Cybercriminals are raking in billions, and with just one carefree mistake, your business could be the next target.
According to the recent Hiscox Cyber Readiness Report, UK businesses are among the most likely to face cyber attacks, and a staggering 70% of business leaders reported an increase in cyber attacks in 2024 - a 10% jump from the previous year. Now, the increasing sophistication of AI is giving fraudsters the ability to produce even more convincing scam emails, fake adverts and malicious websites.
With cybercrime on the rise, how can businesses protect themselves when 52% report a critical shortage of skilled cyber security professionals?
Follow these top tips on staying safe on the internet:
1. Use strong passwords or biometrics
As we always say, make sure you use a strong password / passphrase and do not reuse it anywhere else. if you are worried about remembering all your passwords / passphrases, consider using a password manager where you only need to remember one complex password to access all your others or use biometrics instead.
2. Use multi-factor authentication
It’s annoying to have to enter a six-digit code every time you want to access a frequently used account, but it’s even more annoying to have your data compromised by a hacker. Multi-factor authentication requires you to enter a password and then verify your identity by entering a code you receive on a different device. Use multi-factor authentication (MFA) wherever possible.
3. Keep your software up to date
One of the most common ways a hacker can get entry into your system is through a vulnerability in your software. Once software providers learn of these vulnerabilities, they write code to repair, or ‘patch,’ them. But that doesn’t help you unless you install the patch, which is typically done via an upgrade. So whenever a program or operating system asks you if you want to update, the answer is ‘yes,’ and the sooner the better.
4. Back up your data regularly
Having up-to-date data backed up to a secure location will help you get back to business if your data is held for ransom or destroyed. Back up your data regularly – a daily automatic backup is best – to the cloud or to an external device that is stored away from your physical office space.
5. Make sure your Wi-Fi network is secure and use a VPN
A Virtual Private Network (VPN) can help to protect you from cyber threats regardless of what type of internet connection you are using.
6. Install a reputable security app on your devices, such as EDR
Security Apps like Endpoint Detection and Response (EDR) help to identify and block suspicious behaviour on your devices, and can help to mitigate against threats such as phishing emails and computer viruses.
7. Control physical access to devices
Only authorized staff should have access to your company’s devices, and only to the ones they need.
8. Educate yourself and your employees
Learn how to recognize a phishing email or smishing (text) message, and how to recognize and report a suspected cyber incident.
9. Have a security plan in place and keep it updated
Develop a written plan for what to do in the event of a cyber attack, including whom to contact and what to do immediately. Revisit the plan at least yearly to be sure it’s current.
Keep an eye out for unusual activity, using an intrusion detection system or security information and detection management system. These systems will monitor your network and detect any unusual activity.