Don't Assume Your Business
Is Safe from Cyber Crime

There's no doubt about it, cyber security is a major issue for small businesses, an issue that cannot be ignored with today’s widespread threats like ransomware and a world full of bad actors.

In fact, new threats and new players have expanded risks for small companies. Many hackers are increasingly targeting smaller organizations because they’ve found them to be easier targets than large corporations or government entities, even if the rewards are not as great with any one victim.

Consider Seeking Help

While you probably have many nearby IT firms specializing in small businesses, you may not want to pay for them. That’s a deicison only you can make, but it’s one you should consider. One hack can cost you far more than a year’s IT payments. But many small businesses opt for a do-it-yourself approach. Provided you get the basics right, that can work.

For starters, there is a lot of information on the internet, and you should rarely assume you know everything you need. A good place to start is this page from the Federal Communications Commission (FCC).

Both of these are good for small businesses that don’t have time or resources or who want a good introduction and overview. And don’t overlook your internet provider’s information, usually available on their website. Providers like AT&T, Google and others usually have tons of information on security measures, best practices, and even online tools to help you stay secure. You should also consider webinars and other resources for more in-depth information. The SBA link above is a good place to start for that as well.

Consider All Options

As you learn, don’t forget to include your employees. They are a critical factor to ensuring your company’s cyber security. If they’re not trained and/or have limited access, then other steps may be of little use.

“Phishing email” is a good place to start. As you may know, phishing is when an email is sent by a would-be hacker. He or she will often disguise the email as coming from a legitimate source, including your internet, hardware or software providers like AT&T, Dell or Microsoft. They’ll even include corporate logos and formatting, so this bogus email looks legitimate.

Sometimes you can examine the senders email address – not the visible “name” but the actual email address. It often will not be what it should: if it’s an AT&T email it won’t end in “att.net” but will instead be something like support@whatever.com or even bob@whatever.com. The email will likely include a link to click or phone number to call that will lead you to the hacker who will then set you up for a nightmare, without you realizing it. A simple way to avoid this is to manually go to the website (like Att.com), log in and check your messages/notices there. If you have a real problem, it will show up. If it doesn’t, then you’ve just sidestepped a would-be hacker.

Start with Backups

Another, relatively easy step is having a secure backup or even several backups. In many cases, if a computer or even system of computers is compromised, a complete backup will be the one thing that can save you. You can simply erase the infected computers and reinstall from the backup. Obviously, the backup must be as current as possible, although even a few hours or days recreating some data is better than losing everything.

While firewalls, virus and malware detection/prevention software are important, don’t overlook physical risks. If you or an employee takes a laptop home, you’ll want to ensure that environment is safe, too. And losing a laptop or having it stolen may mean someone now has the “keys to your city.”

This is only a start, but this is an area where you must start and then keep going. Don’t let procrastination be the reason your company is the next victim. It’s unfortunate, but it’s a part of doing business today.