Why would anyone steal an unpublished manuscript?▼
Motives vary. Some want early access to a high-profile title, some sell or leak it, and some seem driven by curiosity or status. The publishing industry has seen a long-running scheme where an impostor used lookalike email addresses to pose as editors and agents and request unpublished drafts. Whatever the motive, the method is usually the same: convincing email from a domain that looks almost right. That's why we focus on impersonation filtering, controlled sharing and training editors to verify unusual requests.
How should we share drafts with agents and authors?▼
Use shared folders with access controls and expiring links rather than attachments. Each title gets its own folder, with access limited to the people working on it. Links can require sign-in, block downloads when appropriate and expire after a set time. Access is logged, so you can see who opened what. When an unfamiliar address asks for a draft, editors check with the agent or author through a known contact before sending anything.
An author emailed asking to change where royalties are paid. What should we do?▼
Don't change anything from the email alone. Call the author or agent using contact details already on file, not ones in the message, and confirm the change verbally. Fraudsters often time these requests just before a royalty run. We set up the written rule, protect finance mailboxes with MFA and alert on suspicious inbox rules. If a payment has already been redirected, contact your bank immediately and we'll help investigate the mailbox side.
Our CMS is hosted by a vendor. What do you secure?▼
The vendor secures its platform; you control who logs in and what they can do. We set up SSO or MFA for every user, separate contributor, editor and publisher roles, remove departed staff and freelancers promptly and review admin accounts. On self-hosted sites, we also patch plugins and themes and monitor for unexpected changes. Most CMS takeovers come from a stolen or reused password on an account with more rights than it needed.
Do PCI DSS rules apply to our subscriptions?▼
If you take card payments for subscriptions, memberships or direct sales, PCI DSS applies in some form, usually through a self-assessment your processor requests. The simplest approach is keeping card data entirely within your subscription platform or processor using hosted payment pages and stored tokens. We help confirm your setup works that way, look for places card numbers might be captured outside it, such as customer service notes, and gather details for the questionnaire.
We rely heavily on freelancers. How do you manage their access?▼
Each freelancer gets their own account or guest access scoped to the titles or sections they're working on, with MFA required. We set an end date when the project is booked and remove access when the work is delivered. Shared logins are replaced with individual ones so you can see who did what. If a freelancer's own email is compromised, their limited access caps the damage to the project at hand rather than your entire list.
Do you provide Publishers IT Services in Houston and nearby areas?▼
Yes. LayerLogix is based in the Greater Houston area and delivers publishers IT services to businesses across Houston and the surrounding communities, including The Woodlands, Spring, Katy, Sugar Land, Conroe, Cypress, and Pearland. For most Houston-area clients we can be on-site the same day when something needs hands-on attention, and our help desk is available during business hours, with after-hours emergency support. Call 713-571-2390 to check coverage for your specific address.
What does Publishers IT Services cost for a Houston business?▼
Pricing depends on your size and what you need, so we do not publish a one-size-fits-all number — but Houston businesses generally pay a flat, predictable monthly fee rather than surprise hourly bills. We start with a free, no-obligation assessment of your current setup, then give you a clear quote in plain English with no hidden costs. That way you know exactly what you are getting and what it costs before you commit.