HOME ABOUT US
INDUSTRIES ALTON'S ARTICLES
(206) 782-4035
SCHEDULE A CALL

Cybersecurity Tips to Protect Your Small Business
By Chris Alton

Many small businesses aren’t large enough to have a dedicated on-site IT staff and don’t know where to begin in protecting their business from cybersecurity threats. According to a Small Business Association survey, 88% of small business owners feel that their business is vulnerable to a cyber-attack.

Sound like your business? If so, we’ve got three recommended best practices for you to better protect your small business from cyber criminals.

#1 Train Employees to Recognize Cybercrime Attempts

Cyberthreats can take many different forms. In our May blog post we described some malware threats, including phishing. Many people aren’t aware of what to watch for so it’s important to explain to your employees what phishing, viruses, ransomware and other types of malware look like so they recognize the threat and can act immediately. Let employees know exactly what actions they should take when they observe something suspicious.

Training and education are one of the most important factors we’ve seen impact cybersecurity. Companies we support that call us about any and all suspicious activity on their computers/networks have fewer incidents. Their employees are educated to be on the lookout.

This doesn’t prevent all attacks. Targeted scams are becoming more common. Educating employees to be suspicious of potentially fake emails, texts and phone calls is critical. Scammers have gotten very clever and know the names and email addresses of the boss or head of sales and pretend to be them, or they may have hacked the email account of one of your customers.

Guides for being aware of and responding to suspicious cyber activity, behavior and materials to display in your office are available from the Homeland Security’s “Stop.Think.Connect.” campaign.

#2 Develop an Incident Response Plan in Case a Cybercrime Affects Your Small Business

Obviously, no one wants to fall victim to a cybertheft, but if your business does suffer an attack, a well-planned incident report plan can help minimize damage. An incident report plan includes a set of actions and instructions to help you respond to an IT attack incident and actions to take to quickly protect your equipment and data.

The plan should be detailed and spell out specific tasks and the people who will perform the tasks to stop, contain and control the incident as quickly as possible.

For example, below are some tips for what to include in an incident report for Ransomware:

The threat of Ransomware is real. Ransomware can quickly encrypt important files on your computer and spread over the network. Turning off your computer immediately minimizes the damage. It isn’t always obvious that files are being encrypted by Ransomware. A sign is that you won’t be able to open a file you normally can open, a pop up saying the file is encrypted or even a flashing pop up that says your file is encrypted and being held for ransom. DO NOT RESPOND by clicking on links to remediate this – always contact your IT Department and shut down your PC. Take a picture of any pop-ups with your cell phone if you can.

If you suspect your computer is being targeted by malware/virus, turn it off immediately and notify your IT Support Team right away.

#3 Establish Policies That Can Protect Your Business from Cybercrime

There are policies and processes you can put into place to better protect your organization from attacks by cybercriminals.

Here is a list of what we recommend and can implement for our customers:

Cybercrime will always be a threat to businesses of all sizes but being educated about the dangers and having a solid plan in place will help you be better prepared.

If you don’t have a secure plan in place for your business, we can help. Contact us at (206) 782-4035 or go to our website and complete our online form to set up a consultation.