Small Businesses Need Cyber Security Training

Many small businesses don’t think about cyber security until after a cyber/hack attack and not having adequate cyber security can prove very expensive in terms of money, time and reputational damage and result in a loss of private data and information. 
 
For a long time, the average small business was considered an unlikely target for a sophisticated cyber-attack with fewer financial resources and a relatively unknown brand unlikely to attract the attention of hackers. Not anymore.
 
According to Accenture, 43%of cyber-attacks are aimed at small businesses, but only 14% are prepared to defend themselves. The frequency of attacks is also increasing, with more than half of all small businesses having suffered a breach within the last year and  small businesses really should pay attention to cyber security and take proactive steps and train your staff.   
 
The COVID-19 lockdown has forced millions of businesses to establish remote workforce that rely solely on Internet-enabled applications to conduct business in a virtual workplace has increased cybersecurity concerns for small business owners, although many have not implemented remote working policies to address cybersecurity threats, according to a survey by the Cyber Readiness Institute (CRI).
 
Economic Uncertainty 
Conducted from March 25-27, the survey of 412 small business owners found that half of all business owners are concerned that remote working will lead to more cyberattacks. Yet, nearly 40% feel that economic uncertainty will prevent them from making necessary cyber security investments. This is particularly concerning for companies with fewer than 20 employees as the survey showed they were distinctly unprepared for remote working. Only 22% provided additional cybersecurity training prior to enabling remote working and just 33% provided “any cybersecurity training.” 
 
Considering employee education lies at the core of the cybersecurity problem, more needs to be done and lessons they receive have to be from a reliable source.
 
 
Lack of Employee Training
Social distancing and quarantine orders have altered how business owners manage employees and interact with customers. It has made the reliance on secure communications and operations more important than ever.  Yet, only 46% of business owners provide any training to help workers be cyber secure when working from home. The numbers dwindled down to 33% when looking at companies with fewer than 20 employees.
 
Good cyber hygiene practices that focus on using secure passwords, ensuring that all operating systems are up to date, understanding tricks used by bad actors, and prohibiting the use of USB memory sticks can go a long way in preventing cyber-attacks.
 
Additional findings from the CRI Survey include:
  • Only 40% of small businesses have implemented a remote work policy focused on cyber security as a result of coronavirus (only 25% of those with less than 20 employees)
  • 59% of small business owners said that some employees would be using personal devices when working from home
  • 55% believe that federal and state governments should provide products and funding for cybersecurity
  • 51% said they provided their employees with technologies to improve cybersecurity for remote workers (only 34% for companies under 20 employees.
  • Small businesses can implement policies to ensure everyone in the company becomes part of the first line of defense against a cyber-attack and has on-going cyber security training. 
For more: cyber security training information, please contact Cyber Security Intelligence for advice and recommendations on employee training.
 
Microsoft:         Inc.:          CNBC:         SmallBizTrends:      Business Insider:       HelpNetSecurity:   
 
You Might Also Read:
 
Only 31% Of Employees Get Annual Cyber Security Training:
 
 
 
 
 
 
 
 
 
 
« Business Needs To Lock Down Cyber Security
How Coronavirus Helps Hackers Get Rich »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall And Why Does It Matter

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall And Why Does It Matter

See how to use next-generation firewalls (NGFWs) and how they boost your security posture.

Information Risk Management (IRM)

Information Risk Management (IRM)

IRM is an international consultancy dedicated to helping organisations solve key business issues. We provide strategic cyber security advice across a wide range of sectors.

FireEye

FireEye

FireEye delivers unmatched detection, protection and response technology through an extensible and flexible cloud-based XDR platform.

A10 Networks

A10 Networks

A10 Networks is a leader in application networking, helping organizations of all sizes to accelerate, optimize and secure their applications.

Honeynet Project

Honeynet Project

The Honeynet Project is a leading international non-profit security research organization, dedicated to investigating the latest attacks and developing open source security tools.

National Cybersecurity Hub South Africa

National Cybersecurity Hub South Africa

The mission of the National Cybersecurity Hub is to be the central point of collaboration for cybersecurity incidents in South Africa.

IAmI Authentications

IAmI Authentications

IAmI is a first in Tokenization Cloud-based IAM Security Services, delivering the most advanced form of Two-Factor Authentication.

Energia Ventures

Energia Ventures

Energia Ventures is a three-month intensive accelerator for entrepreneurs with an innovative business in the energy, smart grid, cleantech, and cybersecurity sectors.

Estio Training

Estio Training

Estio Training is a specialist digital and IT apprenticeships provider, dedicated to introducing new skills and developing existing talent in businesses across the UK.

Hazy

Hazy

Hazy specialises in financial services, helping some of the world’s top banks and insurance companies reduce compliance risk.

Tactical Network Systems (TNS)

Tactical Network Systems (TNS)

Tactical Network Solutions helps you discover hidden attack vectors in IoT and connected devices before someone else does.

Dataprise

Dataprise

Dataprise is a leading IT managed services provider offering IT Management and Help Desk Support Services, Cloud Services, Information Security Solution, IT Strategy and Consulting.

Core to Cloud

Core to Cloud

Core to Cloud provide consultancy and technical support for the planning and implementation of sustainable security strategies.

Schillings

Schillings

Shillings defends your rights to privacy, reuptation and security. We fight passionately against breaches of your privacy, attacks on your reputation and threats to your security.

Esprinet

Esprinet

The Esprinet Group is an enabler of the technology ecosystem: a team of people who promote access to technology through an extensive network of professional resellers.

Phylum

Phylum

Phylum provides powerful, automated software supply chain risk analysis that protects organizations, defends developers and enables secure innovation.

OneZero Solutions

OneZero Solutions

OneZero specialize in cybersecurity operations, information assurance, computer network operations, solutions engineering, and project management.