Cyber security basics every small business should have

Small businesses often assume they are too small to be a target, but criminals mostly do not choose who they hit. They cast a wide net and catch whoever is unprotected, and a small firm with weak defences is an easier win than a big company with a security team. The reassuring part is that a handful of straightforward measures will keep most trouble out.

Protect the way in: passwords and two-step login

Weak and reused passwords are how most break-ins happen. Make sure everyone uses strong, unique passwords, ideally through a password manager, and switch on two-step verification for email and any important system. This single step blocks the overwhelming majority of account attacks, and it costs nothing.

Keep everything updated

Those update reminders everyone ignores are usually fixing security holes. Set computers, phones and software to update automatically so you are not relying on anyone remembering. An out-of-date system is one of the easiest things for an attacker to walk through.

Back up your business, properly

Ransomware, where criminals lock up your files and demand payment, is a real threat to small firms. A good backup means you can recover without paying a penny. Keep backups automatic, keep one copy separate from your main system, and, crucially, test now and then that they actually restore.

Train your team to spot scams

Your staff are your front line. Most attacks start with a convincing email asking someone to click, log in or pay an invoice. A short, friendly chat about what to watch for, and a culture where people feel able to double-check rather than rush, prevents a great deal.

Common things worth flagging to the team:

• ✓Unexpected invoices or changes to bank details
• ✓Emails creating urgency or pressure to act fast
• ✓Requests to buy gift cards or move money quickly
• ✓Links asking them to log in to something

Consider Cyber Essentials

Cyber Essentials is a UK government-backed scheme that certifies you have the basics in place. It is achievable for small firms, reassures your customers, and is sometimes required to win certain contracts. We can help you understand whether it is worth pursuing for your business.

• ●Strong unique passwords plus two-step login stop most attacks
• ●Automatic updates close the holes criminals exploit
• ●Tested backups mean ransomware cannot hold you hostage
• ●Your team spotting scam emails is your best front line