Did you know that average small to medium-sized businesses’ website is attacked 44 times per day? (SiteLock, 2018)

A digitally connected world means cyber criminals see opportunity with each cyber connection. They’re thinking – where are the vulnerabilities with that connection, with that website, with those plug ins (APIs), with that device?

Your data is gold

Cyber criminals target SMBs specifically because they know that they often lack the resources to combat threats, are not investing in security, or simply don’t know where to start. In fact, the National Cyber Security Alliance (NCSA) found that more than 70% of attacks target small business.

It’s unfortunate but true; hackers have a lot to gain as data and information has become the new currency. Hackers continue to evolve and refine their attack methods making cybersecurity issues a day-to-day struggle for business large and small. This is why it’s important to know what security threats – such as software vulnerabilities, malware, botnets and other infiltration tactics that attackers use to breach your system, steal your information and hold it for ransom.

Security Tip: The website address of a secure website connection starts with “https” instead of just “http” and has a key or closed padlock in the status bar.

Let’s look at some other staggering statistics that as a SMB owner you need to be aware of:

• $117,000 is the average cost of a data breach to a SMB (Kaspersky)
• 60% of SMBs closed their business in less than six months as a result of a cyberattack (NCSA)
• 4,000 Ransomeware attacks occur globally every day (FBI)
• The average amount demanded by a Ransomeware attack is $1,077 (Symantec)
• 64% of Americans are willing to pay to get their data back (Symantec)
• Over 92% of all malware is delivered via email (Verizon)

Security Tip: Even though a web address in an email may look legitimate, fraudsters can mask the true destination. Rather than merely clicking on a link provided in an email, type the web address into your browser yourself to test it.

Even though a web address in an email may look legitimate, fraudsters can mask the true destination. Try typing the web address into your browser yourself first to test it. #SmallBusiness Share on X

Invest in your business

With 60% of small businesses stating that attacks are becoming more severe and more sophisticated, now is the time to think about the damaging impact of a targeted cyberattack and take crucial steps to invest in and implement security measures.

But with so much to think about and understand, just deciding what to tackle first can be overwhelming.

Start with these nine recommendations to get a leg up on reducing your “attack surface” and protecting your business from costly, destructive threats.

1. Stay up to date and informed on security trends
2. Make information security a priority
3. Get training and train your employees
4. Know what data you have and protect it
5. Back up your data
6. Only give access to information, systems, etc. to those who absolutely need it
7. Use strong passwords (Tips for the Perfect Password)
8. Secure all devices and your network
9. Get help with your cybersecurity needs by using an expert

Security Tip Wireless networks may not provide as much security as wired Internet connections. In fact, many “hotspots” – wireless networks in public areas like airports, hotels and restaurants – reduce their security so it’s easier for individuals to access and use wireless networks.

Using cyber security to keep threats at bay

Cyber security is an expansive field that cover many different approaches to risk management and security. The right cyber security solutions and products will depend on your unique business. This is where a cyber security expert or outsourced solution provider can help you make decisions.

To start, make sure you have these basic solutions in place.

Anti-malware and anti-virus protection: Software designed to detect and remove malware (malicious intent by definition) and viruses on your systems that are intended to damage or disable them.

Anti-spyware: Software to detect and remove unwanted spyware programs that have been installed on your computer without your knowledge in order to collect information.

Firewall: A firewall is the first line of defense. It is a network security system that monitors and controls incoming and outgoing network traffic either blocking or allowing traffic based on defined security rules.

Intrusion Detection System: Or IDS will identify threats that have infiltrated your network and trigger an alert about the threat.

Security Tip Use the “log out” button to terminate online sessions. In addition, you shouldn’t permit your browser to “remember” your username and password information. If this browser feature is active, anyone using your computer will have access to your personal account information. 

More help for a hacker-proof business

Here are more free resources to help make sure you’re doing everything you can to avoid your company becoming a victim.

Take the Cyber Security 101 assessment for non-technical small business owners and employees through the Small Business Big Threat program. The course is a comprehensive 60-minute learning course aimed at helping you assess how protected is your business.

The Cybercrime Support Network provides an entire list of resources to help you before, during and after a cyberattack.

You can access other NCSA programs such as CyberSecureMyBusiness and StopThinkConnect through StaySafeOnline.

Learn how to secure your data and online accounts through this Cybersecurity for Small and Medium Businesses: Essential Training Course that is taught by cyber and fraud expert Kristin Judge.

The Lock DownYour Login program offers six simple steps and practical, easy to implement to solutions to protect your accounts and overall online security.

For free help finding a cybersecurity expert that matches your business needs visit TechStak.

While cyber security will continue to change at a rapid pace, these free resources provide small business owners with a sense of direction and empower them to be proactive versus reactive in the war against the cyber criminals who have zeroed in on them.

Don’t let your business be a victim. Start your cyber security plan this month!

October is Cybersecurity Awareness Month. TechStak is Proud to Be a Cybersecurity Awareness Month Champion. You can follow us on social media as we will be publishing weekly content tied to the official Cybersecurity Awareness Month themes. Or visit our website for additional resources.

ABOUT THE AUTHOR

Nicol Pasuit

As the Founder and CEO of TechStak, Nicol Pasuit knows the significant challenges businesses face trying to leverage the right technologies. Pasuit has 19 years’ experience building and scaling businesses across the country. She is a serial intrapreneur turned entrepreneur. Pasuit left her corporate career to build TechStak – a company that helps small businesses find tech providers they can trust.

Nicol has a passion for problem-solving as well as all things SaaS applications for small business. She is a speaker, a member of CompTia’s Advancing Women in Technology group, and is on a mission to simplify tech sourcing for small business.