With the recent highly publicized attacks on Colonial Pipeline and JBS, we’ve had questions from some of our clients about protecting FileMaker data from ransomware attacks. While we are always careful to make it clear that we are not security professionals, we also try to do our best to answer our client’s questions, and so we have done some self-education recently as well as group discussions during our weekly developer meetings.
One of our large clients recently had a change of ownership. The new ownership team brought in a security analysis firm, BlueOrange, to perform a security analysis and penetration testing study of our client’s IT infrastructure, including the custom Claris FileMaker solution we developed for them and have been enhancing and supporting for about ten years now. We haven’t had the chance to work with a firm like BlueOrange in the past on an enterprise scale security analysis. It was a good experience for us, and I thought a report on this process would be interesting to the larger Claris FileMaker community.