10 Cyber Security Steps Small Businesses Need to Know

In addition to cyber-attacks becoming more sophisticated, cybercriminals are shifting their targets towards credential harvesting, ransomware attacks and Internet of Things (IoT) attacks, making small businesses vulnerable to frequent cyberattacks.

While larger businesses store more information to steal, small businesses tend to have less secure networks, making them an easier target.

No matter the size and scale of your IT infrastructure, every small business should invest in a cyber security plan to mitigate these risks.

If you want to avoid very nasty ramifications - including loss of data, money and reputation - then follow these simple cyber security tips that every small business should know:

1. Have a network design

Network design is an important component of your small business cyber security plan. Network design is the process of designing an IT infrastructure that includes measures to increase your network’s security and stability. A well-designed system will cover things like network analysis, IP addressing and physical network design including running copper and fiber cabling if your small business moves to NBN. Having an IT risk management plan included in your network design will significantly reduce the risk of a remote or physical breach in your business.

2. Back everything up

Always back up your business data including data stored in the cloud. Never store anything you can’t afford to lose in one place or a single device. Back up everything using an external drive along with your cloud storage options.

3. Use a secure wi-fi connection

Make sure your wifi network is secure, encrypted and hidden. Some easy ways to secure your business wifi network is by:

• Moving your router to a physically secure location
• Set a quality password and change it often
• Change the network name
• Use WPA2 or WPA3
• Set up both private access and public access to isolate business computers from guests
• Turn off wi-fi protected setup (WPS) as it can make it easy for anyone to gain a foothold into your network

4. Update your software

A lot of people make the mistake of not manually updating their software, since they’ve become so used to automatic updates on their PCs or laptops. However, some software including the wi-fi router’s firmware, needs to be manually updated. Cybercriminals can easily enter your computer network through outdated apps or drivers with known vulnerabilities.

5. Encrypt everything

Backing up your data is only safe if everything that is backed up is secure. The only way to do this is by installing encryption on all devices and drives as well as encrypting emails that contain sensitive information. You may also want to use a VPN to encrypt data, as this can serve as an added layer of protection for employees when using their home wireless network.

6. Set up a firewall

A firewall is one of the first lines of defense against a cyber attack. All small businesses should have a firewall in place to protect their network. There are heaps of firewall software available, some of which are completely free.

7. Use anti-virus software

Since the majority of cyber attacks on small businesses comes in the form of a phishing attack, it’s imperative to have anti-malware software installed on all devices in your network.

8. Use strong passwords

A strong password is a complex code consisting of a mix of characters, letters and numbers. Having a strong password makes it difficult for cyber criminals to hack and retrieve sensitive information. To make remembering passwords easier, you can try a password manager for businesses which will store all your employees passwords in a fully-encrypted password vault. Also be sure to have your employees using two-factor authentication when accessing sensitive business data and remind them to change their passwords at least every three months.

9. Educate your employees

Cybersecurity for small business is a team effort. It’s not just up to your organisation’s IT department. As a business owner, it’s important to train your employees to be security-conscious. This includes providing them with cybersecurity resources and an action plan in the event that something happens, making them aware of common cyber attacks such as email phishing, as well as reminding them to never share their usernames or passwords to third-parties.

10. Never leave devices unattended

Finally, in the event of a cyber attack we generally think about technical security but neglect the possibility of a physical attack. If you're a business that shares its computers with the public or are customer-facing, then it’s important to never leave your devices unattended. In the case of computers at work desks, ensure that the device is locked when not in use or when you’re leaving a device unattended to prevent someone physically trying to gain access into your network.

Being proactive when it comes to cybersecurity will help small businesses reduce their risk of losing important data to the hands of malicious cybercriminals. While there is no one foolproof way to stop cybercriminals in their tracks, implementing the above tips can give your business an added layer of protection, making it very difficult for a breach to occur. Having a robust cyber security plan also helps to add a layer of trust when it comes to your customers, as they will see that their data is secure and being kept private. As with anything, prevention is better than cure. Start safeguarding your business today by getting on top of your cyber security with the simple strategies listed above.