GrowMap

As a small business owner, it can be tempting to think that hackers won’t be targeting your business anytime soon.

Surely, they’ll be too busy hacking the big corporations like Google or Equifax.

However, you’d be surprised to learn that according to the 2023 Verizon Data Breaches Investigations Report, 71% of breaches targeted small businesses.

Compare that to their 2019 DBIR Summary that stated only 43% of all breaches in 2019 targeted small businesses.

Data like this shows that hackers spare no one when it comes down to who they choose to attack. And small businesses are their major target today.

This means that even owners of the smallest businesses should be concerned about cybersecurity best practices — as even a single breach can make them collapse.

But don’t give up all hope! The fact that your small business is likely to suffer from a cyberattack doesn’t mean you are defenseless.

There are many measures you can take to keep your business safe from hackers—or at least minimize the likelihood of a security breach occurring.

Cybersecurity Best Practices

That’s why I’ve built a list of 5 Cybersecurity Best Practices that you can apply to your business.

With these, you can rest at ease knowing that your business is a bit more secure from hackers than it was before.

Without further ado, let’s get right into it.

1. Train Employees on Cybersecurity 101

Admittedly, “cybersecurity 101” may sound like a silly name, but you can’t run without first learning how to walk.

Unfortunately, 80% of data breaches are caused by human error, down from the 90% reported in 2019.

That means that you should take the time to train your employees.

Identity security is the cornerstone of cybersecurity. Many attacks stem from stolen credentials or compromised employee identities.

There are things they should and shouldn’t do when dealing with anything that has access to the internet — or any electronic device that is used on company grounds for that matter.

Here are a few rules your employees should always follow when it comes to cybersecurity best practices in your business:

• Never store passwords as plain text.

Passwords stored in plaintext are unencrypted. So if a hacker gains access into your company’s server or computers, they’ll have no problem using them.

Encrypt your passwords with an encryption method such as SHA-2, which became the new standard for encryption in 2017. 

If you do, they won’t be able to utilize the passwords they obtain, keeping your information safe.

• Never click unfamiliar links or email attachments from people you don’t know.

Although your company may have a spam filter installed in its email server, opening any attachments without verifying the sender first is just asking for trouble.

• Passwordless authentication is stronger than using passwords
  

Passwordless authentication is a strong method of keeping your on-premises assets safe from attacks. Passwords are easily compromised.

If employees use passwords at all, they must use strong passwords to make it less likely for data to get stolen (as the password is more difficult to crack).

Never use the same password for more than one account. That way, if hackers gain access to one of the employee’s accounts, their access is limited as all of the passwords are different.

• Connect only work-issued devices to the company’s network.

Although it is a bit of an extreme measure, you can restrict the devices allowed in your network to those that are company-issued only.

This will reduce the chances of an employee connecting a personal device that is potentially infected with malware which could then infiltrate your network.

Note: these are not the only guidelines your employees should follow when it comes to cybersecurity in your company. But is is a starting point to help avoid some major loopholes hackers may attack.

2. Make Sure to Periodically Back Up Your Data

Everyone should back up their data periodically, regardless of whether they’re a business owner or not.

However, as a business owner, you must have backups in place. Ensure that in case of an environmental disaster, breach, or other potential threats, your data stays unharmed.

Lost data can cost thousands, if not millions of dollars.

Schedule regular automatic backups. They are the best way to ensure that your data is always backed up.

Use weekly backups at a minimum. Larger companies run monthly, weekly and daily backups so they can be certain to restore all data.

Multiple servers should be used for making backups. This will ensure that your data is available if one server fails. (Of course, make sure to protect those servers with strong passwords, too.)

Backup servers should be in different locations. This can maximize the chance of your data being unharmed should there be an environmental disaster or site-wide breach.

3. Install a Firewall on Your Networks

When it comes to protecting your network, business owners should spare no expense.

Your network perimeter is one of your strongest defenses against hackers.

A firewall is a security measure which serves to protect a network from potential intruders, having a similar protocol to that of a bodyguard.

It has pre-programmed measures that prevent unauthorized entry to the network and can even be set up to block certain actions from being performed (e.g. wiping a server of all of its data or transmitting a file that may be malicious).

This allows you to keep your network secure with authorized users only.

And prohibits a hacker (or an employee with malicious intentions) from harming your network if they do manage to bypass the authentication factor.

4. Implement Anti-Virus Systems on Your Devices

Let’s face it—although some people see anti-virus systems as “a thing of the past” due to operating systems improving security-wise, the need for strong anti-virus software continues to exist.

Zero-day exploits and malware attacks become more and more rampant year after year, especially for small business owners.

An anti-virus system will remove any existing malware within your businesses’ devices as well as constantly check for new threats as frequently as daily.

This will ensure that your business is free of any threats when it comes to the devices within it.

Their malware database (which is often updated daily) provides reliable protection for even the newest of threats.

5. Secure & Encrypt Your Websites With HTTPS

If you haven’t switched your website from HTTP to HTTPs, it’s time to do so.

Using HTTP instead of HTTPs can harm your SEO ranking. It causes browsers to display warnings on your site (that scare away your visitors!).

But there’s so much more to it than that. A site that is not HTTPs is unencrypted and susceptible to MITM (man-in-the-middle) attacks.

MITM attacks let an intruder listen to the digital communication between a website and a visitor.

This means that any information that is entered on the site is at risk of being stolen, whether it’s their address, credit card number, or SSN.

This is why any sites that accept payment must adhere to PCI-DSS compliance, a set of requirements set by law to protect consumer data.

The FTC and other regulators can impose heavy fines on sites that are not on HTTPs in the event of a breach, as customer data is not being properly encrypted.

Implement These Cybersecurity Best Practices!

These are by no means the only measures you should take when it comes to cybersecurity in your business.

But implementing these 5 cybersecurity best practices should provide you with a good starting point.

You can hopefully expand on these basics, making your company’s cybersecurity stronger every month!

Backup and Storage Through the Ages

The History and Future of Passwords Infographic

Originally published 9/19/19; updated 5/1/20 to add infographic and improve readability; updated 6/19/20 to add second infographic; statistics, links, and content updated 4/7/24.

We’re all aware that cyber security refers to protecting and strengthening your computers and internet-based systems.

This is essential to protect them from unintended or unauthorized access, modifications, robbery, and obliteration.

Cyber Security Measures are essential to every small business because they are now the #1 target of hackers and scammers.

A lot of modern small businesses use web-based technology and tools to carry out their day-to-day functions.

The internet and the cloud have become integral to the smooth functioning of small businesses.

Technology for Cyber Security

It is not necessary to implement all cyber security measures manually. Technology helps with:

• • Conducting long-distance conferences
  • Advertising
  • Buying and selling
  • Researching
  • Identifying new markets
  • Communicating with customers and suppliers
  • And even conducting banking transactions.

You can bring attacks in the physical realm under control with the help of technological aids and state-of-art security cameras.

But the virtual world is a different ball game. The internet might be a boon, but it also has its fair share of weaknesses.

Along with its benefits, there are many risks, which are only growing by the day. Small businesses often fall prey to cyber attacks due to loopholes in their cyber security measures.

Cyber Security Measures to Implement

Below are a few cyber security tactics that all small businesses should have in place to protect themselves from virtual perils.

1. Purchase Cyber Insurance

Cyber insurance guarantees safety even when breached. There are safety measures in place that ensure maximum protection.

However, having a back up plan and a 3rd party organization trace back attacks can lead to reduced recovery costs.

2. Install Reliable Antivirus Software

A good, reliable antivirus program is a basic must-have of any cyber security system. Apart from that, anti-malware is also an essential.

These programs work as the final frontier for defending against unwanted attacks should anyone get through your security network.

Antivirus and anti-malware detect and remove viruses and malware, adware, and spyware.

They scan through and filter out potentially harmful downloads and emails.

3. Protect with a Firewall and Install Encryption Software

A firewall is necessary, as it helps you protect your inbound and outbound network traffic.

Firewalls can stop hackers from attacking your network by blocking certain websites.

You can also program firewalls to restrict anyone from sending out proprietary data and confidential emails from your company’s network.

If you deal with data pertaining to credit cards, bank accounts, and social security numbers on a daily basis, it makes sense to have an encryption program in place.

Encryption keeps data safe by altering information on the computer into unreadable codes.

That way, even if someone does steal your data, it will be useless to the hacker because he won’t have the keys to decrypt the data and decipher the information.

4. Limit Access to Critical Data and Do Regular Back-Technology for Cyber SecurityUps

Keep the number of people with access to critical data to a minimum. For example, limit them to the company’s CEO, CIO, and a handful of trusted staff.

Access controls can be various; from privileged accounts to encrypted access keys and verified users using safety certificates.

All of these can help secure access points from a variety of environments, i.e. cloud, personal device, and hybrid.

Formulate a clear plan that mentions which individual has access to which sensitive information in order to have increased accountability.

Every week, back up your data to an external hard drive or the cloud yourself. Or schedule automated backups to ensure that your information is stored safely.

That way, even if your systems are compromised, you still have your information safe with you.

5. Ignore Suspicious Emails

Make it a habit never to open or reply to suspicious-looking emails, even if they appear to be from a sender you know.

If you do open the email, do not click on suspicious links or download attachments.

Doing so might make you a victim of online financial and identity theft, including “phishing” scams.

Phishing emails appear to come from trustworthy senders, such as a bank or someone with whom you might have done business.

Through the email, the hacker attempts to acquire your private and financial data, such as bank account details and credit card numbers.

6. Communicate Cyber Security Policies to Employees

Having a written cyber security policy listing the the dos and don’ts of using office systems and the internet is helpful, but not enough.

You have to ensure you communicate the policy’s details to your employees and that they understand them.

Your employees need to be able to put your policy into practice. That is the only way of making such policies effective.

And make sure you amend your policy regularly according to the relevance of its content.

Get Your Cyber Security Measures in Place Now!

Having your business disrupted because of attempts to steal confidential data and money is a very real threat.

Although a business can never be completely safe from such dangers, there are several security practices, processes, and systems that can help you bust security threats.

Keep your eyes and ears open to suspicious behavior on the part of your employees and outsiders.

Use surveillance systems to identify those with vested interests in your company.

Aside from those strategies, the above tips should come in handy for amping up your cyber security measures.

For more specifics on how to keep your business safe, read 5 Cybersecurity Best Practices for Small Businesses.

Home Title Fraud Prevention – Home Title Lock Infographic

And don’t forget your home, too!

Originally published 2/20/17; updated 4/21/21 to format more mobile-friendly and add the infographic; updated 4/6/24 to improve readability and add new information. 

Got a problem? The internet probably has a solution for it. People today refer to the internet for most of their needs.

This increased reliance on the internet leaves them prone to online security risks including attacks by hackers and other criminals on the web.

Millions of people around the world fall prey to security threats while browsing the internet, but you don’t have to be another statistic.

There are plenty of proven ways to stay one step ahead of hackers when browsing online. Here are some tips:19

Choose Your Browsers Wisely

There are dozens of web browsers all competing for your attention. You are at liberty to choose any of them, but security should be at the top of your list of factors to consider.

Different web browsers have different security protocols implemented to keep users safe from emerging online threats such as phishing and tracking.

They perform and rank differently in this category.

The most reliable and secure web browsers are Google’s Chrome, Microsoft’s Internet Explorer, and Mozilla Firefox.

They are not only more secure than most other browsers but also more convenient and advanced.

Also, be sure to update your browsers whenever there is a new release to stay one step ahead of hackers.

Beware of Phishing

Phishing is another common technique that hackers use to steal your vital data. It mainly involves the use of bogus emails and websites masquerading as real ones.

They will try to trick you into keying in your credentials and record them when you do so. They can then use this information to get into your private online platforms.

For instance, phishing is a common way to get access to passwords to social media sites and even banking portals such as PayPal.

There are numerous phishing techniques that hackers use, so it is important to always be on the lookout.

At the very least, always double-check any prompt on your email or browser to ensure that the sender is indeed legitimate. Learn more about phishing email.

Check the Validity and Credibility of Websites you Visit

The most basic thing you can do to ensure your safety when browsing online is to check the credibility of the sites you visit.

This can easily be done by inspecting their web addresses.

Secure websites usually feature the prefix HTTPS, which stands for hypertext transfer protocol secure.

This may also be accompanied by a green lock. It ensures that all data transmitted via the website is encrypted and not useful to any would-be eavesdroppers.

Avoid websites that simply start with HTTP and WWW if you intend on transferring sensitive data over the website.

Use Verifiable Credentials

Verifiable credentials in cybersecurity are used to permit access without encryption keys. Instead, a certificate is used that signals a safe log in.

Use a Password Manager

Your log-in credentials such as usernames and passwords are keys to any private accounts you may have online.

They should always be kept safe and private. However, it is often the case that you have too many passwords and other credentials to remember.

Most people solve this by giving their web browsers permission to remember their usernames and passwords.

This is convenient but risky as this exposes your sensitive credentials to hackers.

If you absolutely have to store your password on your computer, then do so on a password manager.

This is a secure program that is designed to store sensitive data and keep it beyond the grasp of hackers.

Most password managers are free and easy to use – you just need to remember the manager’s password to get access to all the other log-in credentials you use.

Have Admins and Executives Use Privileged Identity Management

Privileged identity management is an identity and access management solution that focuses on administrators and high-level decision makes who control many business aspects and IT functions.

Such users are privileged and therefore need to be additionally secure.

Use a VPN When Using Public Networks

Public Wi-Fi is convenient and free but hardly ever secure. Hackers can easily eavesdrop on your data transmissions using simple tools as most public networks are often unprotected.

To this end, it is recommendable to always use a VPN when using public Wi-Fi. VPN stands for virtual private network.

This means that your particular connection to the internet is private at all times, even if you are using public Wi-Fi.

The VPN encrypts all the data coming and going to/from your computer.

This then ensures that eavesdroppers get nothing but gibberish if they attempt to hack you.

VPN also has many more security features including preventing tracking by masking your IP address. Features, however, vary from one service provider to another.

Keep Trackers Off Your Scent

Your online footprint is valuable data and multiple parties are always keeping track of all your online activities.

Tracking is common, but that doesn’t mean that you should tolerate it. There are several ways to keep trackers off your back when browsing online.

Start with the basic: enable the ‘Do Not Track’ feature on your browser and turn off cookies.

This should keep most trackers off your back. However, some websites may refuse you access if you choose to turn cookies off.

Luckily, there are many ways to browse privately.

Another way to keep trackers off is by browsing in incognito mode – this will ensure all your data is deleted once your session ends.

A VPN is also effective here as it hides your identity, essentially making all your browsing private.

It is also recommended to create separate users’ profiles on your browsers dedicated solely for browsing social media sites.

CyberSecurity and Remote Work

Remote work is predicted to keep growing. And with it, so are the risks.

What Online Security Risks Are You Taking?

Use the tips above to reduce your online security risks. You are the only person who can!

What else can you do? See these additional resources including the infographic below for more tips:

• • • 5 Cybersecurity Best Practices for Small Businesses
    • 6 Cyber Security Measures Your Business Needs for Protection

Featured Image: Shutterstock / By Khakimullin Aleksandr

Originally published 1/2/19; updated 1/16/24 to improve formatting for mobile devices, add the infographics, and add additional information.