Secure Authorization Checklist: Fill & Download for Free

cybersecurity is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access. In a computing context, security includes both cybersecurity and physical security.Ensuring cybersecurity requires coordinated efforts throughout an information system. Elements of cybersecurity include:Application securityInformation securityNetwork securityDisaster recovery / business continuity planningOperational securityEnd-user educationTo deal with the current environment, advisory organizations are promoting a more proactive and adaptive approach. The National Institute of Standards and Technology (NIST), for example, recently issued updated guidelines in its risk assessment framework that recommended a shift toward continuous monitoring and real-time assessments.According to Forbes, the global cybersecurity market reached $75 billion for 2015 and is expected to hit $170 billion in 2020.Application securityApplication security is the use of software, hardware, and procedural methods to protect applications from external threats.Once an afterthought in software design, security is becoming an increasingly important concern during development as applications become more frequently accessible over networks and are, as a result, vulnerable to a wide variety of threats. Security measures built into applications and a sound application security routine minimize the likelihood that unauthorized code will be able to manipulate applications to access, steal, modify, or delete sensitive data.Actions taken to ensure application security are sometimes called countermeasures. The most basic software countermeasure is an application firewall that limits the execution of files or the handling of data by specific installed programs. The most common hardware countermeasure is a router that can prevent the IP address of an individual computer from being directly visible on the Internet. Other countermeasures include conventional firewalls, encryption/decryption programs, anti-virus programs, spyware detection/removal programs and biometric authentication systems.Application security can be enhanced by rigorously defining enterprise assets, identifying what each application does (or will do) with respect to these assets, creating a security profile for each application, identifying and prioritizing potential threats and documenting adverse events and the actions taken in each case. This process is known as threat modeling. In this context, a threat is any potential or actual adverse event that can compromise the assets of an enterprise, including both malicious events, such as a denial-of-service (DoS) attack, and unplanned events, such as the failure of a storage device.information security (infosec)Information security (infosec) is a set of strategies for managing the processes, tools and policies necessary to prevent, detect, document and counter threats to digital and non-digital information. Infosec responsibilities include establishing a set of business processes that will protect information assets regardless of how the information is formatted or whether it is in transit, is being processed or is at rest in storage.Infosec programs are built around the core objectives of the CIA triad: maintaining the confidentiality, integrity and availability of IT systems and business data. These objectives ensure that sensitive information is only disclosed to authorized parties (confidentiality), prevent unauthorized modification of data(integrity) and guarantee the data can be accessed by authorized parties when requested (availability).Many large enterprises employ a dedicated security group to implement and maintain the organization's infosec program. Typically, this group is led by a chief information security officer. The security group is generally responsible for conducting risk management, a process through which vulnerabilities and threats to information assets are continuously assessed, and the appropriate protective controls are decided on and applied. The value of an organization lies within its information -- its security is critical for business operations, as well as retaining credibility and earning the trust of clients.Threats to sensitive and private information come in many different forms, such as malware and phishing attacks, identity theft and ransomware. To deter attackers and mitigate vulnerabilities at various points, multiple security controls are implemented and coordinated as part of a layered defense in depth strategy. This should minimize the impact of an attack. To be prepared for a security breach, security groups should have an incident response plan (IRP) in place. This should allow them to contain and limit the damage, remove the cause and apply updated defense controls.business continuity plan (BCP)A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue operating during an unplanned event.The BCP should state the essential functions of the business, identify which systems and processes must be sustained, and detail how to maintain them. It should take into account any possible business disruption.With risks ranging from cyber attacks to natural disasters to human error, it is vital for an organization to have a business continuity plan to preserve its health and reputation. A proper BCP decreases the chance of a costly outage.While IT administrators often create the plan, the participation of executive staff can aid the process, adding knowledge of the company, providing oversight and helping to ensure the BCP is regularly updated.What a business continuity plan needsAccording to business continuity consultant Paul Kirvan, a BCP should contain the following items:Initial data, including important contact information, located at the beginning of the planRevision management process that describes change management proceduresPurpose and scopeHow to use the plan, including guidelines as to when the plan will be initiatedPolicy informationEmergency response and managementStep-by-step proceduresChecklists and flow diagramsSchedule for reviewing, testing and updating the planIn the book Business Continuity and Disaster Recovery Planning for IT Professionals, Susan Snedaker recommends asking the following questions:How would the department function if desktops, laptops, servers, email and internet access were unavailable?What single points of failure exist? What risk controls or risk management systems are currently in place?What are the critical outsourced relationships and dependencies?During a disruption, what workarounds are there for key business processes?What is the minimum number of staff needed and what functions would they need to carry out?What are the key skills, knowledge or expertise needed to recover?What critical security or operational controls are needed if systems are down?Business continuity planning stepsThe business continuity planning process contains several steps, including:Initiating the projectInformation-gathering phase, featuring business impact analysis (BIA) and risk assessment (RA)Plan developmentPlan testing, maintenance and updatingOnce the business has decided to undertake the planning process, the BIA and RA help to collect important data. The BIA pinpoints the mission-critical functions that must continue during a crisis and the resources needed to maintain those operations. The RA details the potential internal and external risks and threats, the likelihood of them happening and the possible damage they can cause.The next step determines the best ways to deal with the risks and threats outlined in the BIA and RA, and how to limit damage from an event. A successful business continuity plan defines step-by-step procedures for response. The BCP should not be overly complex and does not need to be hundreds of pages long; it should contain just the right amount of information to keep the business running. For a small business, especially, a one-page plan with all the necessary details can be more helpful than a long one that is overwhelming and difficult to use. Those details should include the minimum resources needed for business continuance, the locations where that may take place, the personnel needed to accomplish it and potential costs.Watch this video to understand perfectly.The BCP should be current and accurate, which can be achieved through regular testing and maintenance. A business continuity plan test can be as simple as talking through the plan and as complex as a full run-through of what will happen in the event of a business disruption. The test can be planned well in advance or it can be more spur-of-the-moment to better simulate an unplanned event. If issues arise during testing, the plan should be corrected accordingly during the maintenance phase. Maintenance also includes a review of the critical functions outlined in the BIA and the risks described in the RA, as well as plan updating if necessary.A business continuity plan is a living document and should not sit on the shelf waiting for a crisis. It needs to be continually improved and staff should be kept up to date through regular educational awareness and testing activities. In addition, an internal or external business continuity plan audit evaluates the effectiveness of the BCP and highlights areas for improvement.Business continuity planning software, tools and trendsThere is help available to guide organizations through the business continuity planning process, from consultants to tools to full software. An organization bases its investment in assistance on the complexity of the business continuity planning task, amount of time and budget. Before making a purchase, it is advisable to research both products and vendors, evaluate demos and talk to other users.The Federal Financial Institutions Examination Council's Business Continuity Planning booklet contains guidance for financial -- and nonfinancial -- professionals, delving into the BIA, RA, BC plan development and testing, standards and training.For more complicated functions, business continuity planning software uses databases and modules for specific exercises. The U.S. Department of Homeland Security, through its Plan Ahead for Disasters website, offers software in its "Business Continuity Planning Suite." Other business continuity software vendors include ClearView, Continuity Logic, Fusion and Sungard Availability Services.The role of the business continuity professional has changed and continues to evolve. As IT administrators are increasingly asked to do more with less, it is advisable for business continuity professionals to be well versed in technology, security, risk management, emergency management and strategic planning. Business continuity planning must also take into account emerging and growing technologies -- such as the cloud and virtualization -- and new threats, such as cyberattacks like ransomware.Business continuity planning standardsBusiness continuity planning standards provide a starting point.According to Kirvan, the International Organization for Standardization (ISO) 22301:2012 standard is generally regarded as the global standard for business continuity management. ISO 22301:2012 is often complemented by other standards, such as:ISO 22313: Guidance for a business continuity management system and continual improvementISO 22317: Guidelines for business impact analysisISO 22318: Continuity of supply chainsISO 22398: Exercise guidelinesISO 22399: Incident preparednessOther standards include:National Fire Protection Association 1600: Emergency management and business continuityNational Institute of Standards and Technology SP 800-34: IT contingency planningBritish Standards Institution BS 25999: The British standard for business continuityEmergency management and disaster recovery plans in BC planningAn emergency management plan is a document that helps to mitigate the damage of a hazardous event. Proper business continuity planning includes emergency management as an important component. The specifically defined emergency management team takes the lead during a business disruption.The emergency management plan, like the BCP, should be reviewed, tested and updated accordingly. It should be fairly simple and provide the steps necessary to get through an event. The plan also should be flexible, because situations are often very fluid, and the team should communicate frequently during the incident.Disaster recovery (DR) and business continuity planning are often linked, but they are different. A DR plan details how an organization recovers after a business disruption. A business continuity plan is a more proactive approach, as it describes how an organization can maintain operations during an emergency.Network securityNetwork security consists of the policies and practices adopted to prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, which is controlled by the network administrator. Users choose or are assigned an ID and password or other authenticating information that allows them access to information and programs within their authority. Network security covers a variety of computer networks, both public and private, that are used in everyday jobs; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access. Network security is involved in organizations, enterprises, and other types of institutions. It does as its title explains: It secures the network, as well as protecting and overseeing operations being done. The most common and simple way of protecting a network resource is by assigning it a unique name and a corresponding password.Network Security conceptOnce authenticated, a firewall enforces access policies such as what services are allowed to be accessed by the network users.Though effective to prevent unauthorized access, this component may fail to check potentially harmful content such as computer worms or Trojans being transmitted over the network. Anti-virus software or an intrusion prevention system (IPS)help detect and inhibit the action of such malware. An anomaly-based intrusion detection system may also monitor the network like wireshark traffic and may be logged for audit purposes and for later high-level analysis. Newer systems combining unsupervised machine learning with full network traffic analysis can detect active network attackers from malicious insiders or targeted external attackers that have compromised a user machine or account.OPSEC (operational security)OPSEC (operational security) is an analytical process that classifies information assets and determines the controls required to protect these assets.OPSEC originated as a military term that described strategies to prevent potential adversaries from discovering critical operations-related data. As information management and protection has become important to success in the private sector, OPSEC processes are now common in business operations.Operational security five-step processOperational security typically consists of a five-step iterative process:1. Identify critical information: The first step is to determine exactly what data would be particularly harmful to an organization if it was obtained by an adversary. This includes intellectual property, employees' and/or customers' personally identifiable information and financial statements.2. Determine threats: The next step is to determine who represents a threat to the organization's critical information. There may be numerous adversaries that target different pieces of information, and companies must consider any competitors or hackers that may target the data.3. Analyze vulnerabilities: In the vulnerability analysis stage, the organization examines potential weaknesses among the safeguards in place to protect the critical information that leave it vulnerable to potential adversaries. This step includes identifying any potential lapses in physical/electronic processes designed to protect against the predetermined threats, or areas where lack of security awareness training leaves information open to attack.4. Assess risks: After vulnerabilities have been determined, the next step is to determine the threat level associated with each of them. Companies rank the risks according to factors such as the chances a specific attack will occur and how damaging such an attack would be to operations. The higher the risk, the more pressing it will be for the organization to implement risk management controls.5. Apply appropriate countermeasures: The final step consists of implementing a plan to mitigate the risks beginning with those that pose the biggest threat to operations. Potential security improvements stemming from the risk mitigation plan include implementing additional hardware and training or developing new information governance policies.You can also watch video to optimise or enhance your knowledge -OPSEC and risk managementWhen it comes to risk management, OPSEC encourages managers to view operations or projects from the outside-in, or from the perspective of competitors (or enemies) in order to identify weaknesses. If an organization can easily extract their own information while acting as an outsider, odds are adversaries outside the organization can as well. Completing regular risk assessments and OPSEC is key to identifying vulnerabilities.OPSEC trainingThe Center for Development of Security Excellence (CDSE) offers diverse security training for military members, Department of Defense (DoD) employees and DoD contractors. CDSE's training programs are presented through a variety of platforms including e-learning, webinars, virtual classes and in-person instruction. Topics covered in OPSEC training include:CounterintelligenceCybersecurityInsider threatsPersonnel securityPhysical securityOperations securityCDSE's OPSEC Awareness training program is presented on their Security Awareness Hub. This course is free and its goal is to ensure safe and successful operations and personal safety by providing information on the need to protect unclassified information regarding operations and personal information.Educating the end user and eliminating the biggest security riskWhen weighing up the biggest security hazards to an organisation, it may come as a surprise to discover that the end user within the organisation is often the first to compromise security.Through no fault of their own, and mainly due to a lack of awareness, employees frequently open the virtual gates to attackers.With the rise in cybercrime as well as the increase in the consumerisation of IT and BYOD, it is more important than ever to fully educate employees about security attacks and protection.Although BYOD has given them an increased level of flexibility, it has also given the end user even more potential to cause security breaches.Threat actors actively target end-users as a primary route to compromise. Some criminals may be targeting the end-user directly, for example to conduct financial fraud, others will be leveraging the user to gain access to the organisations IT infrastructure.It is important to note that threat actors can target end users on their home networks and mobile devices, who will then unwittingly bring the “infection” inside the organisation.Increasingly these days, the criminals use a technique called spear phishing; an attacker sends a highly targeted email, often with personal contextual details that fools the user into clicking a link and, unknown to them, downloading malware.Once this has been downloaded, it provides access to the end users device which is used as a launch point to harvest network information and expand control inside the network.Due to the detrimental ramifications, it is vital that end users have a full understanding of the most common ways for threat actors to target them.This includes educating employees that they will be targeted, encouraging them to be vigilant at all times, teaching employees what qualifies as sensitive data, how to identify and avoid threats, acceptable use policies and security policies.It’s also crucial that end users understand their role and responsibilities in maintaining the organisation’s compliance with relevant regulations, such as PCI DSS for payment card data or HIPAA for health records.In short, educating the work force is critical and is a key requirement of information security standards such as ISO27001.There are a number of ways that security awareness training can be delivered to end users. The most popular tends to be the e-learning variety, where online courses covering the essentials of security awareness are mandated for all employees.This would teach the user that they are a target, how to look out for social engineering and phishing, password security, handling of sensitive data, plus any specific compliance-driven requirements.This is good for compliance and building a basic level of awareness, but it might not engage the user as well as it could.The most effective way the CIO can deliver practical and memorable education is to make it real and physically demonstrate what can be achieved as a result of an attack.Taking employees through a real life example of someone clicking an email which looks authentic presents what takes place behind the scenes and makes evident the power the attacker acquires.This illustrates precisely what a threat entails in an easy to understand and influential manner.BYOD means users must be aware of the risks and responsible for their own ongoing security, as well as the business.Employees who manage both their work and private lives on one device access secure business information, as well as personal information such as passwords and pictures.Ensuring that they know the right procedures for accessing and protecting business information is crucial.Making it personal and teaching employees how to protect their own data adds value by highlighting how a threat could impact their personal life as well as their employer.Implementing best practice will then become second nature as people adopt the same practices in both their personal and professional lives.While giving consideration to security awareness training to the whole organisation, special thought must be given to the education of an even more crucial group – the senior management team.Most members of most SMTs have very little knowledge or awareness of information security as it’s not their domain and it’s traditionally something that’s delegated.However news today is filled with companies suffering severe reputational damage, and in some cases ceasing trading, due to information security breaches.Getting time with the SMT to present a high-level analysis of the risks faced by a business and market, and giving examples of businesses not taking those risks seriously enough, should be high on any CIO or CISOs priority list. It will also help when trying to secure investment to mitigate those risks.Although end user education will help to prevent the risk of human error, it’s impossible to eliminate it completely.Protection of assets and detection of malicious activity is just as important, if not more so; the CIO needs to protect end users from their own mistakes.Processes and technology can be put in place to limit and control what information end users can access within a network as well as the actions they can take.In order to take control and minimise risks, end users should only have access to the information necessary for them to perform their roles.As a final point to consider, the security of an organisation relies on detection. Prevention is important but detection is crucial.The key to tackling threats is determining what normal behaviour is, as an enabler for the identification of anomalous activity.If an organisation understands their baseline then this makes it a lot easier to spot abnormalities, such as excessive access to information or out of the ordinary access requests.It was very hard to write this big information but finally i did it.Thanks for reading.

OK, so you want to know the responsibilities of landlords, and I can answer in two ways, the short version and the long version.Short version:The landlord’s basic responsibility is to provide habitable property that’s safe, secure and clean, free from damage, injury or intrusion, to the extent possible. “Habitable” includes clean running water, both cold and hot, with operating sewer and drains, along with heat as needed. The landlord also needs to have available remedy for anything that goes wrong, such as damage from elements (i.e. leaky roof), damage to the property or failure of any systems. In short, the landlord’s responsibility is to keep and maintain the property for the tenant in a reasonable condition that’s safe, secure and clean.Long version:The following is cut-and-pasted directly from the Washington State Landlord/Tenant Act RCW 59.18.060. It’s a long read, but it pretty much spells out everything for which a landlord is responsible in Washington State. I’d guess it’s pretty similar to most every other state in the union, and likely most every jurisdiction in most major cities and countries. (The blue title below links to the entire Landlord/Tenant Act for Washington State.)RCW 59.18.060Landlord—Duties.The landlord will at all times during the tenancy keep the premises fit for human habitation, and shall in particular:(1) Maintain the premises to substantially comply with any applicable code, statute, ordinance, or regulation governing their maintenance or operation, which the legislative body enacting the applicable code, statute, ordinance or regulation could enforce as to the premises rented if such condition endangers or impairs the health or safety of the tenant;(2) Maintain the structural components including, but not limited to, the roofs, floors, walls, chimneys, fireplaces, foundations, and all other structural components, in reasonably good repair so as to be usable;(3) Keep any shared or common areas reasonably clean, sanitary, and safe from defects increasing the hazards of fire or accident;(4) Provide a reasonable program for the control of infestation by insects, rodents, and other pests at the initiation of the tenancy and, except in the case of a single-family residence, control infestation during tenancy except where such infestation is caused by the tenant;(5) Except where the condition is attributable to normal wear and tear, make repairs and arrangements necessary to put and keep the premises in as good condition as it by law or rental agreement should have been, at the commencement of the tenancy;(6) Provide reasonably adequate locks and furnish keys to the tenant;(7) Maintain and safeguard with reasonable care any master key or duplicate keys to the dwelling unit;(8) Maintain all electrical, plumbing, heating, and other facilities and appliances supplied by him or her in reasonably good working order;(9) Maintain the dwelling unit in reasonably weathertight condition;(10) Except in the case of a single-family residence, provide and maintain appropriate receptacles in common areas for the removal of ashes, rubbish, and garbage, incidental to the occupancy and arrange for the reasonable and regular removal of such waste;(11) Provide facilities adequate to supply heat and water and hot water as reasonably required by the tenant;(12)(a) Provide a written notice to all tenants disclosing fire safety and protection information. The landlord or his or her authorized agent must provide a written notice to the tenant that the dwelling unit is equipped with a smoke detection device as required in RCW 43.44.110. The notice shall inform the tenant of the tenant's responsibility to maintain the smoke detection device in proper operating condition and of penalties for failure to comply with the provisions of RCW 43.44.110(3). The notice must be signed by the landlord or the landlord's authorized agent and tenant with copies provided to both parties. Further, except with respect to a single-family residence, the written notice must also disclose the following:(i) Whether the smoke detection device is hard-wired or battery operated;(ii) Whether the building has a fire sprinkler system;(iii) Whether the building has a fire alarm system;(iv) Whether the building has a smoking policy, and what that policy is;(v) Whether the building has an emergency notification plan for the occupants and, if so, provide a copy to the occupants;(vi) Whether the building has an emergency relocation plan for the occupants and, if so, provide a copy to the occupants; and(vii) Whether the building has an emergency evacuation plan for the occupants and, if so, provide a copy to the occupants.(b) The information required under this subsection may be provided to a tenant in a multifamily residential building either as a written notice or as a checklist that discloses whether the building has fire safety and protection devices and systems. The checklist shall include a diagram showing the emergency evacuation routes for the occupants.(c) The written notice or checklist must be provided to new tenants at the time the lease or rental agreement is signed;(13) Provide tenants with information provided or approved by the department of health about the health hazards associated with exposure to indoor mold. Information may be provided in written format individually to each tenant, or may be posted in a visible, public location at the dwelling unit property. The information must detail how tenants can control mold growth in their dwelling units to minimize the health risks associated with indoor mold. Landlords may obtain the information from the department's web site or, if requested by the landlord, the department must mail the information to the landlord in a printed format. When developing or changing the information, the department of health must include representatives of landlords in the development process. The information must be provided by the landlord to new tenants at the time the lease or rental agreement is signed;(14) The landlord and his or her agents and employees are immune from civil liability for failure to comply with subsection (13) of this section except where the landlord and his or her agents and employees knowingly and intentionally do not comply with subsection (13) of this section; and(15) Designate to the tenant the name and address of the person who is the landlord by a statement on the rental agreement or by a notice conspicuously posted on the premises. The tenant shall be notified immediately of any changes in writing, which must be either (a) delivered personally to the tenant or (b) mailed to the tenant and conspicuously posted on the premises. If the person designated in this section does not reside in the state where the premises are located, there shall also be designated a person who resides in the county who is authorized to act as an agent for the purposes of service of notices and process, and if no designation is made of a person to act as agent, then the person to whom rental payments are to be made shall be considered such agent. Regardless of such designation, any owner who resides outside the state and who violates a provision of this chapter is deemed to have submitted himself or herself to the jurisdiction of the courts of this state and personal service of any process may be made on the owner outside the state with the same force and effect as personal service within the state. Any summons or process served out-of-state must contain the same information and be served in the same manner as personal service of summons or process served within the state, except the summons or process must require the party to appear and answer within sixty days after such personal service out of the state. In an action for a violation of this chapter that is filed under chapter 12.40 RCW, service of the notice of claim outside the state must contain the same information and be served in the same manner as required under chapter 12.40 RCW, except the date on which the party is required to appear must not be less than sixty days from the date of service of the notice of claim.No duty shall devolve upon the landlord to repair a defective condition under this section, nor shall any defense or remedy be available to the tenant under this chapter, where the defective condition complained of was caused by the conduct of such tenant, his or her family, invitee, or other person acting under his or her control, or where a tenant unreasonably fails to allow the landlord access to the property for purposes of repair. When the duty imposed by subsection (1) of this section is incompatible with and greater than the duty imposed by any other provisions of this section, the landlord's duty shall be determined pursuant to subsection (1) of this section.

Here Are 55 Business Idea You NeedToday, a huge number of individuals are thinking about going into business, and for valid justifications. Overall, individuals can hope to have two and three vocations during their work life. Those leaving one vocation regularly consider their second or third profession move being one they can run out of their own home. The uplifting news: Starting a locally established business is inside the scope of nearly any individual who needs to face a challenge and buckle down, similar to a plenty of other ease thoughts.1. ACCOUNTANTExperience, preparing or permitting might be requiredMake a flier laying out your administrations. Before you do that, you need to understand what those administrations will be. Would you like to just do accounting for a private company? A more elaborate degree of bookkeeping is stir up monetary records, pay explanations, and other monetary reports on a month to month, quarterly, and additionally yearly premise, contingent upon the requirements of the business. Different specializations can incorporate duty bookkeeping, a colossal region of expected work.2. Bike REPAIRIn numerous pieces of the country, this business will in general be occasional, however you can discover ways around that. Lease a capacity unit and offer to store individuals' bikes ridiculous after you do a check up and any required fixes on them. On the off chance that you need to take into account the Lance Armstrong wannabes, you can have business lasting through the year. These street race riders are preparing through snow, slush and dull of night. Some of them work on their own bikes, however a considerable lot of them don't, so you can get their business the entire year. What's more, in the event that you keep Saturday shop hours, you can be certain you will have a bunch of fans stopping by to talk everything cycling.Boats that are pulled out of the water for the colder time of year or even only for mid-season fixes will require the body cleaned. Also, contingent upon the kind of boat, it is a fun chance to give a significant cleaning all the other things as well - the decks, the dozing quarters, the head, and the holds. Start by moving toward homes that have a boat sitting in the yard. Or then again you could showcase your administrations to the marina to contract you to do the boat cleaning it offers to clients.4. Marketable strategy SERVICEHas extension prospectsOffer a soup-to-nuts strategy, including statistical surveying, the strategy story and the budget reports. Plan your expense around the principle one that the customer will need and offer the others as extra administrations. You can give customers an electronic document and permit them to take it from that point, or you can keep the field-tested strategy on record and offer the assistance of tweaking it at whatever point important. Have strategy tests to show customers - and make a point to incorporate your own!Getting paid to drive during your spare energy is an extraordinary method to bring in additional cash. It will not probably supplant an everyday check except can be a worthwhile additional income stream. As indicated by Nerd Wallet, here is a separate of the pay you can expect: "To make a yearly pay of $50,000, the normal Uber driver needs to give 60.21 rides every week, while those working for Lyft need to give 83.76 rides seven days, and Sidecar drivers would have needed to give 72.03 rides in seven days."6. CLEANING SERVICEThere are numerous headings you can take this business. On the off chance that you need to work during hours when nobody else does, you can zero in on office customers. You can zero in on retail organizations and keep your clients bunched into a couple of squares. Cafés are in extraordinary need of every day careful cleaning and can be an incredible wellspring of consistent customers. Maybe you would be more keen on house keeping. Ordinarily with cleaning administrations you don't need to spend loads of cash on promoting or showcasing on the grounds that your clients will drop by overhearing people's conversations.7. CHILDREN'S PARTY PLANNERThe youngsters' birthday celebration business is a numerous million dollar industry, with the normal American burning through $500 per party. The book Start Your Own Kid-Focused Business reveals to you all you require to know to get your own child business going: from protection expenses to food and refreshment determination to masterminding life-changing diversion that gets bunches of grins and loads of references from glad clients.8. CONSULTANTHas extension prospectsTo be a specialist, you need to have ability in something so you can showcase yourself as a counselor to others hoping to work here. Maybe you dealt with a few enormous stockrooms in your profession with a pharmacy organization, you did all the showcasing for a long time for a huge shoe producer or you set up a chain of excellence supply shops or take-out cafés. You can utilize this experience to help other people do comparable things without committing the very errors that you made en route. A decent schedule application will probably prove to be useful as time following is critical to exact charging.Canine walkers take pooches out for their day by day protected at least one times each day, either exclusively or in little gatherings. In certain urban communities across the United States, as New York, canine strolling alone can be a flourishing business. Yet, it's in reality more normal for canine walkers to offer extra administrations, incorporating playing with and taking care of pets, getting papers and mail, and turning lights on and off.Do you have things hiding around your family that you could sell on eBay? Sort out your asking cost and conclude whether to sell it or put it in your eBay store. At that point choose if you need a base offer and how long you need the sale to last. You will need to set up a PayPal record to use for exchanges. The eBay site gives all the data you need to know to get ready for action with an eBay business. Chatbots are offering inventive better approaches to assist organizations with these capacities.This business is like the PC fix business, yet you will take on a wide range of electronic gear other than PCs. With more modest gadgets, you should be set up to have clients bring their maintenance tasks to you, as you would experience issues recuperating the expense of cruising all over getting broken hardware and bringing it back. You may likewise need to urge individuals to give you their old gadgets so you can utilize them for parts.13. Occasion PLANNINGHas development prospectsOne of the main things you need to do is visit each potential occasion area with which you intend to work. Work with the advertising supervisor to visit each site and realize what is accessible at every area. Start an information base that will permit you to sort scenes by shifting highlights, for example, the quantity of individuals each site holds, AV hardware accessible on location, on the off chance that you should orchestrate rental seats, and so forth At that point when you are starting to design an occasion with a customer, you can discover what the key boundaries are for the occasion and effectively pull up the three or four destinations that meet the fundamental measures. also, commitment parties, and so onOne approach to bring in cash in this field is by being a specialist witness yourself. On the off chance that you have aptitude that could be valuable in lawful cases, you can advertise yourself to lawyers to go about as a specialist witness. Another approach to be dynamic in the master observer field is to play such a relational arranger, coordinating lawyers with master observers for their cases- - either for the safeguard or for the indictment. Master observers for huge cash cases can be required to fly anyplace to affirm. There's no explanation your information base of witnesses can't be from all pieces of the country.To begin, you should go through the confirmation cycle with the goal that you can mark yourself a CFP (Certified Financial Planner). Your authentication shows that you have ability and validity, and this separation will assist individuals with picking you as their monetary organizer.16. Insect MARKETHas development prospectsIndividuals love to go through ends of the week scavenging through tables loaded with others' undesirable things, searching for treasures. Try to change your design and put new stuff out available to be purchased frequently. You need individuals to return on numerous occasions to perceive what's happening. You don't must have that much new stuff to make things look new. Simply moving a thing from a table to the highest point of a shelf may get it seen, despite the fact that the thing has been in your stock since you initially began having deals.Tell the neighborhood public courses about your training business. Develop associations with the staff and urge them to suggest you as a mentor. Somewhere else to search for clients is in the corporate world. Hitting the fairway is a game that money managers use to create connections outside the workplace. You do should be a better than normal golf player to build up a standing as a golf trainer. You likewise should be a decent educator, realize that how generally will be inspirational and work with a wide range of kinds of individuals.All property holders are consistently watching out for approaches to save money on their service bills. You can go to their guide by giving them a review of their home and giving them a breakdown of how they could achieve genuine reserve funds in warming, cooling and electrical use. You can go above and beyond and do the execution and establishment of a portion of your ideas in their home yourself. Do a total apparatus review, with proficiency evaluations and counts dependent on the age of the machine. Furthermore, remember the water radiator!To be fruitful, you will need to build up contacts with realtors who can prescribe your administrations to clients. The home examination field is one where you should do consistent refreshing of your schooling and information. New items are continually coming out available - in the event that you just think about decks made of wood, you won't realize how to investigate and survey the new materials available, for example, composites that are made to look like genuine wood. Likewise keep informed about all security updates of materials and issues with things like off-gassing, carbon monoxide creation, and other compound safeguards.You can pick either to accomplish the getting sorted out work or counsel on the things that the property holder could never really coordinate themselves. Have a portfolio.17. GOLF COACHExperience, training or licensing may be neededLet the local public courses know about your coaching business. Cultivate relationships with the staff and encourage them to recommend you as a coach. Another place to look for customers is in the corporate world. Golfing is a game that business people use to develop relationships outside the office. You do need to be a better than average golfer to develop a reputation as a golf coach. You also need to be a good teacher, know how to be motivational and be willing to work with many different types of people.18. HOME ENERGY AUDITORExperience, training or licensing may be neededAll homeowners are always on the lookout for ways to save on their utility bills. You can come to their aid by providing them with an audit of their house and giving them a breakdown of how they could accomplish real savings in heating, cooling and electrical use. You can go one step further and do the implementation and installation of some of your suggestions in their home yourself. Do a complete appliance audit, with efficiency ratings and calculations based on the age of the appliance. And don't forget the water heater!19. HOME INSPECTIONExperience, training or licensing may be neededIn order to be successful, you will want to establish contacts with real estate agents who can recommend your services to customers. The home inspection field is one where you will need to do constant updating of your education and knowledge. New products are constantly coming out on the market--if you only know about decks made of wood, you will not know how to inspect and assess the new materials on the market, such as composites that are made to look like real wood. Also keep apprised of all safety updates of materials and issues with things like off-gassing, carbon monoxide production, and other chemical precautions.20. HOUSEHOLD ORGANIZERHas expansion possibilitiesYou can choose either to do the organizing work or consult on the things that the homeowner could do to better organize themselves. Have a portfolio of different organizational scenarios in different rooms in the home and talk with the homeowner about the style he or she likes. Create checklists and questionnaires to understand how the family uses the home. Are the kids wildly busy with after-school activities? Or are they usually home after school and want access to their toys? Do they share rooms? All of these things will help you tailor an organizing plan and become a family's hero.21. IMPORT/EXPORT SPECIALISTExperience, training or licensing may be neededIf you don't already have work experience with importing and/or exporting, you will have a longer learning curve. You can start by learning the basics and hosting educational sessions to teach others what they need to know to get started in import/export. That alone would probably gain you your first couple of clients. If you keep going with educational seminars and expand your reach to outside your immediate region, you could probably develop a sufficient and ongoing customer base very quickly, but be careful not to outpace your learning curve!22. INTERIOR DECORATORExperience, training or licensing may be neededMarket your talents to building contractors. People purchasing new homes can often be overwhelmed with the choices and possibilities in home decorating. Design some questionnaires for each major element and each major room in the house. Find out how the homeowner will use the home--are there children? Pets? Does the woman of the house wear high heels? Do the home's residents neglect to remove shoes? How will each room be used? Where might task lighting and ambient lighting be most appropriate?23. JEWELRY MAKINGExperience, training or licensing may be neededThere are many different ways of getting into the jewelry business and many different types of materials with which you can work. Working in metal will probably require the most in the way of specific tools. You need to be able to heat the metal to manipulate it, and you need metalworking tools to cut and engrave it. But there are many other materials that you can work with to make jewelry--glass, plastic, beads, feathers, even wood, to name just a few.24. MARKETING COPYWRITERExperience, training or licensing may be neededIf you can write copy that gets people excited about purchasing what your client has to sell, you can make good money in this business. Unless you are highly experienced from working in the copywriting field, take a course. There are online courses or classes at community colleges and universities that can give you a leg up in getting savvy at writing copy for brochures, catalogs, advertising and, of course, marketing copy for the web.25. NOTARY PUBLIC/JUSTICE OF THE PEACEExperience, training or licensing may be neededIn most states in the U.S., a notary public is a state officer who is authorized to witness and attest to the legalities of certain documents by signature and stamping a seal. Most states require that you pass an exam and a background check. It costs very little to become a notary and your income from notary work is negligible. A justice of the peace typically performs wedding ceremonies. States have varying rules and procedures for becoming a JP and performing services. Becoming a JP and/or notary public does not cost much money. And it is not a big moneymaking venture! Many states set the fees you can charge for JP services. JPs can add additional fees, and often do, including travel and hourly rates for additional meetings such as rehearsals, other prep time and any special requests.26. PERSONAL CONCIERGEThis business is for someone who is supremely efficient and has the ability to make things happen. People who hire you will expect things when they want them and you need to be able to come through with not only what they want, but with a personal touch and a smile on your face. The most likely clients for a personal concierge service are top executives who find themselves at the office by 7 a.m. and are there most nights until 9 p.m., leaving them very little time to do all those things that often need to be done during those very hours.Advertise your services in places where everyone goes, like restaurants and grocery stores. Having a website is a good idea--people want some privacy in their decision-making when it comes to getting fit. They can go to your website and determine if your approach to personal training is an approach that would work for them. It is important to emphasize the safety aspect of using a personal trainer. You can help clients get fit and avoid injury.27. PERSONAL TRAINERExperience, training or licensing may be neededAdvertise your services in places where everyone goes, like restaurants and grocery stores. Having a website is a good idea--people want some privacy in their decision-making when it comes to getting fit. They can go to your website and determine if your approach to personal training is an approach that would work for them. It is important to emphasize the safety aspect of using a personal trainer. You can help clients get fit and avoid injury.28. PROPERTY MANAGEMENTExperience, training or licensing may be neededYour job, in the case of rental units, will be to make sure the property is running smoothly. For seasonal properties, you will most likely spend your management time making sure the property is ready for seasonal visits and well-maintained when no one is around. If the owners go away for six weeks in the winter, the property manager makes regular checks on the property. You will be the contact number if the security system operator needs to contact someone about a breach in security.29. SMALL ENGINE REPAIRExperience, training or licensing may be neededMost community colleges offer some level of engine-repair courses. Another way to learn would be to take a part-time position at a repair shop or a rental facility where you could learn on the job, although you will want to be open about your plans. You should be prepared to work on push-behind lawn mowers, riding lawn mowers, generators, garden tools such as rototillers and edgers, chainsaws, wood chippers and snowblowers. You need to decide whether you'll want to take on bigger jobs, such as tractors, snowmobiles and ATVs; space may be your decision-maker.30. SOLAR ENERGY CONSULTANTExperience, training or licensing may be neededHas expansion possibilitiesAs a solar consultant, you can basically conduct a home inspection and give clients a report on their solar options for their particular home and site. This can range from full-fledged general solar installations that generate electricity to simple solar walkway lighting. You might want to start by working in a solar products company to become knowledgeable in the solar energy field. However, to be a consultant, it is often best not to be affiliated with any one company or product and be able to recommend products and options across the field of solar energy.31. TAX PREPARERExperience, training or licensing may be neededMost tax preparation franchises offer courses, seminars, and training to get you ready to work for them. You will learn a lot about tax preparation while working for them before going out on your own. There is a lot of educational support out there to learn tax preparation and all its complexities. And there are lots of individuals and businesses willing to spend a few hundred dollars a year to have someone else prepare their taxes and keep watch for tax breaks or tax burdens on their behalf.32. MUSIC LESSONSExperience, training or licensing may be neededTurn down the volume and listen up: your music skills can earn you between $50—$75 an hour. There are a few ways to approach running your own music biz: you can be mobile and teach in your clients’ homes, or you can run it out of your own space (a separate building or designated area of your home.) To get started, try to connect with local music schools for part-time gigs, which will allow you to see if you really like it, and also help you build a reputation with clients.33. UPHOLSTERINGIf you have a knack for sewing, upholstery repair might be a perfect business for you. One of the best ways to learn how to upholster is to get some discarded upholstered furniture and start tearing it apart. Many books and some videos are available to help you learn this trade. Often furniture ready for upholstering will also need repairs. Have a list available of furniture repair people you can recommend to your customers. Or you can take the piece in, have repair people you work with do this work for you, and add it to the overall cost. You can also learn to do this work, especially minor repairs, yourself.34. USED BOOK SALESAlmost everyone has a few boxes of books stashed away in the house somewhere. Why not make a business out of them? In order to gain customers--especially repeat customers--you will need to have some regular shop hours. Make your shop known for something-a specific category (or two) of books, having some first editions for sale, all paperbacks a dollar and all hardcovers two bucks, and/or a swap program. Maps, illustrations, postcards, greeting cards and magazines are good sidelines to include in your shop.35. WEDDING PLANNERYou will need to be up-to-date on wedding trends and fads, dress styles, color trends--almost everything under the sun! Offer your customers an ala carte menu of services, from helping pick flowers, the wedding gown and bridesmaid dresses to picking the venue and hiring the caterer. Before you open your business, shop at all the wedding shops, and even pretend you are a bride-to-be to see what kinds of services the wedding gown shop provides and how they treat potential customers. You need to know every detail of the business to give the accurate impression that you are the go-to person for anyone planning a wedding.36. APPLIANCE REPAIRExperience, training or licensing may be neededEvery household has a number of appliances, large and small. You can work on your own or on contract with appliance stores to cover their warranty service calls--or, best of all, you can do some of each. Plan to start slow and build your customer base on recommendations and referrals based on work well done. Consider developing relationships with contractors to be the go-to person to install appliances in newly constructed houses.37. COMPUTER TRAININGExperience, training or licensing may be neededHas expansion possibilitiesIf you are proficient in both Macintosh and PC, you should offer training in both types of computers. You could probably make a living helping seniors learn how to use the internet and e-mail to keep in touch with their loved ones, who are now commonly spread around the country. Err on the side of caution in this business. People do not want to know all the details about what makes a computer work. If you overload them with information from the beginning by explaining bits, bytes, and megapixels, they will stick to their paper and pencil forever.38. DESKTOP PUBLISHERExperience, training or licensing may be neededYou can use desktop publishing software to create newsletters, magazines, books or even marketing materials. You can create the content for your desktop publications, or you can pay a writer to create the content for you. Alternatively, you can advertise your desktop publishing services to design and create newsletters and books for others with their content.39. FENCE INSTALLATIONSFences are everywhere. And they don't last forever, so they need to be repaired and replaced with a certain amount of frequency. The most common fence material is wood. However, vinyl has become a popular fence choice due to its longevity and relative freedom from maintenance. Wrought iron is another common fencing, especially in urban environments. You can have fun shopping for vintage wrought iron fencing at salvage yards.40. FREELANCE GRAPHIC DESIGNERExperience, training or licensing may be neededDespite the proliferation of the internet, print media is here to stay for the foreseeable future! Fliers, newsletters, magazines, information sheets, letters and advertisements are just a few of the types of print media that business hire freelancers to create for them. Websites and online advertising need graphic design services as well. Even if your expertise is only in design, offer the works for potential clients, including the editorial creation and the printing and even mailing of the final piece. You can line up regular freelancers for those parts of the job you can't do.41. GIFT BASKET SERVICEHas expansion possibilitiesFinding a niche is the best way to start out in the gift basket business. Are you a dog lover, horse lover, or exercise guru who could put together baskets that hold the things that people with this interest would like? Do you already create a product that a gift basket could be built around? Have you made your own soaps for the past 10 years? A gift basket that included one or two of your soaps, hand lotion, a scrub brush and manicure kit could be a lovely basket to receive.42. GRAFFITI REMOVALCreate an arsenal of cleaning products that can clean almost every kind of product (paint, chalk, markers) from every kind of surface (cement, wood, pavement). The best way to conduct a graffiti service is to offer a subscription-like arrangement. Once a month or whatever interval makes sense for your clients, go around to their property and clean off the graffiti. Charge them a monthly or quarterly fee and make it simple for everyone--they don't have to think about graffiti, and you just do your job.43. HAIRSTYLISTExperience, training or licensing may be neededHairstyling is a popular business that can be quite lucrative. Generally a home based hairstylist business is likely to be started by someone who has already has a cosmetology career and wants a change. If you already have your cosmetology training and license, and loads of experience under your belt working in a hairstyling salon, you probably have a following that will follow you right home without any hesitation.44. HERBAL FARM STANDYou need to decide whether you will sell your herbs as live plants, picked or cut in bunches and packed, or dried. If you plan to market to cooks instead of gardeners, you will want to sell your herbs either fresh cut and packed in sealed bags, or dried and sold in baggies. You can also consider a "pick-your-own" arrangement; however, be aware that herbs are more delicate than most P.Y.O. products. You may save your garden a lot of strife and your plants a lot of wear and tear if you do the picking.45. LANDSCAPERExperience, training or licensing may be neededIf you have a knack for this type of work, a degree won't be necessary. Most people want their yards tidied up in the spring, their lawns mowed in the summer, their leaves removed in the fall, and their shrubs and driveways ready for winter snow. You will also want to offer garden work such as spring planting of annuals and perennials; vegetable garden preparation, planting and fall cleanup; pest control and watering. You can offer tree care service. There is plenty to do in the yard that has nothing to do with plants: stone wall restoration, fencing, irrigation system installation.46. MASSAGE THERAPISTExperience, training or licensing may be neededYou will want to become certified in massage therapy to be able to effectively market your services. Courses that lead to certification include not only information on human anatomy and physiology and the effects that massage has on both, but also on how to make a business out of the field of massage. You could do either a certification program or an associate's degree and stay within the $5,000 scope of this book.47. MOVING SERVICELots of people who are moving want to hire someone to do the heavy lifting for them. You can leave the large-scale, long-distance moving to the big moving companies. Your work can be the local, moving-across-town or to the town-next-door jobs. These are the ones that people start off thinking perhaps they could do themselves, and it will be your job to convince them otherwise. Your signs around town will tempt them to let you take care of that part of the move, while they are busy taking care of those other 500 items on their list.48. FRANCHISE OWNERThe benefits of owning a franchise are many: you have a proven business model, a built-in brand and corporate support. And the good news, not every franchise will cost you millions of dollars to start. There are many you can start for less than $10,000, in fact, including: Dream Vacations, Cruise Planners and Jazzercise Inc.49. PHOTOGRAPHERExperience, training or licensing may be neededMaking money as a photographer can be done in a number of different ways. You can specialize in one area, the most common being weddings. There are niches you can explore for photography: portraits of people and their pets, families, and homes; photographs of holiday events, birthday parties or Christmas cards; the possibilities are endless.50. RUG CLEANINGYou will need to learn how to work with all kinds of carpet fabrics, from synthetic to wool carpets. Decide whether you will take on valuable antique carpets and family heirlooms; if so, you will want to get specialized training in how to handle these carpets and the specialized ways of cleaning them. Learn how to get tough stains and odors out of carpets--such as dog and cat odors--and your services will be in great demand.51. WEBSITE DEVELOPERExperience, training or licensing may be neededMany courses exist (many of which, logically, are offered online) where you can learn the language of website creation and can learn about the details, like how to set up shopping cart systems, security concerns, etc. You will, of course, need to learn about each company you design for. What is the atmosphere of the company that you need to reflect in the website design--is it wild and contemporary, meaning brilliant colors and fun graphics? Or will more classic colors like black, navy blue and maroon be more appropriate?52. BED AND BREAKFASTDo you have a room that has its own bathroom and is private from the rest of the living space? Are you near attractions such as a tourist area, sports stadium or venue for a large annual event? Or is your home in the country with spring peepers, summer crickets and crisp fall nights that could give a city-dweller a weekend of peaceful living? Say you can rent the room for $150 a night for Friday and Saturday nights 48 weeks a year--that's $14,400 in revenue! Utilize what you have and create a unique experience.53. CHRISTMAS TREE SALESIf you want to start a Christmas tree farm, you need to plan ahead. It takes approximately seven years for a Balsam fir--perhaps the most traditional Christmas tree--to grow from a small sapling to a 5- to 6-foot tree. Selling your trees yourself is the best option. Consumers come to the property, pick the one they want, and you harvest it for them. The other option is to buy your trees from a wholesaler and sell them either in your yard or in a vacant lot that you rent from Thanksgiving to Christmas.54. DAY CAREExperience, training or licensing may be neededPerhaps you love children. Perhaps you have children of your own and the idea of taking care of a few more for part of the day appeals to you. Childcare needs continue to soar in the United States. Many people prefer the option of their child being cared for in a home environment while they are at work, as opposed to a more institutional-like setting. These things mean that a home-based childcare business can get off and running immediately.55. PET SITTINGExperience, training or licensing may be neededStarting a pet sitting service requires almost nothing in start-up costs. You do need some general credentials that will cost little or nothing to acquire. Your list of credentials should probably include personal pet ownership--if not currently, at least in the past--as well as other pet-related experience, including working at a pet food store, an animal hospital or other animal-related business. You will need to spend a little to become "bonded." This is known as "honesty insurance," and ensures your clients that you won't get their house keys and make off with their valuables (or that they'll get their money back if you do).If you like my answer ,Upvote and share.Thank you.