Cybersecurity Basics For Small Business

Cybersecurity is not just for large corporations. The truth is that it affects companies of all sizes. Smaller companies are often less prepared for an attack, which can result in a data breach and the loss of sensitive information.

This article will discuss how you can protect your business and reduce the risk of a cyber-attack. It will also provide you with some tips on how to stay safe online and what to do if your company has been hacked.

Cybersecurity: secure your files and devices

Update Your Software

It is important to protect your files and devices by keeping your software up-to-date. In order to keep your data secure, updating all of the apps, web browsers, and operating systems you use on a regular basis is essential.

  • Software vendors are constantly updating their products in order to patch security flaws that could put users at risk of being hacked or infected with malware.
  • By making sure you have the latest version installed on your device, you’re ensuring that malicious actors can’t take advantage of any vulnerabilities.
  • Additionally, many software updates also include new features and bug fixes which make them more reliable and user friendly.
  • To ensure maximum safety for yourself and other users, set updates to happen automatically.

Encrypt Devices

Encrypt your devices in order to protect sensitive information stored on them. Encryption ensures that any data stored on a device is only accessible by those with correct credentials, making it much harder for attackers to gain access.

  • If any of your devices are lost or stolen, encryption helps prevent anyone from accessing the data stored on them.
  • To ensure maximum safety it’s recommended that you use both software updates and encryption when securing your laptops, tablets, smartphones, removable drives, backup tapes, and cloud storage solutions.

Require Passwords

It’s no secret that passwords are the key to protecting our most important and sensitive data for cybersecurity. We all know that we should not use the same passwords for all of our laptops, tablets, and phones — but it can be hard to remember, especially when it seems like every website and device requires its own password.

Consider using a Password Manager to keep your passwords and follow these tips when choosing a pssword:

  • Never use personal information in a password including names, pet names, family members, previous addresses etc
  • Include a combination of letters (capitals and lower case), numbers and characters like @#$%).
  • Longer Passwords are better – consider using a short phrase with extra characters and numbers and mix up the lower/upper case
  • Never, ever repeat passwords
  • Do not share your passwords over unsecure ways such as email or text. Instead share through your password manager
cybersecurity: Protect your files and devices

Secure your Files

Backing up important files is essential for protecting them against data loss or corruption. There are typically two main options when it comes to backing up your files: either an external hard drive or online backup service.

  • Using an external hard drive is one option and there are benefits such as a hands-on way of storing your information. This type of backup allows you to physically store your data on a dedicated device however we would recommend the following:
    • A rotating backup should be used – this means you should have a minimum of 2 to 3 external hard drives used for rotating backups. eg: backup each day and remove that backup to another secure location. Often small business owners choose this option and take that backup home with them. The next day they do it again.
    • For cybersecurity, backup drives should be encrypted just in case they are stolen
    • These are mechanical drives and have a read/write life span and should be replaced on a schedule eg: every 12 months
    • Regularly check drives for corruptions
    • Know that if backup drive is plugged into a device at time of a cyber attack it can be corrupted. So, do not rely solely on one drive for backups.
    • Alternatively, using an online backup service is recommended if you’re looking for something more user-friendly and convenient. With this method, you can easily upload files and documents onto remote servers that are securely encrypted through cloud technology. Thus, you’ll know your information is always safe and secure no matter where you are in the world. There are many options available and it is also important to choose what data is backed up.

Secure Hard Copies

  • Securing paper documents is as important in keeping them safe and secure. Especially the ones that contain important personal and financial information.
    • Organize those files and create a distinct folders for each type of document and label them clearly.
    • Place all the folders in one central location. But make sure that it can be easily accessed when needed. And still isn’t publicly visible or vulnerable to theft or damage.
    • Keep any hard copies stored in locked cabinets or drawers. This is to ensure they don’t end up in the wrong hands.
    • Also, when disposing of paper documents that is no longer needed, always remember to shred them before throwing them out.

Use Multi-Factor Authentication

Multi-factor authentication (MFA) adds an extra layer of cybersecurity for all your accounts and files. Providing you with the peace of mind that your information is secure from malicious attacks.

  • When using MFA, users are required to provide additional credentials beyond just a username and password in order to gain access. This could be anything from a one-time passcode sent via text message or email, authenticator apps, to facial recognition software or biometric scanners.
  • With MFA enabled, hackers will be unable to gain access even if they have obtained your username and password. As they will not possess the necessary second factor authentication required.

Secure your Router

  • Change the default name and password, turn on remote management, and log out as the administrator once the router is set up. Use at least WPA2 encryption Make sure your router offers WPA2 or WPA3 encryption, and that it’s turned on. Encryption protects information sent over your network so it can’t be read by outsiders.
  • Install a Firewall

Require Strong Password

A strong password is at least 12 characters that are a mix of numbers, symbols, and capital lowercase letters. Never reuse passwords and don’t share them on the phone, in texts, or by email. Limit the number of unsuccessful log-in attempts to limit password guessing attacks.

Train All Staff

Create a culture of security by implementing a regular schedule of employee cybersecurity and awareness training. Update employees as you find out about new risks and vulnerabilities. If employees don’t attend, consider blocking their access to the network.

Have a Plan

Experience data breach is a serious issue for any business. It can have a huge impact on their reputation and even lead to bankruptcy. There are many ways that companies can protect themselves from experiencing data breaches, but the most important thing is to be proactive and prepared.

To avoid experience data breach, it is important for companies to be proactive and prepared.

  • They should have an incident response plan in place and know who they will notify in case of an emergency.
  • They should also know what information they need to collect about the breach, as well as how they will communicate with their customers about it.
  • Should also have policies and procedures that all staff are aware of, trained in and signed off on.

Don’t delay it, reduce your Cyber Risk now!