Mediaboss Marketing

The modern recruitment process is linear, often starting with a search for potential candidates who match available job positions and ending with the onboarding process. However, HR professionals and recruiters such as yourself can refine this recruitment procedure to fit your companys unique needs.

A refined recruitment process makes everything more efficient and cost-effective for your recruitment team and potential candidates. The big question is: How do you streamline your HR process so it fits like a glove along with your companys unique hiring needs?

Tailor the recruitment process to your companys unique needs by improving each step of the process flow so it works smoothly for your company.

In order to hire candidates that will be the best fit for your company, you need to make sure you know what your company needs. Think in terms of what the role requires, but also the type of candidate thatll be the best fit for your company. For example, an SMB welding company might have a strong focus on the technical skills of potential welders, while a media company looking for a social media manager might want a strong focus on both technical and personality skills. To help you streamline this process, itll help to ask yourself the following questions:

A job description is often a candidates first interaction with your company. Well-crafted job descriptions attract suitable candidates, while poorly written ones are often ignored. How do you perfect your job description? You can start with the following:

Make job descriptions clear and concise

When writing your job description for a role, be specific and concise about what you want. Be clear in the roles responsibilities, be non-comparative when describing the basic qualifications needed (education, work experience, etc.), and include behavioral capabilities for the job. An excellent guide for you to look at is Harvards hiring tool kit[1].

Create simple but clear job titles

Creating industry-standard and concise job titles will make sure your job description appears in search engine results. This is important because potential candidates cant apply if they cant find you. Avoid using terms such as rockstar, ninja, or clickbait titles such as Great opportunity for Millenials! Instead, use industry-standard titles such as TIG welder, fullstack engineer, social media manager, etc.

Use inclusive language

Make sure your job description is free of biased or discriminatory language[2] that may deter qualified candidates from applying. For best results, run your job description with an AI-based software that detects and ideally suggests alternatives for you to use. Also, let potential candidates know about your companys dedication to DEI[3] by posting an inclusive statement on all your job descriptions.

Recruitment is a lot like going fishingyou need to know where the fish are. There are many channels in which you can post your job ads, but the key to success is knowing where to post them.

To know where to post your job ads, you need to know who your potential candidates are and their preferred channels. You can even be unconventional and post jobs on Tinder[4] (a dating website) like Amazon did when looking for engineers. Or you can skip the written job posts altogether, create video job ads instead[5], and post them on Youtube and other social media channels.

After posting your job ads, youll want to monitor which channel you receive most of your job applications from. Knowing from where you get most of your job applications is a form of recruitment KPI[6]. This data helps you track which channel brings in the most qualified candidates that are a good fit for your company. Whichever source brings the most conversion is where you should channel your resources.

Instead of having just one person interview a candidate, create a team. A team will be able to get different types of information from the candidates and eliminate any personal bias that may creep in during interviews. When creating your interview team, consider people with diverse backgrounds and characteristics who will be respectful of different cultures and situations. The FAS in Harvard[1] suggests limiting your interview team to no more than four members. When youve assembled your team, be clear about each team members role, and assign one person to be the decision-maker in the group.

Solid onboarding can make a big difference to a team members success. The sooner your new team member is working, the sooner they will feel integrated and valued. Research by Glassdoor says companies with good onboarding improve the retention of new hires by 82%.[7] Below are some ways you can ensure an excellent experience for your new team members:

Fine-tuning your recruitment process with the right strategies to fit your companys needs ensures youll be getting a diverse set of applicants so you can find the perfect team memberall while being cost-effective. Remember there is no perfect recruitment process, only the process thats a great fit for your company. Are you looking for tools that can help refine your recruitment process? Take a look at some of the top recruiting solutions that can help you.

Sources

1. Staff hiring at the faculty of arts and sciences, Harvard University Faculty of Arts and Sciences

2. Do your job ads use discriminatory language? You may not realize they do., Recruiter.com

3. DEI definitions, The University of Iowa

4. Amazon advertise new job openings on tinder, Global Dating Insights

5. 21 of the best video ads of all time, Wyzowl

6. 9 recruitment kpis to measure success in your organization, AIHR

7. The true cost of a bad hire [PDF], Brandon Hall Group

Visit link:
How To Perfect the Recruitment Process - Software Advice

Andrew Hunzicker is a CPA and CEO of DOPE CFO, which provides accounting and bookkeeping training programs for financial professionals in the cannabis industry. Views are the author's own.

Professionals, finance executives and accountants who are new to the cannabis sector and have never worked with large sums of cash are often finding themselves in a bind by relying on accounting controls from the past that likely wont work in this industry.

The fact of the matter is that if you want to successfully keep your cannabis company or clients in compliance, you have to implement solid internal controls over paying bills in a timely manner and maintaining pristine records of each payment, daily cash counts and segregation of duties.

Accounting professionals and financial report preparers often misinterpret tax codes in an effort to increase deductions that dispensaries may not be allowed to take. This means that the CEOs and CFOs who are heavily relying on their accounting teams are unknowingly putting their company at risk of large fees, or worse, being shut down for not following the correct procedures.

One area of confusion for many is section 280e of the Internal Revenue Code (IRC), which is what stops cannabis operations like dispensaries from getting tax deductions. Because it remains classified as a Schedule 1 substance, any business that distributes or owns cannabis products is technically trafficking it, regardless of the intent.There are no cutting corners or loopholes to get around 280E and find deductions; the IRS is more than aware of the games being played and is putting its foot down.

Since cannabis companies cant take deductions or credits like traditional companies, they dont have many options when it comes to reducing tax liability; in fact, the only way to do so is by relying on section 471 of the IRC to determine which costs can be allocated via cost accounting to inventory and eventually to Cost of Goods Sold (COGS). This process is highly complex, even more so for dispensaries.

So, how exactly do you get deductions for dispensaries?

The answer lies within COGS and the IRCs 471 section. However, the application of the tax rules vary from vertical to vertical within the cannabis industry, making it even more difficult for dispensaries than for a farm or manufacturing type of business in this space.

One general rule that applies for all cannabis companies is the use of inventories and the method used has to unquestionably reflect the companys income and align with the way a company accounts for inventory in the financials.

For dispensaries specifically, regulations essentially allow a dispensary taxable income to be lowered via COGS if the accountant is making sure to do it correctly. Because the IRS is so strict, its essential that cannabis accounting professionals are keeping track of their clients inventory accounting if the company hopes to be able to successfully pass an IRS audit.

Poor bookkeeping is no joke, and the legal fines a company may have to pay can be over $70,000, or more. Just take a look at the Alterman v. Commissioner case if you need a cautionary accounting tale. The 2018 Tax Court decision upheld a 20% tax penalty on the taxpayer for underpayment of the tax liability related to deductions taken, according to a June 15, 2018 report from the law firm Lowndes.

Still, success is more than possible when you follow the correct procedures and understand how to adhere to IRC 280E and 471.

One of the other unfortunate aspects of accounting for dispensaries is that there arent very many tools out there that can make an accounting professionals life easier in the cannabis sector. With state-mandated seed to sale, coupled with POS systems that are poorly integrated and hard to reconcile, there are a number of added headaches around dealing with cannabis.

Cash controls are a whole other issue since banking is pretty much non-existent in many states. Local licensing authorities are holding owners responsible for having adequate security measures in place, so companies cant use theft as an excuse for missing cash.

To add insult to injury, accounting software often isnt cannabis friendly, so youll need a dispensary-specific chart of accounts and work papers so that you can do proper GAAP accounting if you plan to take any allowable deductions.

In short, the best way for a company in the cannabis sector to succeed is to implement annual, quarterly, monthly, weekly, and daily procedures for dispensary accounting and to strictly adhere to both GAAP and IRC 280E so that the business can correctly minimize taxes.

Go here to read the rest:
The ABCs and IRCs of cannabis accounting - CFO Dive

In his fortnightly I.T Crowd column, Philip Brooks, of Diamond Byte Solutions, Wisbech, guides us through free software...

There is a wealth of free software available for PCs and its a real mix of must-have programs and programs that are just fun to play around with.

Lets have a look at just a few:

Ninite is a secure and easy-to-use online service that allows users to install multiple software programs onto a computer (Windows only) all at once.

To do this, go to the Ninite website, select which free software youd like to install, then click Get Installer to receive an .exe file which contains the installers for all these programs. Because applications are installed from their official websites, the latest official versions are always downloaded.

Moreover, it automatically declines any adware and bloatware using the option to deselect the adware or suspicious extensions during the installation process.

Photo Editing: Paint.net is a quick, easy to operate photo editor, ideal for simple editing. It isnt a rubbish copy of Microsofts basic Paint its a proper photo editor with advanced editing tools such as layers, an undo history, a choice of filters, many community-created plugins, and a brilliant 3D rotate/zoom function

Office suite: Libre Office

Available completely free of charge, Libre Office includes tools for word processing, presentations and spreadsheets and is fully compatible with Microsoft document formats.

It includes hundreds of free fonts and templates and has a clear, easy to use interface.

All of the most common tools and options are intuitively placed so you wont spend ages searching for the setting or tool that you need. It even allows you to convert PDF files into Word format.

Media player: VLC Media Player

VLC Media Player has a simple interface and is compatible with almost all video and audio formats. It supports DVDs and Blu Rays, plus MPEG and DivX streaming and can play videos as theyre downloading.

Security : Dashlane and LastPass are brilliant password managers, which let you generate and securely store unlimited unique and strong passwords quickly and easily.

Almost all of us have to keep track of a load of different passwords, due to the increasing number of web-based services we use, which is not easy (as we have mentioned many times before, NEVER pick one password, then re-use it over and over).

But with a password manager, all you need to remember is one master password just make sure its both secure and memorable.

Do note that the free versions are limited to a single device if you wish to use them across multiple devices (recommended for security), you will need to upgrade to the paid versions.

Originally posted here:
Taking a look at the best free software out there for you - Fenland Citizen

More than 85 per cent of India's Internet runs on Free and open-source software (FOSS). It is ubiquitous in our lives and serves as the backbone of operating systems, digital public infrastructure, communication platforms and the Internet. However, due to its decentralised nature, open-source is underappreciated, and we are often unaware of its existence.

The recent log4j security vulnerability showed the extent of our dependence on FOSS. The White House National Security Council even had a meeting in January 2022 with tech giants and open-source organisations to identify paths to prevent such incidents in the future. It is not surprising that it takes a security breach that threatens the most powerful governments and companies for us to think about the extent of our dependence on open-source software.

Free and open-source software is software where the source code is openly shared, and it is free to use, copy, study and change. As Richard Stallman puts it, "Think free, as in free speech, not free beer." Open-source principles can be applied across verticals such as software, hardware, content, algorithms and standards. The gains from these various open-source technologies far outweigh the costs associated with them, and they accrue to stakeholders across the market, society, individual and government categories. Some of the gains for different stakeholders are explored below.

Also Read:Can we imagine life without the World Wide Web?

A recent report sponsored by the EU found that companies located in the EU invested around 1 billion in FOSS in 2018. The authors estimate that a 10 per cent increase in contributions would lead to a 0.4 per cent to 0.6 per cent increase in GDP and generate more than 600 ICT start-ups annually.

FOSS is closely interlinked with software development, and it is estimated that 97 per cent of code bases contain open-source. It helps companies access high-quality code while avoiding vendor lock-in and lowering costs. There are various monetisation models to build a business case around open-source. These include providing paid services such as training and technical support, adopting a freemium model, and crowdfunding desired features.

Sharing non-differentiating features as open-source also have several advantages for companies. When Google open-sourced their machine learning framework TensorFlow in late 2015, they benefited from the increased adoption of the framework leading to crowd-sourced innovation. It is now the most ubiquitous AI platform, and Google benefits from the talent pool in a niche technology.

Wikipedia, the world's largest encyclopaedia, is funded by donations and maintained by unpaid volunteers. The infrastructure that powers the Information Age rests on a foundation built on open-source software such as Linux and Apache, among many others. According to GitHub, India has the third-highest number of active developers. The number of developers contributing to open-source is growing fast, and India is poised to become one of the major contributors to FOSS.

A recent study finds that individuals contributing to open source projects are intrinsically motivated by feelings of altruism, fun, or kinship. Many contributors also seek the reputation and career advancement to be gained from working on open-source projects. Although there exist avenues for funding, it often relies on donations based on the goodwill of others. This issustainable for only the most popular projects. The maintenance cost is minuscule compared to the cost of the damages incurred due to the vulnerabilities such as log4j.

Some interesting aspects of FOSS are visible in the popular open-source chess platform lichess.org. It is a free-to-play, crowd-sources learning module and is funded by donations. Unlike other platforms, it has features such as requesting your opponent for a move to be taken back and granting your opponent extra time in a timed game. The non-zero-sum approach that open-source principles espouse percolates into various aspects of open-source products.

Also Read:Govt working to provide high-speed internet to every village, says PM

From the government's perspective, the economic motivations for promoting open-source can be broadly classified under cost savings, avoiding switching costs and network effects, underproduction due to weak incentives, and technology neutrality. These are especially important in the Indian context. The Kerala government has been a pioneer by officially supporting FOSS in the State IT Policy in 2001. In a phased manner, Linux and other FOSS have been adopted by various government departments and schools. The government of Kerala has also set up an autonomous nodal agency (ICFOSS) to work on improving the adoption and innovation around FOSS. It also works closely with FOSS communities such as SPACE to build open digital infrastructure.

The desire for "Digital Sovereignty" unconstrained by state intervention, technology oligopoly, and international geopolitics is also a major motivation for governments. The open nature of open-source implies it is more customisable and available. This leads to reduced dependence on proprietary technologies from companies based elsewhere.

India needs to leverage technology to overcome developmental challenges, and the various advantages of open source present it as a promising option. However, due to its nature, open-source suffers from market failures. The market does not adequately incentivise creators to keep developing and maintaining open-source projects. A comprehensive strategy to nurture and promote the adoption of open-source technologies is necessary for India.

(Bharath Reddy is a programme manager for the technology and policy programme at The Takshashila Institution)

Disclaimer: The views expressed above are the author's own. They do not necessarily reflect the views of DH.

Read more from the original source:
Nurturing open source is in our national interest - Deccan Herald

Article by Dynatrace vice president of A/NZ Hope Powers.

The use of DevSecOps practices is growing, as it is increasingly seen as the best way to produce high-quality and secure code. More than one-third (36%) of respondents to GitLabs 2021 Global DevSecOps Survey reported developing software using DevSecOps, up from 27% in 2020.

This growth is driven by organisations realising that application quality and security are essential to their ability to streamline continuous integration and delivery (CI/CD) and accelerate innovation. They need to balance pressure to develop software rapidly with the need to ensure it remains secure and is optimised for todays cloud environments. This can be quite a challenge.

GitLabs Fifth Annual Global DevSecOps Survey (2020) found 60% of developers are releasing code twice as fast by using DevOps. However, speed often comes at the expense of security. A survey of CISO leaders last year found that 71% of CISOs admit they are not fully confident code is free of vulnerabilities before going live in production.

To enable software to be developed rapidly and securely, DevSecOps teams need to automate all stages of the lifecycle. They need shared solutions and platforms that converge observabilitythe ability to measure a systems current state based on the data it generates, such as logs, metrics and traceswith security, so they can spot security gapsand identify poor quality code and other software development issues.

In a survey of 250 enterprises in the US and UK with more USD $1 billion in revenue, 96% of respondents expected to benefit by automating their compliance and security processes, a fundamental goal of DevSecOps.

As DevSecOps continues to gather momentum, here are some key trends.

1. Infrastructure as code (IaC) uptake is rising

Infrastructure-as-Code (IaC), aka software-defined infrastructure, is the management of hardware using code. It enables IT hardware resources to be configured, managed, monitored and provisioned using software rather than manual processes.

According to Gartner, 60% of organisations will be using infrastructure automation tools as part of their DevOps strategy by 2023, improving application deployment efficiency by 25%. In addition, defining infrastructure as code enables greater automation throughout the delivery pipeline, making it easier to replicate the testing and deployment process for new code. This is essential for accelerated DevSecOps adoption.

The same code can be used every time a particular infrastructure configuration is needed, so the benefits in time and effort saved are greatly increased. IaC can also benefit DevSecOps by reducing human error. Processes enshrined in code are secure and repeatable, lending themselves to automation and ensuring the correct execution ofhighly complex processes.

2. Attacks via vulnerable third-party code are growing

Many organisations make use of third-party code and software libraries in their development of new digital services. Any vulnerabilities in this code expose their applications to cyber attacks.

To guard against this, organisations must monitor their use of third-party code so they can patch any new vulnerabilities that are discovered. For example, in December 2021, a vulnerability known as Log4Shell was discovered in versions 2.0 and 2.14.1 of Log4j 2, a popular Java library. Log4Shell enables an attacker to use remote code execution to engage with software that uses Log4j and gain access to networks and sensitive data. Many organisations were forced to take devices and applications offline while they identified whether Log4j had been used in any stage of software production, from development to runtime.

In a blog, author and developer advocate Nicolas Frnkel wrote, Wise developers dont reinvent the wheel: they use existing libraries and/or frameworks. From a security point of view, it means users of such third-party code should carefully audit it. We should look for flaws: both bugs and vulnerabilities.

Log4Shell certainly will not be the last such vulnerability, as the more recent discovery of Spring4Shell has already shown. To guard against the next one, organisations should deploy observability platforms that can provide deep and broad insights into their applications to quickly identify any code flagged as vulnerable.

3. Root-cause analysis using AIOps will be essential

Gartner defines artificial intelligence for IT operations (AIOps) as the combination of big data and machine learning to automate IT operations processes, including event correlation, anomaly detection, and causality determination.

Such automation is becoming essential to enable DevSecOps teams to manage cloud environments whose complexity is putting them beyond the capabilities of manual processes. AIOps can analyse data on activity in real-time, helping to prevent DevSecOps teams being overwhelmed by alert storms and providing precise answers that enable them to innovate more rapidly.

According to a Forbes article, AIOps is moving from marketing hype to a useful tool being adopted across the enterprise. It explains that the AI algorithms underpinning AIOps are becoming increasingly sophisticated. They enable AIOps tools to discover data relationships more rapidly, identify the root cause of IT issues in real-time and, in some cases, remediate them automatically.Such abilities are becoming essential to enable DevSecOps teams to test code while it is being developed and to identify new vulnerabilities during pre-production before code is deployed.

4. MLOps is no match for AIOps

Machine Learning Operations (MLOps) is a set of management practices designed to aid the effective and efficient deployment and maintenance of machine learning in production environments. It is often confused with AIOps but is quite different.

MLOps can only suggest a relationship between a problem and a possible solution. AIOps identifies problems precisely and provides actionable answers. MLOps systems must be trained to distinguish normal from abnormal behaviour. Data models must be verified, which requires time and effort from DevSecOps teams - time that could be spent on more strategic priorities.

In contrast, AIOps automates these tasks by combining AI algorithms with data analytics. It can accurately identify many common IT issues such as unexpected downtime or unauthorised data access and suggest appropriate remedies. These algorithms do not need to be trained, freeing IT teams from routine monitoring tasks and enabling them to focus on tasks that directly support business priorities and drive better outcomes.

Dynatrace vice president of A/NZ Hope Powers.

5. GitOps gains wide acceptance

GitOps is a set of practices for infrastructure management based on DevOps best practices for application development: version control, collaboration, compliance, CI/CD tooling. It is based on Git, an open-source tool developed for source code management in DevOps.In GitOps, Git becomes a single source of truth and a control mechanism to support dynamic creation, including updating and deleting system architecture specifications.

It automates and centralises the deployment and verification of infrastructure modifications via pull requests, giving teams greater control over their environment and enabling them to deliver better digital services faster.

6. The role of Kubernetes grows

Kubernetes, the open-source platform built to orchestrate the management, deployment, and scaling of microservices architectures, underpins all these aspects of DevSecOps and digital transformation.

Kubernetes enables a microservices-based application to be moved quickly and reliably between environments, for example, from a development to a production environment. It also makes application developers more productive. With microservices-based deployments supported by Kubernetes, multiple teams can simultaneously deal with different aspects of a project, accelerating development and identifying and fixing problems faster.

Kubernetes has been a game-changer for application development. It has enabled developers to better accommodate customer requirements, share resources across cloud platforms, and accelerate the building, testing and deployment of DevSecOps pipelines.

7. Serverless uptake soars

Serverless computing is a cloud-based, on-demand execution model where customers consume resources solely based on their usage by applications.It greatly appeals to developers wanting to build and scale out applications without worrying about the underlying infrastructure. The cloud service providers take care of this and supply the tools that enable app developers to create their applications in modules according to the cloud infrastructure they require. Serverless computing can also reduce costs and improve disaster recovery and resilience because the resources used are supported by the cloud providers inbuilt redundancy and availability features.

8. DevSecOps comes of age

Ultimately, companies undertaking digital transformation will struggle to succeed without DevSecOps.

However, to successfully exploit DevSecOps, development teams need platforms that streamline the entire software development lifecycle, facilitate cross-team collaboration and automate processes wherever possible.

See original here:
Eight top DevSecOps trends to support IT innovation in 2022 - IT Brief Australia