This is a continuous list of tried and tested cybersecurity tips for small businesses around the world to help prevent cyber attacks.
For more advice and enhancement to your business Cybersecurity (IT Security) book a Cybersecurity support session today if you're a small business based in Australia. If your business is based overseas find a local IT or Cybersecurity provider to help.
Why are we sharing Cybersecurity Tips for Small Business?
It helps us all be aware and more secure by taking certain actions to prevent a disaster in the organisation. When everyone in the organisation is informed then there is less likely a chance that one person ends up being the cause of a major IT disaster.
Contents
#2: Avoid clicking on ads online, links in SMS or Email or on Websites.
#5: Embrace Strong Passwords and Multi-Factor Authentication
#10: Improve Policies & Procedures
TIP #1: Don't install 3rd party apps before checking with IT
Scenario: If you are a staff member at a business and your colleague tells you about this cool app that does this, please always get IT to check whether the app is safe.
Prevents a Disaster:
You install a software laced with a ransomware virus.
This encrypts everything on your local computer and encrypts everything on company cloud storage shared drives like Sharepoint, OneDrive, Google Drive, Dropbox, Box etc.
Company is then out of action permanently or is crippled severely in service delivery.
What to do: So best advice is please don't install 3rd party apps from usb, email or websites before checking with IT. If you use Cyberkite for your IT, contact us to check the app before install and we will check the software in a number of ways and scan it for safety, then report back. This is especially true of free apps online as they sometimes come packaged with viruses or malware.
TIP #2: Avoid clicking on ads online, links in SMS or Email or on Websites.
Scenario: You get a link to do something via email but the email looks weird (badly formatted) or sender address is unrelated to the display name or when you hover over any links they show up as unrelated to that companies website.
Prevents a Disaster:
You press on the link
Installs a ransomware or other type of virus.
This encrypts everything on your local computer and encrypts everything on company cloud storage shared drives like Sharepoint, OneDrive, Google Drive, Dropbox, Box etc.
Company is then out of action permanently or is crippled severely in service delivery.
What to do: DO NOT CLICK ANYTHING suspicious. Do not click any online ads becuase you don't know which ones are safe and which ones are not. Check the sender email and display name and hover over any links to check if they are form the sender or show up as strange website link. Never click it. Submit a request to Cyberkite to check the email and the link to see if its safe.
TIP #3: Educate Your Employees (Awareness Training)
Scenario: Employees are often the first line of defense against cyberattacks. Phishing emails, malicious websites, and social engineering tactics can trick even the most tech-savvy people.
What to do:
Regularly training your staff on cybersecurity best practices can significantly reduce the risk of falling victim to these scams. If you're busy then book Cyberkite to help with that.
Training should cover topics like identifying phishing attempts, password security, and reporting suspicious activity.
Automated Cybersecurity Awareness Training software is ok but eventually staff get bored of it and the problems return. So human driven cyber awareness training tailored for your staff and sometimes better in-person is more effective and staff remember these reminders longer. Cyberkite can assist with that at an affordable rate. Book Cyberkite to help with that.
TIP #4: Keep Software Up to Date
Scenario: Cybercriminals are constantly looking for new vulnerabilities in software. Software developers release patches to fix these vulnerabilities, but if you don't install them, your systems remain exposed.
How to do that:
Enable automatic updates whenever possible for operating systems, applications, and firmware. This ensures you have the latest security measures in place.
If you're busy then book Cyberkite to help with that.
TIP #5: Embrace Strong Passwords and Multi-Factor Authentication
Explanation: Weak passwords are easy to crack, leaving your data vulnerable. Enforce a strong password policy that requires employees to use a combination of upper and lowercase letters, numbers, and symbols.
How to do that:
Consider a minimum password length of at least 14 characters (yes the length gets longer over time).
Multi-factor authentication (MFA) adds an extra layer of security by requiring a second verification step, like a code from your phone, when logging in to sensitive accounts.
If you're busy then book Cyberkite to help with that.
TIP #6: Back Up Your Data Regularly
Explanation: Cyberattacks can result in data loss.
How to do that?
Regularly backing up your critical data ensures you can recover it quickly in the event of an attack or other incident.
Consider a backup strategy that includes both local and cloud backups for added security.
If you're busy then book Cyberkite to help with setting this up.
Tip #7: Secure Your Wi-Fi Network
Explanation: Public Wi-Fi networks are often unsecured, making them easy for hackers to intercept data.
How to do that?
For your business, use a strong password for your Wi-Fi network
Consider implementing guest Wi-Fi that is separate from your main network and also with a strong Wi-Fi password. This helps isolate any potential threats on the guest network from accessing your business data.
Avoid connecting to Public Wi-Fi networks, instead use a data
If you're busy then book Cyberkite to help with adjusting that.
TIP #8: Secure Your Physical Devices
Explanation: Lost or stolen devices can be a major security risk.
How to do that?
Encrypt devices: Encrypting laptops, tablets, and USB drives ensures that even if a device falls into the wrong hands, your data remains protected. Use built-in encryption features or third-party encryption software.
Implement a clean desk policy: Encourage employees to avoid leaving laptops or sensitive documents unattended in public areas.
Secure mobile devices: Require strong passwords or PINs for access and enable features like "find my device" for tracking lost or stolen phones.
If you're busy then book Cyberkite to help with improving that.
TIP #9: Secure your premises
Explanation: Unauthorised intruders into your premises can access your servers, computers, devices, network equipment and other IT assets like memory storage devices to steal data, plant malware in those devices to spread and infect other devices and gain further access to your network.
How to do that?
Surveillance: Implement CCTV cameras in sensitive areas where any IT devices are stored and make staff aware of that for their safety and the safety of the data.
Sensitive Access control: Add access control to doors to access servers and network equipment. If the walls and ceiling or floor is accessible from the other side by someone being able to cut through then motion sensors need to be added connected to a dedicated alarm and alerting the relevant staff.
Computer Access Control: All areas with computers need access control on doors and trip alarms in any windows. This is because physical access breach is becoming the option as defences get stronger over the coming years. Any computer can become a breach point.
If you're busy then book Cyberkite to help consult with you to provide guidance on what needs to be implemented in terms of physical security.
TIP #10: Improve Policies & Procedures
Explanation: Clear policies and procedures help guide employee behavior and ensure everyone is on the same page regarding cybersecurity.
How to do that?
Develop a Cybersecurity Policy: This policy should outline acceptable use of technology, data security protocols (including data classification and handling procedures), and consequences for non-compliance.
Align other policies: Review all other policies so they are in line with the principles laid out in the Cybersecurity policy.
Implement a data breach notification plan: A plan should define steps to take in case of a data breach, including identifying affected individuals, notifying them promptly, and mitigating potential damage.
Regularly review and update your policies: Cybersecurity threats evolve, so ensure your policies stay current.
If you would like to get some help to review your policies and procedures from a independent Cybersecurity professional please book Cyberkite to enhance your policies and procedures. After that review you then run it again through your legal team.
TIP #11: Be Wary of Social Engineering
Explanation: Social engineering tactics aim to manipulate people into giving away sensitive information or clicking malicious links.
How to do that?
Train employees to identify social engineering scams: Phishing emails, phone calls where attackers impersonate legitimate callers, and social media scams are all common tactics.
Train employees to be cautious of unsolicited messages, verify sender information, and avoid clicking suspicious links.
Regularly training your staff on cybersecurity best practices can significantly reduce the risk of falling victim to these types of scams. If you're busy then book Cyberkite to help with that.
TIP #12: Consider Cyber Security Insurance
Explanation: Cyberattacks can be costly. Cyber insurance can help offset financial losses associated with a data breach. It can happen to any size business.
How to do that?
Research cyber insurance options: There are different types of cyber insurance coverage available.
Talk to a qualified insurance broker to determine the right coverage for your business needs. REQUEST CYBER SECURITY INSURANCE QUOTE WITH BIZCOVER ( Disclaimer: Cyberkite is an affiliate with BizCover in Australia for Australian businesses, above is an affiliate link to BizCover. We don't sell insurance, we leave that to the experts.)
More cybersecurity tips to come in the future.
Safe gliding online,
Michael Plis
Comments