Additionally, business owners are encouraged to use strong and unique passwords for enhanced security. They should avoid using the same password for multiple accounts because if cyber-criminals obtain credentials from one compromised account, they may try using same credentials to access email, financial accounts or other business systems. As an added security measure, business owners are encouraged to use multi-factor authentication whenever it is available. This helps create another security barrier for criminals who may already have obtained the right password or login credentials.
Significantly however, technology alone cannot prevent every cyber-attack. The people running the business are the most important lines of defense for the business. They are the ones who can easily detect and flag messages with undue sense of urgency, particularly phishing threats. Business owners should be very conversant with how to stop and verify unexpected requests before clicking links, opening attachments, sharing information or transferring money. If a message appears suspicious, the rule is to quickly contact the individual or organization independently using a trusted telephone number or website rather than information contained in the suspicious message. This extra step can be particularly important when criminals attempt to manipulate the people running a business into changing payment instructions or transferring funds. In those situations, a few minutes spent verifying a request could prevent a substantial financial loss.
Slowing down is about the most important cybersecurity practice and it is also the simplest. Cyber-criminals frequently use fear, urgency and pressure to encourage people to act fast before thinking things through. Making it a habit to question unusual requests and crosschecking things can slow things down a bit. This can help strengthen your business’ defenses.
The financial consequences of inadequate cybersecurity can extend well beyond the immediate cost of an attack. Businesses may face operational disruptions, lost revenue, legal expenses, customer notification costs and damage to their reputation. For smaller businesses, the impact can be particularly difficult to absorb and may even be fatal to the business.
Keeping computers, smartphones, applications and other connected devices updated regularly is another basic but essential security measure. Software updates frequently contain security patches designed to close vulnerabilities that criminals can exploit. Delaying these updates can leave otherwise legitimate systems exposed to attacks that will otherwise have been preventable.
Finally, it is advisable that business owners create very clear procedures for reporting potential security incidents. People should know what precautions to take before they click on any suspicious link, provide information to a suspected scammer or if they think an account has been compromised. Very prompt actions and reporting procedures can give a business a great opportunity to effectively contain a scam before it becomes a larger and more damaging breach.

