How to fight cyber-crime in your small business

There are five key areas for owners of small businesses to focus on when fending off digital attacks.

Cyber-attackers have small businesses in their sights. The Federation of Small Businesses says its members are the target of seven million cyber-attacks every year. The average cost of an incident for a small business is £8,460, but many prove even more expensive to fix and recover from. In the most extreme cases, the disruption and expense of a serious attack can pose an existential threat to small businesses.

However, for many smaller firms, the misconception persists that they are less likely to be targeted than larger companies. While 93% of large companies say cybersecurity is a high priority, the figure drops below 70% for the smallest businesses. In part, that may be because firms feel they lack the technical expertise to confront cyber-crime. But even taking some simple steps will provide a great deal of protection. The National Cyber Security Centre (NCSC) suggests focusing on five key areas.

A copy of your company

First, says the NCSC, make sure your business makes regular back-ups of all its key data. Build this into your daily operations. Crucially, you need to make these back-ups to a computer or system that is not connected to your ordinary system, or accessible by staff.

The aim is to create a copy of your key data that you can access in an emergency, but which an attack won’t reach. That way, if your systems do suffer a breach – or if you suffer a disaster such as flooding or a fire – your business will still be able to function. You’ll also be less vulnerable to ransomware attacks that freeze your data until you pay a fee to the attacker for release. 

Step two is to put protections in place against malware, the malicious software programmes through which attackers aim to harm organisations. Basic cyber-hygiene is really important here: install anti-virus software and make sure it is operating, switch on your firewall, and keep your IT equipment up to date. Follow software providers’ instructions on updates and modifications.

Part of the challenge here is to make staff part of the defence. Through regular training and communication, you can help employees understand what is risky behaviour, such as opening attachments that could pose a threat. Have rules about how they use their own computers to access work systems. 

The next step, suggests the NCSC, should be to think about smartphones and other digital devices, particularly as more businesses depend on these technologies. Make sure all devices are password-protected, limiting the damage if they fall into the wrong hands, and turn on apps that allow for the tracking or wiping of lost or stolen devices. Keep both the device itself, and all apps, updated. And consider instructing staff not to connect to unknown Wi-Fi hotspots, particularly in public places, with any device used for work.

Good use of passwords more broadly is another key step in protecting your business from cyber-criminals. The aim here is to strengthen your defences without making access to devices and networks so cumbersome that people don’t bother following the rules and leave themselves open to attack. Use more demanding techniques, such as two-factor authentication, for the most important points of access. Help your staff to cope with password overloads – good quality password managers, for example, can be very useful.

Finally, the NCSC suggests thinking particularly carefully about phishing attacks, one of the most common types of cyber-breach. Here, there are tools that can help you configure your accounts to repel attacks and spot breaches. But again, employees’ awareness is a crucial weapon. Make sure staff know how to ask for help if they’re unsure. Be sympathetic if they do make a mistake; this will encourage people to report potential problems quickly.

Recommended

Beware of scams on your business’s Facebook account
Small business

Beware of scams on your business’s Facebook account

Fraudsters could hack into your business’s Facebook account and use your money to advertise their products online.
6 Jul 2022
How invoice financing can help your business
Small business

How invoice financing can help your business

Invoice finance could help your business cope with late payments, says David Prosser.
20 Jun 2022
How to prevent your businesses becoming embroiled in a trademark dispute
Small business

How to prevent your businesses becoming embroiled in a trademark dispute

Thorough research could save you the headache of a trademark dispute, says David Prosser.
5 Jun 2022
Flexible working: don't rush your staff back the office
Small business

Flexible working: don't rush your staff back the office

The government is urging people to get back to the office. But there are good reasons for many small businesses to embrace flexible working.
25 May 2022

Most Popular

Is inflation about to drop as recession takes hold?
UK Economy

Is inflation about to drop as recession takes hold?

Central banks are raising interest rates in an attempt to curb soaring inflation. But will that push the economy into recession? John Stepek looks at …
5 Jul 2022
Ray Dalio’s shrewd $10bn bet on the collapse of European stocks
European stockmarkets

Ray Dalio’s shrewd $10bn bet on the collapse of European stocks

Ray Dalio’s Bridgewater hedge fund is putting its money on a collapse in European stocks. It’s likely to pay off, says Matthew Lynn.
3 Jul 2022
Is it OK to buy Scottish Mortgage investment trust again?
Investment trusts

Is it OK to buy Scottish Mortgage investment trust again?

Scottish Mortgage investment was hit hard by the tech-stock crash, and it is still being buffeted by headwinds. Should new investors wait for those to…
5 Jul 2022