What is cyber security?

• October 24, 2019
• Author: Give A Grad A Go
• IT, Software & Engineering , Technology & Digital

 

Cyber security is the practice of reducing the risk of cyber attacks, which pose a threat to computers, servers, mobile phones, electronic systems and networks. Also known as Information Technology Security, or Electronic Information Security, it is broadly split into three ‘pillars’; people, processes and technology, which are all used to defend against cyber threats.

So what’s the purpose of these threats? Cyber attacks are usually intended to access, change or destroy sensitive information and data, disrupt regular business processes, and sometimes steal money, objects or identity from individuals or more commonly, organisations. Companies need cyber security in place to protect themselves from such attacks.

 

Why Is Cyber Security Important?
 

Because digital products (computers, smartphones, and so on) now play such a central role in our day-to-day and working lives, cyber security is crucial to everyone; from individuals looking to look after their online identity, to businesses needing to preserve important information like personal, financial and medical records.

For businesses, cyber attacks can be damaging to reputation as well as revenue; and are a major concern for business of all sizes, and across various industries. As these cyber security attacks continue to grow and become more sophisticated, cyber security programmes must adapt and expand accordingly.

The following guide explains cyber security for businesses; including different types of cyber threats, the potential threats of cyber attacks on businesses, and advice on creating an effective cyber security prevention strategy for startups, SME’s and large businesses.

 

Types of Cyber Security Threats
 

Cyber attacks can take many different forms; and it’s important that your business is protected against all of them, no matter what size. The 3 main types of cyber threats are fairly well-documented:

Phishing – Phishing is a type of social engineering attack, that is sent through an email or text message. It is used to steal user data; login details, credit card numbers and so on.

Ransomware – Ransomware is a type of software used to deny access to a computer system or specific data until a ransom, usually monetary, is paid.

Malware – Malicious software (‘malware’) is a program or a file that is harmful to a computer user; including viruses, spyware, and Trojan horses.

 

Examples of Cyber Attacks
 

The most common cyber security threats that affect modern businesses are:

• Transaction fraud
• Ransomware attacks
• Malware attacks
• Hacking / password decryption

And these threats can take the form of:

• Theft of, or unauthorised access to, computers, laptops, mobile phones and other devices
• Remote cyber attacks on IT systems or networks
• Cyber security attacks on information held by 3^rd parties – bank accounts, hosted services etc
• Accessing information via company employees

 

Potential Effects of Cyber Attacks On Businesses
 

Financial losses from stolen information – Financial losses could result from the theft of bank details, money or financial information from the company

Financial losses from the disruption of normal business practices – If someone has carried out a ransomware or malware attack that prevents your business from selling or operating online, your company may face huge financial losses

Financial losses from repairing systems – If your systems have all been affected or data has been compromised, there may be huge costs involved in getting them back up and running again

Financial losses from fines – If personal data is lost through a cyber attack, your business could face huge fines, due to data protection and privacy laws which would have been compromised

Loss of information – Stolen information can be hugely damaging to companies. A virus or malware can erase or overwrite data in your database, potentially losing years of information

Reputation damage – As well as being costly, compromising customer data can reflect poorly on your company and come at a devastating cost to customer loyalty. Were you doing enough to keep customers’ personal information safe?
 

Creating a Cyber Security Prevention Strategy
 

Good cyber security practices, and an understanding of the key cybersecurity basics, help businesses to prevent and respond to digital attacks quickly and effectively.

It is essential for businesses of all shapes and sizes to have some kind of cyber attack prevention plan in place. Armadillo Managed Services recommends the following:

We understand that there are a huge number of security vendors out there who are promising to be the silver bullet to the whatever buzzword is in the news – and it can be really difficult to stay abreast of the market when cyber security is not your core business. Like any other major project, our advice is to stop and plan before rushing into purchasing a new technology which might end up doing not much more than warming your data centre! Here are a few tips:

• ANALYSE RISK
  
  Think about the threats which might face your business. What data do you hold that people might want to steal, or if it was leaked would cause the most damage to your business? Think about the systems which if they were maliciously taken offline would stop your business from running. You security strategy should prioritise controls which address these key risks first and foremost.
   
• DEVELOP A PLAN
  
  Take stock of the tools and controls you already have. It maybe that you have tools which could address your challenges already but they are just not set up correctly. Budgets are always tight – so reuse where you can.
  
  Similarly, just because you have a tool in place – don’t assume it is doing its job properly. Businesses are used to doing audits or penetration tests on an annual basis, but security moves much more quickly and its important to continuously assess the state of your security. If a firewall administrator does an upgrade and mistakenly opens up part of your network to the internet, you might not notice for a few months – but you can be sure the bad guys will. There are now tools available to continuously test your defences, alert when there is a problem and most importantly show you how to remediate them.
  
  Once you think you have addressed your risks, consider mapping your organisation against an industry standard security framework. Examples are Cyber Essentials, Cyber Essentials+ and ISO 27001. There are two main benefits to going through such a process – firstly you learn from the knowledge of others – frameworks force you to follow a prescribed checklist which will cover things you might have missed yourself. Secondly, it gives your organisation an external ‘stamp of approval’ which helps build trust with your customers and business partners.

Finally, as a managed services provider ourselves you may think this is biased advice – but do consider outsourcing some areas of security if you are not confident in doing it properly yourself. Buying a tool is one thing, but attracting, training and retaining cyber security staff can be a full time job in itself. A specialist cyber security provider will be able to bring knowledge gained across a whole range of other customers – knowledge it would be impossible to gain in a reasonable time within a single organisation. Managed services providers work as an extension to your existing team and allow you to focus on growing your business rather than worrying about security!
 

• PROTECT YOURSELF

Protect your business from cyber security attacks by covering the 10 basics straight away:

10 Steps To Cyber Security

1. Use strong passwords (and require employees to do so)
2. Control access for employees
3. Use a firewall for best cyber security management
4. Install computer security software like anti-spyware, anti-virus and anti-malware
5. Always update programs to give yourself the best computer security
6. Encrypt your business data
7. Regularly back up all information
8. Monitor the use of all equipment and IT systems
9. Educate your employees / raise awareness of cyber security
10. Frequently submit your cyber security plan to audits - stay up-to-date with cyber security developments
 

• TRAIN

As well as educating your employees on the importance of cyber security, it’s important to make sure everyone is aware of the dangers, and of what to do in a crisis. Most importantly, make sure your tech team is equipped to deal with cyber crime, if an attack were to happen to your business.

Try a ‘cyber security for beginners' course to help your employees understand the risks and implications of sharing data.

 

As an employer, you need to know how to protect your business from cyber crime; by creating an actionable cyber defence plan, educating your employees and remaining diligent.

Let us know how your business is building a cyber security strategy.
 

More information about cyber security for businesses
 

• HM Government - Cyber Security Guidance for Businesses
• Information Commissioner’s Office (ICO) - Cyber Security For Organisations
• IT Pro Portal - The importance of maintaining cyber security in your business
• How to manage your online identity
• Why does your digital footprint matter?
   

If you’re looking to hire a graduate, we can help. Get in touch below to find out how we can solve your graduate recruitment needs.

• October 24, 2019
• Author: Give A Grad A Go
• IT, Software & Engineering , Technology & Digital