Businesses large and small face a growing threat from cyber attacks. The annual cost of cyber attacks on small and medium size business can reach nearly £200,000 which puts a massive financial strain on companies that don’t have the money lying around. Below are a few simple ways to protect your business from cyber-attacks.
Firewalls are like building security systems for computers. They control the flow of data coming in and out to prevent unauthorised access to your network. Some operating systems include a built-in firewall but even if your does, it would be wise to consider adding another layer of protection. Make sure you plan ahead by researching the best type of firewall for your business’s network.
Wi-Fi can be an easy access point for potential cyber hackers. If you use a Wi-Fi network in the office, make sure it’s invisible to outsiders, encrypted and secure. Set up your router to require a password for access and set your wireless access point so it does not broadcast the network name.
It might be annoying to regularly update your password but this is a crucial step in keeping your business secure. But how often exactly should you update them? There isn’t a set timeframe to carry this out but we would advise updating passwords around every two months.
Make sure you are using strong password each time. Make a password atlas 8 characters long with a mix of letters, numbers and symbols. Never use personal information that hackers can get easy access to online such as the name of your spouse, kids, pets or any of their both dates.
By nature, we humans are inquisitive, trusting and often quick to be helpful. Attackers know this and take full advantage of it in order to circumvent organisations’ security controls. You should educate your employees about the types of information that are sensitive or confidential and their responsibilities to protect that data. It’s important to train your employees on the basics of security and the best practices when it comes to browsing the web and sending emails.
Security tests can only ever be a point-in-time assessment. While annual or biannual testing may satisfy legal or risk compliance, it doesn’t accurately represent the dynamic cyber threats your business faces. Most organisations commission and decommission systems regularly and modify content daily. This constant change necessitates more frequent security testing whenever significant changes are made.