Evolve Your Communications With 3CX Phone System

CYBER Security - Small Business Guide

Our businesses and everyday life pretty much revolve around technology. We all want to make sure we are protected but we don't know enough about Cyber Security and it all seems like another language. Here at ADS we have created these quick tips and advice to help small business understand the most common cyber attacks. These 5 things are easy to understand do not cost much to implement.

If you are not currently doing these 5 things and need help to implement, Contact us now so we can see how we can help.

Backing Up your Data

Make sure you do regular backups of your important data and test that these backups can be restored. This will reduce the risk of any data loss from theft, fire or other physical damage or ransom ware.

Identify what needs to be backed up. Usually this includes documents, photos, emails, contacts, calendars.
Make backing up a part of your everyday business or automate this through your IT company.
Ensure the device containing your backup is not permanently connected to the device holding original copy, neither physical no over a local network.
Consider backing up to the cloud. This means your data will be stored off site in a separate location (away from your offices/devices). This will also allow you to be able to access it quickly from anywhere.

Keep your Smartphones (and tablets) Safe

Smartphones and tablets are used outside the safety of your office and home so they need even more protection than your computer in your office.

Turn on PIN/password protection/fingerprint recognition for all mobile devices
Enable tools/configure devices so that if they ever get lost of stolen they can be tracked, remotely wiped or remotely lock.
Ensure the device containing your backup is not permanently connected to the device holding original copy, neither physical no over a local network.
Update your devices. Make sure your OS and all installed apps are up to date with the latest version. If you are not the type to check this enable automatic updates if available on your device.
Do not connect to public WiFi when sending sensitive data. Make sure to use Cellular data like 3G or 4G connections or us VPNs.
Replace old devices. Replace devices that are no longer supported by manufacturers with up-to-date alternatives.

Preventing

Malware Damage

To protect your business from malware damage you can take implement simple low-cost practices.

Use antivirus software on all computers and laptops. Only install approved software on tables and smartphones to prevent users from downloading third party apps from unknown sources.
Patch all software and firmware. Apply the latest software updates provided by manufacturers and vendors. Use automatic update options when available.
Control access to removable media. These are things like SD cards and USB sticks. Consider Disabling ports or limiting access to sanctioned media. Encourage staff to transfer files via email or cloud storage.
Switch on your firewall. This is included with most operating systems to create a buffer zone between your networks and the internet.

Avoid Phishing Attacks

What is a Phishing attack? These are scammers and fake emails asking for sensitive information or containing sending email links to bad websites.

Ensure staff do not browse the internet or check emails from an account with Administrative privileges. This will reduce the impact of successful phishing attacks.
Scan for malware and change passwords as soon as possibly if you think a successful attack has occurred. Don't punish staff if they get caught. It will discourage them from reporting in the future.
Check for obvious signs of phishing. This includes poor spelling and grammar, low quality versions of recognizable logos. Check if the senders email address looks legit or is it trying to mimic someone you know.

Using Passwords To Protect your Data

When passwords are implemented correctly they are a free, easy and effective way to prevent unauthorized access to you devices and data.

Make sure all laptops, MACs & PCs use encryption products that require a password to turn on and booth the computer. Turn on PIN/password protection/fingerprint recognition for all mobile devices
Use two factor authentication (2FA) for important websites like banking and email if this is an option for you.
Avoid using predictable passwords. Do not use family or pet names. Avoid the most common passwords that can be easily guessed like "passw0rd"
If you forget your password or think somebody else knows it. Tell the IT department as soon as you can.
Change the default passwords that manufacturers issue before distributing to staff.
Provide secure storage so staff can write down passwords and keep them safe (not on a device) Ensure staff can reset their own passwords easily.
Consider using a password manager. This is only for less important websites and accounts where there would be no real damage if the password was stolen.