Tuesday.” The monthly update is an important opportunity to ensure that security features and applications are up to date. Microsoft details the official Patch Tuesday release in their Security Update Guide. Below, TechRepublic explores its purpose, how it works, and how you can prepare for it. What is the purpose of Patch Tuesday? Patch Tuesday is designed to collect and release many enterprise software updates simultaneously. While some updates are urgent enough to require immediate attention throughout the month, non-urgent or quality-of-life fixes are consolidated for release on Patch Tuesday. “Whether you’re an IT administrator or a general user, Windows monthly updates provide you with the security fixes to help keep your devices protected—as well as enhancements based on your feedback,” wrote Microsoft Senior Director of Communications Chris Morrissey in a 2023 blog post. Patch Tuesday is technically known as Microsoft’s “B” release,” as opposed to “C” and “D” releases, which occur during the third and fourth weeks of the month. Other companies, including Adobe, have followed Microsoft’s lead in rolling out mass patches on the second Tuesday of each month. What to know How does Patch Tuesday work? Administrators and users can access these updates through various tools, including: Windows Update Windows Update for Business Microsoft Intune Microsoft Configuration Manager Windows Server Update Services (WSUS) The Microsoft Update Catalog Before rolling out patches across an organization, administrators should test them in an isolated environment and a small test group. Additionally, administrators should have a rollback plan in place if issues arise. SEE: Microsoft power users may want to watch for monthly PowerToys updates.  Since exploits from the previous month are detailed on Patch Tuesday, the following day often sees a spike in copycat attacks targeting unpatched systems. Organizations should prioritize applying critical security updates to mitigate this risk. As of the February 2023 commercial control update, administrators have some control over which patches to immediately apply. This allows for flexibility in managing updates that introduce new capabilities, remove existing ones, or significantly alter user-facing features, such as the start menu. Microsoft Copilot resources from TechRepublic What is the difference between Patch Tuesday and out-of-band updates? Along with the letter naming system for releases, you might hear the term “out-of-band release” when it comes to patches. Out-of-band releases are not sent out on a schedule like the planned monthly patches. Instead, atypical updates may be sent out at any time to address an ongoing security or quality issue. How can I prepare for Patch Tuesday updates? Admins should have a process for applying Patch Tuesday updates, but these processes will differ based on the organization’s size and needs. Some patches should be applied right away — especially with security fixes for backdoors that are being actively exploited. Admins might want to wait to deploy non-critical patches in case Microsoft issues any revisions. source

What Is Patch Tuesday? Microsoft's Monthly Update Explained Read More »

How to Find a Good Wake Up Call Service +5 Alternatives

We’ve all been there: snoozing our alarm to catch a few extra minutes of rest, only to fall back asleep by accident. Wake-up call services offer a more reliable solution, providing a nudge to ensure we start our day on time. Depending on the service, you may have to answer the phone, solve a puzzle, or talk to a human to make sure you get up. Phone alarms are great — but not for everyone. A wake-up call service is ideal for people who struggle to get out the door on time. I’ll guide you through everything you need to know about wake-up call services while offering a few viable alternatives along the way. Should you pay for a wake-up call service? Is it worth paying for a wake-up call service with free services and other options available? It all comes down to your specific lifestyle, feature needs, and how much you are willing to spend. Of course, you can set alarms for free on your cell phone or set alerts in a free digital planner — but you already know that — paid wake-up call services exist because they go the extra mile for their customers, providing a solution that works where the free apps fail. Let’s break down each option to help you make the most informed decision. Free wake-up call services A free wake-up call service will offer very limited features but will usually be able to dispatch a call to you for free. These differ from trial offers, which may provide free calls, but only for a limited time. A free option is best for someone who responds well to their phone’s ring and doesn’t need additional features to help them wake up. It’s also a good choice for those dabbling into wake-up call services for the first time to get a sense of how they work. The biggest limitation when it comes to free wake-up call services is the lack of customization, such as choosing the voice or content of your wake-up call. Many free services also limit the number of wake-up calls you can schedule, which can be a challenge if you set up several calls daily. When using a free option, you can expect: Single, scheduled wake-up call. Limited to no customization (e.g., standard ringtone). Basic reliability (lack of customer support). Paid wake-up call services For a suite of features extending beyond a simple wake-up call, paid services are a good option. They could include features such as: Customizable voice messages. The ability to schedule multiple calls if you don’t answer the first time. Smart home device integration. Gamification and challenges to keep you motivated. Crystal clear, reliable calls. The average monthly price for paid wake-up call services can range from $5 to $15. Additional features may include customizable messages, integration with smart devices, scheduling multiple calls, and options for motivational or informative content to wake up to. Paid wake-up call services offer customization and convenience, enhancing user experience with various features. They may offer even more features, like syncing with your personal calendar software, to ensure timely wake-up calls for meetings or events. They may also provide morning updates on weather and news, keeping users informed from the start of their day. A paid service tends to provide better customer support as well. This is ideal for those who want help learning how to use the program and its features by chatting with the team. Overall recommendation: paid vs free wake-up call services If you’re actively researching wake-up call services, it’s safe to say that you’re probably a deep sleeper who could use additional support for waking up. If you truly do fall into this category, a paid service may be the best choice. A paid service will make sure you actually get up and will help you customize a routine that works with helpful options such as callback features and inspirational wake-up messages. This can save you countless hours lost to snoozing past the alarm, which can mean these services pay for themselves given their modest monthly investment. If you’re still unsure, here are a few tips for deciding which way to go: Free services: Best for individuals who simply need a call to wake up and do not depend heavily on waking up at a precise time every day. It’s a no-frills approach that works for those who are generally good at waking up with some assistance. Paid services: These are ideal for those who have difficulty waking up, need to wake up at a critical time, or appreciate starting their day with a unique or motivational touch. They are also beneficial for individuals who enjoy tech integration into their daily routine. There are a few types of people who can benefit from these services, including: Those who regularly travel and need to adjust to different time zones. People working irregular work shifts. Anyone who needs to wake up at a specific time for a medication or appointment. Heavy sleepers who need a little extra help getting out of bed. Individuals who live alone and can’t rely on others for wake-up support. Remember that you can dabble in both free and paid options to get a feel for which one is best for you. Many paid options offer a trial, allowing you to test premium features for free before committing. What’s a good free wake-up call service? For a totally free wake-up call option, WakeupDialer.com is our top recommendation. This service stands out by offering simplicity and reliability without any hidden fees. Here are the key features of WakeupDialer.com: No account is required: You can immediately set up your wake-up call, avoiding the hassle of setting up a new account with the company. Ease of scheduling: Setting up your wake-up call is as simple as entering your phone number, selecting your wake-up time, and clicking a button directly on the home page. The process takes less than a minute and the homepage is clear and easy to navigate. Stephen

How to Find a Good Wake Up Call Service +5 Alternatives Read More »

VyprVPN Review: Can It Still Perform This Year and Beyond?

VyprVPN’s fast facts Our rating: 4.5 out of 5 (if applicable)Starting price: $3 per month for a 24 month planKey features: Strong AES-256 bit encryption No-log policy and no third parties Public Wi-Fi protection I rely on the internet for many different aspects of my life. As both a professional freelance writer conducting most of my business on the web, and a chronically online individual with an undying affinity for memes, my internet activity is disparate, diverse, and can be dangerous if it ends up in the wrong hands. Image: VyprVPN VyprVPN is one of many virtual private network solutions that promise to safeguard users’ online activity. With robust features like a Master Firewall to block unrequested inbound traffic and top-of-the-line encryption methods to disguise IP addresses, the product stands out as an effective and affordable option. This VPN has been in the game since Golden Frog established it under Swiss jurisdiction in 2009. It has since maintained its no-logs policy even through its ownership transition to U.S.-based Certida. For over 15 years, internet users have trusted VyprVPN to safeguard their online traffic from the government, internet service providers, and any other malicious actors looking to sneak a peek. Today, VyprVPN remains a reliable tool for protecting users’ online activity and securing their internet data — whether it be silly or sensitive. No matter what your online scrolling sessions consist of, your data privacy is important. Read on as I analyze VyprVPN’s features, protocols, and performance and see how it stands against the competition. 1 Semperis Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Large (1,000-4,999 Employees), Enterprise (5,000+ Employees) Large, Enterprise Features Advanced Attacks Detection, Advanced Automation, Anywhere Recovery, and more 2 ESET PROTECT Advanced Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Advanced Threat Defense, Full Disk Encryption , Modern Endpoint Protection, and more 3 NordLayer Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Small (50-249 Employees), Medium (250-999 Employees), Large (1,000-4,999 Employees), Enterprise (5,000+ Employees) Small, Medium, Large, Enterprise VyprVPN’s pricing VyprVPN offers its VPN services for personal use through three subscription options, each with a 30-day money-back guarantee. The plans all include the same perks and are differentiated only by the length of their subscription, with contract options for 24 months, 12 months, and one month. Take a look below for details about the prices of each plan. Plan duration Price per month Price per billing period 24 Months $3.00 $72.00 12 Months $5.00 $60.00 1 Month $10.00 $10.00 VyprVPN also offers one-year contract plans specifically for business use. These plans, VyprVPN for Business Cloud and VyprVPN for Business, each include multiple user management features and protection for three users. Plans can be expanded for $99 per additional user. SEE: Everything You Need to Know about the Malvertising Cybersecurity Threat (TechRepublic Premium) VyprVPN for Business Cloud costs $349 per year for three users. Its standout features include a dedicated private server for the organization and fast, straightforward deployment. VyprVPN for Business costs $299 per year for three users. Its standout features include a dedicated account manager and access to global business servers. Does VyprVPN offer a free trial? Unlike many competitors, ViperVPN does not offer a seven-day free trial, at least not in the traditional sense. Its official website explains that the 30-day money-back guarantee is provided in lieu of a trial. It states, “If you cancel your subscription within thirty (30) days of your first payment, you may request a full refund with no questions asked. That’s the VyprVPN free trial  — VPN at its best, or your money back.” SEE: The 5 Best VPNs with Free Trials in 2024 (TechRepublic) Here’s where I get a bit nitpicky about the parallel the company made between their offer and a free trial. While VyprVPN’s money-back guarantee does technically allow new users to try the service “for free” if they request a refund before the 30-day mark, customers who keep their plan still have to foot the bill for their first 30 days of use. Moreover, the hassle of requesting a refund over simply canceling your trial is another factor that makes me less keen on the offer. VyprVPN users must contact the company’s Support Team via email or live chat to request a refund. While some other VPN companies also favor the 30-day money-back guarantee incentive, many of them provide a week-long trial period, often for mobile users. For instance, NordVPN offers a 30-day money-back guarantee and a seven-day free trial for Android users, and ExpressVPN offers the same guarantee with a seven-day free trial for Android and iOS. Upon further digging, I discovered that VyprVPN provides a free trial of its VPN, but only for users who sign up through the Apple Store or Google Play Store, and it only lasts for three days. VyprVPN provides a three-day free trial of its VPN through the Apple Store. Image: Madeline Clarke Still, VyprVPN is a relatively affordable provider, with its prices falling in the middle of the spectrum. Compared to other popular providers, Express VPN’s starting price is even higher at $6.67 per month, and NordVPN is priced similarly at $4.99 per month for its annual plan. But if you’re looking for a less expensive alternative, you may want to check out SurfsharkVPN’s annual plan for $3.69 per month or Private Internet Access VPN’s annual plan for just $3.33 per month. VyprVPN’s key features VyprVPN protects users’ sensitive data and internet activity with various valuable features. Check out some of their most notable ones below. No-log VPN protection As a publicly audited no-log VPN service, VyprVPN doesn’t store its users’ traffic logs or personally identifiable information. VyprVPN is registered in Switzerland, which does not require companies to collect, log, or provide user data. Therefore, it is one of the many providers that can go the extra mile to protect user

VyprVPN Review: Can It Still Perform This Year and Beyond? Read More »

12 Best Project Management Software For Mac

Best overall Mac project management software: ClickUp Best for data-driven project tracking and reporting: Smartsheet Best for startups and small businesses: monday.com Best for scalability: Asana Best for team collaboration: Wrike Best for development teams: Jira Best free project management software: Trello Best for client-facing users: Teamwork Best for project management analytics: Hive Best for remote teams: Basecamp Best for cost-effectiveness: Zoho Projects Best for complex project planning: Merlin Project Mac computers are the standard for some industries, and many professionals prefer using them for work—even when it’s not required. When project management software is optimized for macOS, workflows are smoother, and projects are more likely to stay on track. Based on my own testing and research, I’ve put together this list of the best project management software for Mac users that highlights features, use cases, and pros and cons. You’ll also find information about my methodology for evaluating the software and tips on choosing the best project management software for Mac. 1 monday.com Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Agile Development, Analytics / Reports, API, and more 2 ClickUp Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Agile Development, Budget / Expense Tracking, Document Management / Sharing, and more 3 Quickbase Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Small (50-249 Employees), Medium (250-999 Employees), Large (1,000-4,999 Employees), Enterprise (5,000+ Employees) Small, Medium, Large, Enterprise Features Agile Development, Analytics / Reports, API, and more Top project management software for Mac comparison Software Gantt charts Mobile app Free version Our star rating (out of 5) Starting price (per month) ClickUp Yes iPad (iPadOS 12+), iPhone (iOS 12+), Apple Watch (watchOS 7.5+) Yes 5 $7 per user Smartsheet Yes iPad (iPadOS 15+), iPhone (iOS 15+) Yes 3.8 $9 per user monday.com Yes iPad (iPadOS 15+), iPhone (iOS 15+) Yes 5 $12 per user Asana Yes iPad, iPhone (iOS 16+) Yes 3.9 $10.99 per user Wrike Yes iPad (iPadOS 16+), iPhone (iOS 16+) Yes 4.6 $9.80 per user Jira No iPad (iPadOS 16+), iPhone (iOS 16+) Yes 4.6 $8.15 per user Trello Available through add-on iPad (iPadOS 16+), iPhone (iOS 16+) Yes 4.5 $5 per user Teamwork Yes iPad (iPadOS 15+), iPhone (iOS 15+) Yes 3.7 $5.99 per user Hive Yes iPad (iPadOS 12.4+), iPhone (iOS 12.4+), Apple Watch (watchOS 4+) Yes 3.9 $12 per user Basecamp No iPad (iPadOS 14.5+), iPhone (iOS 14.5+) Only for teachers and students 3.1 $15 per user Zoho Projects Yes iPad (iPadOS 12+), iPhone (iOS 12+) Yes 4.2 $4 per user Merlin Project Yes iPad (iPadOS 15+), iPhone (iOS 15+) No _ $16.99 per month ClickUp: Best overall Mac project management software Image: ClickUp ClickUp is my pick for the best Mac project management software because it balances user-friendliness and functionality. It offers an all-in-one project management solution that includes file sharing, status alerts, task management, and additional functions to support you from project initiation to completion. It is also highly customizable and offers several automation tools for repetitive tasks. In terms of mobile, ClickUp’s app is available in the App Store for iPhone, iPad, and even Apple Watch and iPod touch, making project management accessible across Apple devices. It’s also more compatible than most other tools on this list, supporting devices as far back as iPadOS 12.0 for the iPad, iOS 12.0 for the iPhone and iPod touch, and watchOS 7.5 or later for the Apple Watch. Pricing Free plan: No cost. Unlimited: $7 per person per month, billed annually, or $10 per person per month, billed monthly. Business: $12 per person per month, billed annually, or $19 per person per month, billed monthly. Enterprise: Custom pricing. Standout features Native time tracking: Users can track time, add notes, set estimates, view reports, and filter timesheets using the native time tracking tools. Dashboards: ClickUp offers multiple views, including customized dashboards, charts and a selection of over 50 widgets. Figure A: Some of ClickUp’s multiple views listed. Image: ClickUp Pros and cons Pros Cons 24/7 live support. User reports indicate bugs and glitches. Multiple views. Learning curve to navigate interface. Highly customizable. Features can feel overwhelming to project management software newbies. Top integrations Gmail Zoom Harvest Zendesk Why I picked ClickUp With its affordable pricing, multiple project views, and comprehensive set of features, ClickUp was an easy pick for me. Most of its project views are available on its free plan, including Gantt. Since some of these views are typically available only in premium pricing tiers for other tools, it reiterates why ClickUp was worth my consideration. When to use something else If you prefer a more focused and less feature-dense environment, you may want to consider Basecamp as an alternative. ClickUp has lots of features and customization options that are undeniably powerful but can sometimes introduce a steep learning curve or potentially overwhelm teams that just need simple project management tools. For more information, read the full ClickUp review. Smartsheet: Best for data-driven project tracking and reporting Image: Smartsheet Smartsheet is worth considering for data-driven insights that optimize workflows and decision-making processes. Smartsheet offers a variety of reporting features, including row reports, sheet summary reports, and customizable dashboards. Project managers can use these features to aggregate data from multiple projects to monitor key metrics such as budget, timelines, task completion, and resource allocation in real-time. Smartsheet’s top features include extensive customization options, project visualization tools like Gantt software capabilities, resource management, and workflow automation. Smartsheet is available for iPhone and iPad but it needs iOS 15.0 or later and iPadOS 15.0 or later. Pricing Free: No cost for up to one user and two editors. Pro: $9 per user per month billed annually, or $12 per user billed monthly. Business: $19 per user per month billed annually, or $24 per user billed monthly. Enterprise: Customized pricing. Standout features Spreadsheet interface: Smartsheet

12 Best Project Management Software For Mac Read More »

21 IVR Scripts You Can Steal (And How to Use Them)

Interactive Voice Response (IVR) systems are often the first point of contact between a business and its customers. A well-crafted IVR script sets the tone for the interaction, helping callers navigate quickly and efficiently to the support they need. Clear, intuitive scripts not only save time for both customers and agents but also reduce frustration, leaving a positive impression of your brand. Conversely, a poorly designed IVR can feel like a maze, driving callers to hang up or escalate their frustration to your agents. This can harm your reputation and increase operational costs. Below, I’ve curated 21 IVR script examples that you can adapt to your needs. After the list, I’ve included a brief tip section to help you develop scripts with the best chance of delivering an excellent customer experience. 1 RingCentral RingEx Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Medium (250-999 Employees), Large (1,000-4,999 Employees), Enterprise (5,000+ Employees) Medium, Large, Enterprise Features Hosted PBX, Managed PBX, Remote User Ability, and more 2 Talkroute Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Call Management/Monitoring, Call Routing, Mobile Capabilities, and more How to use this list of IVR scripts My goal is to offer you script examples for your entire IVR call flow, so I have broken down the process into seven common interactions where an IVR script is typically required: Greeting scripts. Menu options scripts. On-hold scripts. After-hours scripts. Maximum wait time scripts. IVR payment scripts. IVR survey scripts. For each of these types of IVR scripts, I have offered three variations. My hope is that you will be able to find one that aligns with your business needs. Along the way, I’ve included guidance and links to relevant content. Improving scripts will help you maximize containment rate for IVR call flows by ensuring customers get clear information and take full advantage of self-service options. 21 ready-to-use scripts and examples Greeting IVR scripts It’s critical to provide a straightforward greeting that lets callers know they have the correct number and what to expect moving forward. Even if you have never done it before, it’s not hard to create an IVR recording that sounds professional, on-brand, and contributes to a positive first impression. 1. General greeting Welcome to [Your Business Name]! We’re happy to help. Please choose from the following options, or press 0 to speak with a customer support specialist. 2. Promotional greeting Welcome to [Your Business Name], where [insert your tagline here]. Press 1 to learn more about [the promotion currently being offered] or choose from the following options. 3. Customer service greeting We’re sorry you’re experiencing difficulties with our product. Our team is here to make it right. Please choose from the following options, or press 0 at any time to speak with a representative. Scripts for different menu options With menu scripts, the rule of thumb is to say the option first, followed by the number selection. This is a simple way to make it easier for callers to navigate IVR phone trees — they hear the word they are looking for and then the correct number to press. 4. General menu script Welcome to [Your Business Name]. For information about our products and services, press 1. For billing and payment inquiries, press 2. For technical support, press 3. To speak with a member of our sales team, press 4. For business hours and location information, press 5. To speak with a representative, press 0. To hear these menu options again, press #. 5. Promotion menu script Welcome to [Your Business Name]! We’re excited to offer [promotion] throughout the month of [month]. To take advantage of this promotion, press 1. To learn about new products, press 2. To inquire about discounts and offers, press 3. For assistance with placing an order, press 4. To speak with a sales representative, press 0. To hear these menu options again, press #. 6. Customer feedback menu script Thank you for calling [Your Business Name]. We value your business and appreciate your feedback. To participate in a customer satisfaction survey, press 1. To provide feedback on your recent experience, press 2. To leave a testimonial, press 3. For general inquiries, press 4. To speak with a customer feedback representative, press 5. To hear these menu options again, press #. Scripts for callers on hold Dealing with high call queuing times is hard on call center staff, but it’s also annoying for customers who are waiting to speak to an agent. Providing respectful messaging to customers on hold is crucial. Tip: consider implementing a queue callback option and adding it to your on-hold IVR scripts. This lets callers hang up and receive a callback once an agent is available, which is a win-win. Callers can get off hold and agents have the flexibility to deal with inquiries at a more manageable rate. 7. General on-hold script Thank you for choosing [Your Business Name]. Your call is important to us, we look forward to being able to assist you shortly. Please stay on the line to speak to a representative. You can also say, “Call me back” to schedule a call back from our next available agent. You will not lose your place in line. 8. Estimated wait time script At [Your Business Name], we understand your time is valuable. The current estimated wait time is approximately [X] minutes. We appreciate your patience. In the meantime, consider asking our system for help with simple inquiries. You can say things like, “Make an appointment,” “Check my balance,” or “What are your opening hours?” 9. On-hold promo script Thank you for holding. To show our appreciation, we’re offering you [details about the promotion]. Press 1 to claim this offer, or mention it to our customer service representative after connecting. We’ll be with you shortly. After-hours IVR scripts Unless you have agents available to answer calls 24/7, you’ll want to have an after hours

21 IVR Scripts You Can Steal (And How to Use Them) Read More »

Guide to UK's Digital Markets, Competition and Consumers Act

The Digital Markets, Competition and Consumers Act is designed to regulate the behaviour of major digital firms with significant market power in the U.K. The legislation grants the Competition and Markets Authority new powers to impose requirements on tech companies with “Strategic Market Status,” reminiscent of the “gatekeeper” organisations that must abide by the E.U.’s Digital Markets Act. However, while these laws share similarities, the new legislation is less one-size-fits-all: Under the DMCCA, the CMA can apply bespoke regulations, so-called “Conduct Requirements,” to companies with SMS to address their specific issues. Issues might relate to: The DMCCA was created in response to a report published in 2019 by the Digital Competition Expert panel, chaired by Jason Furman an economic policy professor at Harvard University and former chief economist to U.S. President Barack Obama. It contained recommendations to open up digital markets in the U.K. While the DMCCA was greenlit in 2020, due to various delays, it was only passed by Parliament in April 2023 and given Royal assent in May 2024. It is expected to come into force in January 2025. SEE: Google Abusing Dominant Position in Ad Tech Sector, Says U.K. Government What is the aim of the Act? The DMCCA aims to improve competitive conditions in digital markets by enabling interventions that encourage investment, innovation, and growth in all U.K. tech companies, ultimately providing consumers with access to the best possible technologies for them. The CMA stated in a press release that the legislation will enable it to investigate Google, Apple, and other large tech firms’ potentially anticompetitive practices “more holistically.” The rules “will build on and leverage its experience in areas it has already studied, such as mobile ecosystems, which includes app stores.” In a January 2024 interview, Sarah Cardell, CEO of the CMA, said: “The new regime is specifically designed to keep pace with developments in fast-moving digital markets, complementing our existing competition and consumer protection powers. “The DMCC Bill will establish a very targeted approach to address the substantial and entrenched market power of a small number of firms. This will ensure that challenger firms can bring forward genuinely disruptive and exciting new innovations that will create great new products for consumers.” What’s hot at TechRepublic Who will the Act impact? After a formal investigation, the CMA will designate “a very small number” of firms as having SMS and, therefore will be subject to the DMCCA. These firms must have: A “substantial and entrenched market power in a digital activity that is linked to the UK.” A “position of strategic significance.” A global turnover of more than £25 billion or a U.K. turnover of more than £1 billion. SMS designations will be reviewed a minimum of every five years. According to Cardell, between three and four will be launched in the first year of the new regime. In August, the CMA rejected Google’s proposed policy changes regarding purchases made within apps listed on its Play Store, which had spurred an investigation. This suggested that the company would be one of the first to achieve SMS because, if the CMA accepted the changes, it would be limited in what actions it could take under the DMCCA. What will the Act enable the U.K. government to do? The DMCCA gives new enforcement powers to a new group established inside the CMA called the Digital Markets Unit. It counts existing CMA directors and a former Ofcom exec as members. The DMU will draft a unique set of “conduct requirements” for each company that has SMS. They must abide by these behaviours even before exhibiting anti-competitive practices to prevent them from ever occurring. This approach differs from other competition laws, where remedies are delivered after an investigation uncovers a violation. SEE: Regulator CMA to Scrutinize Microsoft and Other Cloud Service Providers in the UK As well as conduct requirements, the DMU can make “pro-competition interventions” that will actively address a company’s adverse effects on competition that stem from its disproportionate market power. Examples of how the DMU might support healthy competition in digital markets include: Preventing bundling or tying of products or services. Preventing self-preferencing of products or services. Mandating competitor access to data or functionality. Requiring interoperability of products or services. Requiring “choice screens” that allow users to select their preferred default apps or services over the company’s own. Requiring transparency concerning aspects of companies’ algorithms. Requiring fairer trading terms. Furthermore, the DMU will require SMS companies to report any merger valued at least £25 million and a U.K. connection. What are the penalties for non-compliance? Under the DMCCA, the CMA is empowered to impose penalties for failures such as non-compliance with enforcement or final orders. Businesses and individuals may be required to produce testimonies or other documentation to aid the DMU’s work. Cardell said the CMA has legal obligations to maintain confidentiality regarding information and whistleblowers. For fixed penalty amounts, businesses can face fines of up to £30,000 or 1% of their turnover. For penalties calculated at a daily rate incurred by individuals, the maximum is £15,000 or 5% of total turnover per day of non-compliance. SEE: Data (Use and Access) Bill: What Is It and How Does It Impact UK Businesses? Cardell said that the CMA “hope(s) that in many cases we will be able to secure timely and beneficial changes without resorting to formal action,” and instead resolve disputes by engaging directly with SMS firms. What are critics saying about the Act? Despite mostly positive feedback in a government consultation in late 2024, the Act has not been met with universal acclaim. Critics are concerned that, instead of complying with the CMA, tech companies will simply exclude the U.K. from the rollout of new products. Evidence of exclusion has already taken place in Europe. For example, Apple will not be making its new suite of generative AI capabilities, Apple Intelligence, available on devices in the E.U. initially, citing “regulatory uncertainties brought about by the Digital Markets Act,” according to Bloomberg. SEE: Apple Intelligence EU:

Guide to UK's Digital Markets, Competition and Consumers Act Read More »

When to Use Cloud Network Security (And When to Avoid It)

From data storage to business applications and beyond, companies of all sizes rely on the cloud for day-to-day operations and critical business processes. Protecting cloud-based infrastructures with robust security standards is crucial for modern organizations. Cloud network security is a popular approach. But is it right for your business? Read on to find out. 1 RingCentral RingEx Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Medium (250-999 Employees), Large (1,000-4,999 Employees), Enterprise (5,000+ Employees) Medium, Large, Enterprise Features Hosted PBX, Managed PBX, Remote User Ability, and more 2 Talkroute Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Call Management/Monitoring, Call Routing, Mobile Capabilities, and more What is cloud network security? Cloud network security is a broad term that covers all security measures a company uses to protect its private cloud network, public cloud network, or hybrid cloud network. It includes everything from the technology used to internal policies, processes, and controls. It helps businesses defend against data breaches, cyber attacks, unauthorized access, service interruptions, and other threats to their infrastructure. Network security (regardless of how it’s implemented) is just one of the many security layers that businesses use to protect themselves from vulnerabilities. But it’s arguably the most important, as your network is often the first line of defense against attacks. Deploying cloud network security the right way can be the foundation of your company’s entire approach to IT security. SEE: How your business can benefit from a network security policy. How does cloud network security work? Cloud network security uses multiple defense layers between infrastructure components and devices on your network. First, software helps set security policies and pre-defined rules for the network. From there, the software inspects all of the data packets and traffic on the network to enforce those policies. For example, approved users can be granted access to digital assets through an application on the cloud network while unauthorized users are blocked. It can also integrate with other security protocols, such as gateways and firewalls, to provide organization-wide control over the network. With APIs and other integrations, IT security admins can use cloud network security processes to monitor networks in real time, segment networks, and detect threats based on network patterns. Many modern cloud security systems depend on AI and machine learning to help detect and block threats, which is something that might not always work with a rules-based security system. SEE: Check out the best threat protection solutions.  Pros and cons of cloud network security Like any IT security framework or methodology, cloud security has its pros and cons. For most, the positives outweigh the negative. Benefits and advantages Centralized management — Cloud network security gives IT admins a single place to configure and monitor security policies, including the ability to integrate with on-premises solutions. Automated security monitoring — Once configured, cloud security systems automatically protect against threats without straining IT resources. Data protection — Deploying a cloud network security system helps protect data stored in cloud servers and applications on your network (both in transit and at rest). Compliance — You can set up your network security systems to comply with regulatory standards, like GDPR, PCI DSS, HIPAA, and more. Data encryption — While encrypted data doesn’t prevent breaches or attacks, most cloud network security companies include encryption, which makes it more challenging for bad actors to access data if they breach your network. Real-time threat detection and prevention — When working properly, cloud network security systems automatically detect and block threats to your network as they happen. Scalability — Robust cloud security allows organizations to confidently scale processes and applications using cloud resources, knowing that they’ll have reliable access. Policy-based enforcement — System admins have a more granular level of control based on custom policies that scale with your organization. Reduce risk of breaches and attacks — A cloud network security solution can drastically reduce security vulnerabilities while preventing hacks, malware, ransomware, and other malicious incidents. Potential drawbacks and challenges to consider Misconfigurations — It can easily be misconfigured and it’s prone to human error. Speed of change — As cloud resources change alongside access controls of different employees, malicious users can exploit vulnerabilities before your policies are updated. DDoS attacks — Advanced DDoS attacks, which can overwhelm servers and disrupt cloud-based services, could prevent authorized users from accessing your system. Accuracy — At times, cloud systems can yield false positives. This can be dangerous if policies are changed due as a result, opening the door for real threats to slip through the cracks. Cost — Advanced cloud systems are expensive to deploy and maintain at scale, especially those using AI technology to monitor network traffic and detect threats in real time. Insider threats — Someone with privileged access could unknowingly (or intentionally) attack systems from the inside. When it makes sense to use cloud network security for your business Any business that has heavily invested in cloud infrastructure is a good fit. This is especially true if you have a lot of data or run numerous applications in the cloud. It also makes sense for hybrid cloud environments. Because you have a combination of on-premises and cloud infrastructure, a cloud-based security system can help you centralize everything across your network. Another common reason why businesses use it is to comply with industry-specific or location-specific compliance standards. You can set up your cloud network security policies to adhere to security protocols for GDPR in Europe, PCI compliance for payment acceptance, HIPAA compliance in the medical industry, and more. If your organization has remote employees who access your network through an encrypted connection, you can also use cloud security to authenticate them and their devices. When you should avoid cloud network security Cloud network security is a necessity for most, but it’s not for everyone. It may not be enough if you’re dealing with sensitive data that requires the strictest security standards. Organizations working

When to Use Cloud Network Security (And When to Avoid It) Read More »

Top 6 Project Management Trends to Watch in 2025

Fast-paced markets, shrinking budgets, and increasing shareholder scrutiny are just a few of the factors piling pressure onto today’s project managers. Projects are also becoming more complex, thanks to the increasing integration of emerging technologies like AI, heightened regulatory requirements, and the necessity for adaptability in volatile economies. It is imperative that project managers keep an eye on what is around the corner in the industry so they are prepared to take advantage of new processes or avoid pitfalls. TechRepublic spoke to industry experts to find out the top trends to watch in 2025. 1 monday.com Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Agile Development, Analytics / Reports, API, and more 2 ClickUp Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Agile Development, Budget / Expense Tracking, Document Management / Sharing, and more 3 Quickbase Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Small (50-249 Employees), Medium (250-999 Employees), Large (1,000-4,999 Employees), Enterprise (5,000+ Employees) Small, Medium, Large, Enterprise Features Agile Development, Analytics / Reports, API, and more Trend 1: Increase in hybrid project teams Alan Zucker, Founding Principal of consulting firm Project Management Essentials “I see interest in hybrid project management continuing to increase in 2025. Interest in agile is waning, and many agilists say it is dead. Hybrid projects combine elements of one or more project approaches. For decades, project managers have pragmatically blended processes and practices based on context and specific project needs. Hybrid allows project managers to move away from the binary waterfall-agile world to one where patterns of practice include lean, kanban, and DevOps. Successful project managers must make intentional choices when deciding how to execute their projects.” SEE: Explore the key features and benefits of hybrid project management. Trend 2: Squad-based teams reduce bureaucracy Jack Skeels, CEO of training firm AgencyAgile “The shift to squad-based teams reflects growing dissatisfaction with traditional approaches and the perceived ineffectiveness of agile as it’s often implemented. Leaders and stakeholders are weary of overly complex management structures and expensive project management software tools that fail to deliver meaningful results. Instead, leaders are embracing simpler, more effective models: small, self-managed teams—typically small squads of five to 15 people. These small teams embody the original spirit of agile by collaborating and getting things done quickly with innovation. The model encourages a culture of innovation, collaboration, and responsiveness to change—key traits for businesses competing in fast-paced markets.” More project management coverage Trend 3: Move to decentralized project management Molly Beran, founder of project management consultancy Projects By Molly “I expect to see a lot of organizations re-thinking their approach to creating centralized Project Management Offices. In the past few years, PMOs have been all the rage—companies rush to set them up, build templates and processes, and then usually start to see them slowly wither. Why? There are many reasons, of course, but I find that one of the most prevalent reasons is that while there is a rush to stand-up tools and processes, there are rarely enough people skilled in project management to actually use the tools and get the work done. Also, in the rush to set up an office, it’s really typical for companies to lose sight of their larger strategic or organizational priorities. In a sense, they get so caught up in creating a centralized PMO that they forget why it exists in the first place—to get the work done that best aligns with the strategic priorities of an organization. I predict that in 2025 and beyond, companies will start pulling back on centralized PMOs and go back to more decentralized project management, where each department or area has in place experts who understand the core business processes, and also get asked to manage projects.” SEE: Read TechRepublic’s guide to the top project management certifications. Trend 4: Focus on AI literacy among project managers Cornelius Fichtner, president of Project Management PrepCast and host of The Project Management Podcast “Project managers should experience a ‘rude awakening’ as they recognize the limitations of their current generative AI interactions. The difference between successful and struggling projects hinges primarily on the project manager’s depth of AI understanding. Many project managers forget that they not only need to use AI on their projects, but they will also be asked to lead projects intended to bring AI capabilities to various departments in their company. They need a really broad and solid understanding of what AI is and can do in order to serve stakeholders from marketing and finance as these departments are augmented with AI.” SEE: 9 Best AI Project Management Tools for 2024 Trend 5: Accelerated job training through AI Justin Tan, IT Project Management Office leader at Thermo Fisher Scientific “Imagine AI systems that can instantly generate comprehensive project plans based on the context and conditions, predict potential risks with greater accuracy, optimize resource allocation, and provide contextual decision support that historically required years of professional experience. Junior professionals without extensive traditional experience will leverage such AI-powered platforms to access institutional knowledge and best practices, effectively compressing years of learning into actionable recommendations—accelerating learning and project execution capabilities. From my experience playing a key role in leading digital transformation initiatives, the most successful organizations will be those that strategically integrate AI not as a replacement for human intelligence, but as a collaborative tool that amplifies human potential.” SEE: Read more artificial intelligence coverage from TechRepublic. Trend 6: Resource management software grows in importance Michele Badie, Professional Development Strategist at Skills Recharged “We’ll continue skills-centric resource management discussions, and action plans to connect the right skills to the right tasks while ensuring teams thrive and stay on task. Real-time tools—for example, resource planning software, AI-driven allocation, employee well-being, and collaboration and communication tools—will support making resource allocation seamless. At the same time, project managers, as integral parts of the process,

Top 6 Project Management Trends to Watch in 2025 Read More »

Best CRM for Small Business in 2025

Best for managing finances and cash flow: Pipedrive Best CRM with a Starter Bundle for small businesses: HubSpot Best for managing projects: monday CRM Best for product development: ClickUp Best for straightforward integrations: Insightly Best white label CRM for small businesses: Bitrix24 Best offering advanced features with security: Capsule Best for advanced sales and marketing tools: EngageBay Best for integrating with Google Workspace: Copper CRM Customer relationship management software that caters to small businesses helps organizations manage and track leads and customer interactions. While offering a mix of core and advanced CRM features for small businesses to streamline their current sales processes, these CRM tools are also scalable to grow with it. CRM software like Insightly, HubSpot, and EngageBay have free plans, which is great for small businesses with a limited budget. But for small businesses with the funds and personnel, tools like Pipedrive, Capsule, and monday CRM are also worth considering. 1 Pipedrive CRM Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Calendar, Collaboration Tools, Contact Management, and more 2 monday CRM Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Any Company Size Any Company Size Features Calendar, Collaboration Tools, Contact Management, and more 3 Creatio CRM Employees per Company Size Micro (0-49), Small (50-249), Medium (250-999), Large (1,000-4,999), Enterprise (5,000+) Medium (250-999 Employees), Large (1,000-4,999 Employees), Enterprise (5,000+ Employees) Medium, Large, Enterprise Features Dashboard, Document Management / Sharing, Email / Marketing Automation, and more Top CRM software for small businesses comparison Small and midsize businesses investing in CRM software want a tool that is accessible throughout both the sales and marketing departments for visibility and collaboration between teams. This allows processes to be automated into a CRM cycle and deals to be brought in and closed faster. CRM software with advanced features such as marketing tools helps these small businesses house all of their customer relationships, from generation to nurturing, within one platform. Another important feature organizations should confirm before committing to a software solution is how a CRM solution integrates with the existing tech stack, like calendars or email providers. Software Our star rating (out of 5) Pipeline management Marketing tools Lead nurturing Integrations Starting price* Pipedrive 4.4 Yes Limited Yes Yes $14 per user per month HubSpot 4 Yes Yes Yes Yes Free starting price monday CRM 3.5 Yes Yes Limited Yes $12 per user per month ClickUp 4.1 Yes Yes Limited Yes Free starting price Insightly 4.4 Yes Yes Yes Yes Free starting price Bitrix24 4.1 Yes Yes Yes Yes Free starting price Capsule 4 Yes Limited Yes Yes Free starting price EngageBay 4.1 Yes Yes Yes Yes Free starting price Copper CRM 3.8 Yes Yes Yes Yes $9 per user per month *Price when billed annually. Pipedrive: Best for managing finances and cash flow Image: Pipedrive In addition to Pipedrive’s advanced pipeline management tools, users can automate and streamline their finances with AI and app integrations. Small and midsize companies rely on predictive analytics around finances and cash flow, and the good news is Pipedrive can integrate with different accounting systems and software to automate invoices, schedule payments and even forecast revenue. Why I chose Pipedrive Pipedrive is a popular CRM solution for small businesses because of its intuitive pipeline building. Users can build out new or existing sales pipelines and then manage customers from beginning to end with helpful automations and reports. Pipedrive can also connect and integrate with a variety of other business tools in your tech stack, such as Slack, Zoom, Gmail, Trello, Microsoft Teams and more. While Pipedrive’s premium plans are priced at average rates, I recognize that small businesses might prioritize a free CRM over a paid one to get started; in that case, I recommend looking into  HubSpot. For more information on this provider, check out our full Pipedrive review. Pricing Essential: $14 per user per month, billed annually, or $24 per user when billed monthly. This tier comes with customizable pipelines, deal import and export, file attachments, calendar views and more. Advanced: $34 per user per month, billed annually, or $44 per user when billed monthly. This plan offers all Essential features, plus email templates, group emailing, meeting scheduler and more. Professional: $49 per user per month, billed annually, or $64 per user when billed monthly. All features mentioned are included in this plan, in addition to unlimited visual dashboards, custom permission sets, 24/5 live chat support and more. Power: $64 per user per month, billed annually, or $79 per user when billed monthly. This tier offers all Professional functionality, plus phone support, 200,000 open deals and more. Enterprise: $99 per user per month, billed annually, or $129 per user when billed monthly. This plan comes with all available features, including unlimited open deals, custom fields, reports and security alerts. Features Email campaigns: Personalize messages to customers that are scheduled to engage with them at the most ideal time. Workflow automation: Spend less time working on administrative tasks and more time selling with automated emails, touchpoints and more. Conversation tracking: View contact history with every contact, including calls, emails and in-person meetings. Business forecast dashboard in Pipedrive. Image: Pipedrive Pipedrive pros and cons Pros Cons 14-day free trial. No free-for-life version. 24/7 customer support. Reports of limited reporting and analytics. Mobile app available. Limited marketing tools. HubSpot: Best CRM with a Starter Bundle for small businesses Image: HubSpot HubSpot offers a special Starter Bundle built for small businesses and startups. The bundle gives organizations access to every HubSpot starter product at a discounted price—this includes the Smart CRM starter, Marketing, Sales, CMS, Service, Operations and Commerce hubs. This suite gives users access to a variety of advanced tools for everything pre- and post-sale in one sales pipeline. Why I chose HubSpot HubSpot is another CRM provider popular for its robust free version. CRMs that offer a free tier typically have a maximum of two or three users.

Best CRM for Small Business in 2025 Read More »