Cybersecurity
Strengthen Your Small Business against Cyber Threats
Cybersecurity: A Continuous Commitment
Small businesses are easy targets for cyberattacks because they often lack robust cybersecurity infrastructure and training. It is crucial to develop a culture of security from the start, treating cybersecurity as a core value rather than a mere function. Changing culture later is incredibly difficult, making it essential to instill a security mindset early.
It is worth noting that as much as 82% of all cyber-attacks involve a human element. In other words, someone within a company is tricked into giving up valuable information that allows cyber criminals to infiltrate your systems.
Cybersecurity is everyone’s responsibility within the company. It is not a “set and forget” process. With threats and technology evolving rapidly, it’s vital to adopt a continuous improvement mindset. Regularly evaluate and adjust the following essential steps to ensure your business remains protected:
Be Careful About Sharing Information
Be mindful of the information you provide to companies or entities with different security interests than those in the USA.
Safeguard Your Internet Connection
Encrypt information and use a firewall. If you have a Wi-Fi network, ensure it is secure and hidden.
Train employees on Cybersecurity Awareness
Regular cybersecurity awareness trainings help employees recognize scams and phishing attempts.
Implement Multi Factor Authentication
Secure all accounts, including social media, with multi factor authentication.
Verify Sensitive Information Requests
Verify by phone any time someone requests or changes sensitive information via email. If confidential information is requested by phone, state you will call back to the agency or company directly to confirm the veracity of the request.
Use Strong Passwords
When possible, passwords should have at least 16 characters, upper- and lower-case letters, numbers, and special characters. Consider using a password manager and always change default passwords.
Conduct Background Checks
Vet employees thoroughly to mitigate possible insider threats.
Enable Automatic Software Updates
Always update your computer, software, and browser promptly to patch known vulnerabilities.
Consider Using a VPN
Ensure secure online activity with a reliable virtual private network (VPN), often available with antivirus tools.
Monitor and Manage Cloud Service Provider (CSP) Accounts
Regularly monitor and manage CSP accounts to ensure their security.
Invest in Quality Antivirus Software
Use antivirus software and keep all software updated.
Develop a Business Continuity Plan
Determine how you will continue doing business if connectivity is lost or you experience a breach.
Data Protection Best Practices
Data Access Control
Define the types of data you process and store, and restrict access based on job requirements.
Data Sensitivity Categorization
Protect data according to its sensitivity level:
- Restricted Data: Includes employee personal information (e.g., SSNs, emails, phone numbers, birth dates, home addresses), health information, payment card information, and intellectual property. Note that legal protection of personal and health information is mandatory.
- Internal Use Only Data: Business plans, marketing strategies, financial data, revenue forecasts, etc., that require protection but are less sensitive than restricted data.
- Public Data: Information intended for public domains, such as website content, marketing materials, and social media posts. Ensure employees understand what data can and cannot be publicly shared.
Regular Data Backups
Implement a robust backup strategy with copies stored in the cloud, on-site, and at an off-site location for disaster recovery.
Secure, Protect, and Back Up Sensitive Data
Ensure sensitive data is securely stored, protected, and backed up regularly.
Valuable Resources for Small Businesses
NC State University’s Secure Computing Institute (sci.ncsu.edu) is a valuable statewide resource for small business cybersecurity information. Additionally, the SBTDC, the U.S. Small Business Administration and the National Cybersecurity Alliance provide excellent guidance and tools to help small businesses strengthen their cybersecurity posture.
By adhering to these practices and fostering a security-centric culture, your small business can significantly enhance its cybersecurity resilience against potential threats.
For additional information, seminars, and other resources about cybersecurity
