How to fight cyber-crime in your small business

There are five key areas for owners of small businesses to focus on when fending off digital attacks.

Cyber-attackers have small businesses in their sights. The Federation of Small Businesses says its members are the target of seven million cyber-attacks every year. The average cost of an incident for a small business is £8,460, but many prove even more expensive to fix and recover from. In the most extreme cases, the disruption and expense of a serious attack can pose an existential threat to small businesses.

However, for many smaller firms, the misconception persists that they are less likely to be targeted than larger companies. While 93% of large companies say cybersecurity is a high priority, the figure drops below 70% for the smallest businesses. In part, that may be because firms feel they lack the technical expertise to confront cyber-crime. But even taking some simple steps will provide a great deal of protection. The National Cyber Security Centre (NCSC) suggests focusing on five key areas.

A copy of your company

First, says the NCSC, make sure your business makes regular back-ups of all its key data. Build this into your daily operations. Crucially, you need to make these back-ups to a computer or system that is not connected to your ordinary system, or accessible by staff.

The aim is to create a copy of your key data that you can access in an emergency, but which an attack won’t reach. That way, if your systems do suffer a breach – or if you suffer a disaster such as flooding or a fire – your business will still be able to function. You’ll also be less vulnerable to ransomware attacks that freeze your data until you pay a fee to the attacker for release. 

Step two is to put protections in place against malware, the malicious software programmes through which attackers aim to harm organisations. Basic cyber-hygiene is really important here: install anti-virus software and make sure it is operating, switch on your firewall, and keep your IT equipment up to date. Follow software providers’ instructions on updates and modifications.

Part of the challenge here is to make staff part of the defence. Through regular training and communication, you can help employees understand what is risky behaviour, such as opening attachments that could pose a threat. Have rules about how they use their own computers to access work systems. 

The next step, suggests the NCSC, should be to think about smartphones and other digital devices, particularly as more businesses depend on these technologies. Make sure all devices are password-protected, limiting the damage if they fall into the wrong hands, and turn on apps that allow for the tracking or wiping of lost or stolen devices. Keep both the device itself, and all apps, updated. And consider instructing staff not to connect to unknown Wi-Fi hotspots, particularly in public places, with any device used for work.

Good use of passwords more broadly is another key step in protecting your business from cyber-criminals. The aim here is to strengthen your defences without making access to devices and networks so cumbersome that people don’t bother following the rules and leave themselves open to attack. Use more demanding techniques, such as two-factor authentication, for the most important points of access. Help your staff to cope with password overloads – good quality password managers, for example, can be very useful.

Finally, the NCSC suggests thinking particularly carefully about phishing attacks, one of the most common types of cyber-breach. Here, there are tools that can help you configure your accounts to repel attacks and spot breaches. But again, employees’ awareness is a crucial weapon. Make sure staff know how to ask for help if they’re unsure. Be sympathetic if they do make a mistake; this will encourage people to report potential problems quickly.

Recommended

Investment scams are infiltrating Facebook and Instagram
Investment strategy

Investment scams are infiltrating Facebook and Instagram

Research from Which? found hundreds of investment ads on Facebook and Instagram that could be misleading investors into potential investment scams.
6 Dec 2022
The best business bank accounts – November 2022
Small business

The best business bank accounts – November 2022

A crucial element of running any business is ensuring you select the right bank account. We’ve rounded up the best business bank accounts to help you …
15 Nov 2022
Hunt ditches changes to IR35 tax rule
Tax

Hunt ditches changes to IR35 tax rule

The new chancellor has scrapped plans to reform the IR35 tax rule for contractors and freelancers.
7 Oct 2022
Six mistakes to avoid when starting a business
Small business

Six mistakes to avoid when starting a business

Around 60% of new businesses fail within three years, says David Prosser. Here, he outlines six key pitfalls to avoid when starting a business.
21 Sep 2022

Most Popular

5 top UK tech stocks
Investments

5 top UK tech stocks

The UK market has never been considered a fertile hunting ground for tech stars. But there are plenty of promising companies beyond the old economy, s…
23 Mar 2023
Where will house prices go in 2023?
House prices

Where will house prices go in 2023?

We explore what could happen to house prices in 2023 as the market continues to slow down.
24 Mar 2023
Will energy prices go down in 2023?
Personal finance

Will energy prices go down in 2023?

Ofgem’s price cap is now predicted to fall below £2,000, based on average typical use, from July, for the first time since 2022. We have all the detai…
21 Mar 2023