design & marketing blog

WordFence’s blog posted an excellent article addressing the fallacy that many website owners have that their website isn’t significant enough for hackers to care about and therefore they don’t need to implement all best practice security and disaster recovery measures.

A quick summary of the reasons why attackers make the effort to attack many smaller and seemingly “insignificant” websites include:

• If offers server resources they can use to run other malicious schemes
• It’s connected to the internet and likely has a good reputation (i.e. is not a suspicious platform for malicious activity).
• It may contain user data
• It probably has traffic coming to it
• The site is important to you and therefore there is a chance for the criminal to collect a ransom
• Many websites of smaller businesses and organizations are not implementing proper security and therefore the cost of acquisition to the criminal is low.

Please read the entire article at WordFence.com.

Web accessibility refers to providing websites that are usable by individuals with disabilities. Approximately 10% of the population has a disability that affects computer use. Website accessibility primarily addresses disabilities related to vision, motor skills, mobility, hearing, and seizures.

Web accessibility is on track to potentially revolutionize how businesses and organizations provide online assets both internally and to the public, and is something every organization should be aware of regarding both their Internet and intranet applications.

Modern commercial building construction is required by law to include accessibility features such as wheelchair ramps, lower height drinking fountains, and minimum clearance specs for restrooms. If they do not provide these features they will exclude a portion of the population who is disabled from the ability to equally access and utilize the services housed in those buildings. In addition, they may open themselves up to legal action and may be fined by the Department of Justice (DOJ) or sued by private parties under the provisions of the Americans with Disabilities Act (ADA) and/or other laws that pertain to accessibility.

In the same manner that the commercial construction industry was changed by the requirements of the ADA the digital workspace is being transformed now.

Web Accessibility Laws

Until recently, the standards for web accessibility were not clearly defined and the DOJ did not actively enforce standards. There has been a significant shift in both the refinement of web accessibility standards and the active enforcement of such standards by the DOJ. Because of the DOJ’s active enforcement, private litigation has increased.

The current standards to which organizations are being held accountable are WCAG 2.0 AA. You may have heard of Section 508 web accessibility standards, which were less comprehensive than WCAG. WCAG 2.0 AA standards are being adopted as Section 508 requirements.

Accessibility standards and enforcement of those standards is still a developing area; however there is no doubt that any business or organization website should take measures now to ensure their website is accessible according to WCAG 2.0 AA.

Wordfence recently posted an article on their site about a significant new threat to WordPress sites … ransomware.

While WordPress and CMS’s in general continue to pose a significant risk for hacking, ransomware until now has been confined to Windows operating systems on PCs. According to Wordfence, they recently identified attempts to upload ransomware to WordPress sites that “provides an attacker with the ability to encrypt a WordPress website’s files and then extort money from the site owner.”

WordPress is already the most vulnerable platform for hacking (See Securi’s Hacked Website Report – 2016/Q3), adding the risk of ransomware into the equation is another compelling reason for businesses and organizations to carefully evaluate the options, costs, benefits, and risks for deploying their websites on a CMS.

Risingline develops WordPress sites, but increasingly our recommendation to clients is to go with a professionally managed website (in which all management is done professionally off-server) rather than CMS’s; especially for their core public website pages. Professionally managed websites eliminate the vast majority of hacking (and now ransomware) risks that are inherent to CMS’s as well as providing other advantages such as quality control for SEO, accessibility, and style consistency.  For more detail please see our 2017 Web Development Trends and Best Practices Report.

In many cases, we’ve found a professionally managed website is not only much safer, faster and compliant but can have a lower total cost of ownership.

Terminology

Search Engine Marketing (SEM)

The process of gaining traffic and visibility from search engines and social media services through both paid and unpaid efforts; it can include Search Engine Optimization (SEO), pay per click (PPC), as well as related marketing tactics such as Google’s remarketing.

Search Engine Optimization (SEO)

SEO focuses on increasing website traffic and visibility “organically” … i.e., without explicitly paying for individual ads. There are two areas of SEO:

On-Site SEO
Optimal setup of a website and its server to ensure that search engines have full access can understand, and index a site’s content. Note: On-Site SEO is the only portion of SEM directly controlled by your website’s developer and content manager.

Off-Site SEO
Marketing efforts with the intention of developing backlinks from credible/authoritative sites in the same or complimentary industries to increase the authority of a website thus increasing the likelihood it will list higher in the organic listings on a Search Engine Result Page (SERP).

Pay Per Click (PPC) e.g. Google AdWords

Short advertisements that are displayed to search engine users based on the keywords you specify. PPC ads are typically displayed above the organic listings on a SERP. The price you pay is determined by bidding on your desired keywords. The more competition for your keywords the higher the bid price. You pay only when a user clicks on your ad after which they are directed to a landing page you specify to continue the sales process.

Google AdWords Remarketing (aka Ad Retargeting)

Remarketing is the use of cookies to track those users who have visited your website and presenting those users with ads, when possible, on other websites they visit. You only pay when a user clicks on those ads, but all the impressions up until then are free. Remarketing is a powerful and effective tool as creates multiple impressions with your prospects well after they’ve left your site.

Search Engine Results Page (SERP)

The results page a search engine displays after a search term is entered. A SERP includes results for both organic results (unpaid / via SEO) as well as sponsored results (the product of PPC). In addition, SERPs may also contain elements such as Google’s Instant Answers, Google Local listings, Google Maps listings, as well as other elements. The space and prevalence of organic results on Google SERPs have been decreasing over time as more SERP space continues to be allocated to PPC and other features.

SEM Strategies and Trends

SEO

Consistent, reliable, and predictable demand generation using only SEO has become increasingly difficult due to the massive amount of content on the Internet. It can be most effective for sites with a large amount of well-targeted content, or for sites with very specific targets. For example, the keyword “dentist” would be extremely difficult and costly to generate demand using SEO, whereas the keywords “dentist, implants, Chiloquin Oregon” would be relatively easy and inexpensive.

For any website, there is no reason on-site SEO best practices should not be implemented. The cost is low, and proper on-site optimization helps ensure the best readability for users and includes some crossover benefits for web accessibility. However, for many sites, returns on SEO demand generation quickly diminish due to the high cost of writing and publishing high-quality content on a continual basis. The amount, quality, and frequency of such content is the primary long-term determiner of a site’s authority and thus higher SERP listing.

Another major problem with using SEO for demand generation is that organic SERP listings are controlled by the ever changing and proprietary criteria of Google and other search engines and can be subject to subterfuge by competitors. You never have control or assurance that your current SERP listings will not change and you have no direct control over the process. For example, major updates by Google of their criteria have resulted in dramatic changes in SERP listings almost overnight.

Paid SEM (PPC and Remarketing)

Paid SEM offers the benefits of speed, control, testing, and predictability. Any website can pay to immediately bypass the years their competitor may have invested into establishing their SERP listing. Paid SEM puts campaign control directly into the hands of an organization rather than be subject to the determination of a third party and allows the fine tuning and testing with almost immediate results for adjustments and optimizing a campaign so that a cost per impression and return on investment can be calculated.  Paid SEM takes advantage of the trend of search engines to provide more prominence on SERPs to paid listings and offers opportunities to expand your demand generation off just your website. Paid SEM takes a significant financial commitment over time for success, which is also true for SEO. Paid SEM campaigns have the disadvantage of not directly building a site’s authority or establishing SEO equity. A year’s worth of SEO strategy would build equity whereas when a paid SEM campaign ends there is no direct equity built. However, increased paid traffic to a site can indirectly benefit SEO depending on the perceived value of the content on a site from those visitors who may in turn reference the site, producing organic backlinks. As it’s a common question, be aware that Google AdWords does not allow you to hijack search traffic for your competitor’s name or product names (assuming they are trademarked).

Which is best, SEO or paid search marketing?

This question is irrelevant if the messaging, usability, and value of your website is first not fine-tuned. Your website should be structured with your prospects and users in mind only (not search engines) so that it concisely presents your value proposition, firmly establishes your credibility, addresses potential objections, and provides an effortless path through your sales cycle. When a site’s messaging and content is optimized for your human prospects and users, you will have created the type of high-quality site that Google wants to provide its customers.

When considering where to put your time and resources into demand generation it’s important to not lose sight of the big picture. There may be other lower-cost opportunities to generate visitors utilizing resources that exist within your organization already or it may be more cost effective for you to put resources into other marketing avenues.

With those considerations in mind, where and how to generate demand through search engines will depend first on how sought after your prospects are by other entities. Your competition will include your direct competitors as well as use by any other industry of your keywords. Unique, low competition, and “long tail” (a part number for example) keywords tend to provide more opportunities for SEO, whereas highly competitive keywords may favor paid SEM.

The best approach will often be a combination of SEO and paid SEM. As mentioned earlier, for all sites there is no reason not to employ on-site SEO regardless of any other factor. In most cases, hiring a reputable and objective consultant to help you map out a strategy and implement a plan will result in a higher return on your investment. Even if you have a web developer on staff, engaging a consultant who is a subject matter expert to provide guidance can be well worth it. Be aware also that there are hordes of predators who market themselves as SEO experts and look to capitalize on misconceptions. The most easily identifiable ones are those who market by spam or phone calls; if they really were SEM experts they would be marketing themselves through search engines. However, even those who do market themselves through other channels should not necessarily be taken at face value. Look for a partner who has been in the business for years and who can provide customer references.