Story image

Seven things SMBs can do right now to prevent cyber attacks

04 Sep 2018

New research from Australian’s Deakin University has found that many small businesses are at risk of cyber attacks, but most are unaware of the risk and doing nothing to prevent it.

Professor Matthew Warren is the deputy director of Deakin’s Centre for Cyber Security Research and Innovation. He believes businesses are becoming more dependent on IT systems, which makes them vulnerable to emerging security risks.

“From hairdressers to builders, accountants to GPs, small businesses are using IT to improve, expand and market their services, and that includes things like booking services, online sales, social media promotion, websites and customer databases,” he explains.

However those businesses are using technology for convenience, without understanding privacy and security risks. In addition, they may not have the right skills, resources, or expertise to protect their systems and data.

“Many think security is not their responsibility but it’s a serious risk that can destroy their business,” Warren warns.

You don’t have to go far to find examples. In 2016, thieves targeted a small business that had a national security contract with the Australian federal government. The thieves stole large amounts of data.

“While not all breaches will impact on matters of national security, when you consider that the average time it takes to resolve a cyber-attack is 23 days, that can still have an enormous impact on a small business’ operations and ultimately on its bottom line,” Warren says.

He says there are several things SMBs can do to protect themselves.

  • Patch systems and enable automatic patching. All systems and packages are updated (called patching) and the patching can be done automatically rather than implemented individually by users.
  • Back up all important data.
  • Use a cloud based email and/or data storage.
  • Use strong authentication. Use passphrases instead of passwords and use two stage authentication where possible.
  • Set up different accounts. For example you can set up an administrator account, as well as user accounts.
  • Don’t use the same password across all accounts (Twitter, Facebook, LinkedIn, Gmail, Adobe, Apple, etc). When one is hacked, they all become vulnerable if you’re using the same password.
  • Don’t click on links, attachments or images from people not known to you. Criminals often hack one account and use that account to send malware to people in the contact list.

“SMBs need to ask themselves – if they were a victim of a cyber-attack how much immediate business would they lose, could they restore their system and data, and would their customers have confidence in their organisation in the future,” Warren concludes.

Five things MSPs need to keep in mind in 2019
A Datto APAC channel exec outlines the most important factors for MSP to being paying attention to in the coming year.
Survey: IT pros nostalgic over on-prem data centre visibility
There are significant security and monitoring challenges faced by IT staff responsible for managing public and private cloud deployments.
61% of CIOs believe employees leak data maliciously
Egress conducted a survey to examine the root causes of employee-driven data breaches, their frequency, and impact.
Opinion: BYOD can be secure with the right measures
Companies that embrace BYOD are giving employees more freedom to work remotely, resulting in increased productivity, cost savings, and talent retention.
Sonatype and HackerOne partner on open source vulnerability reporting
Without a standard for responsible disclosure, even those who want to disclose vulnerabilities responsibly can get frustrated with the process.
OutSystems and Boncode team up for better code analysis
The Boncode and OutSystems alliance aims to help organisations to build fast and feel comfortable that the work they're delivering is at peak quality levels.
Nozomi and RIoT to deliver advanced ICS security solutions to Australia
''As a specialised integrator of robust and resilient ICT and IoT solutions within Australia, we are delighted to be partnering with Nozomi Networks."
Nuance biometrics fight back against fraud
Nuance Communications has crunched the numbers and discovered that it has prevented more than US$1 billion worth of fraud from being passed on to users of its Nuance Security Suite.