October marks Cybersecurity Awareness Month 2024, and it’s a great time for small businesses to take a closer look at their digital defences. This year’s theme, “Secure Our World,” emphasises the importance of taking proactive steps to safeguard data, networks, and devices in an increasingly connected world. With cyberattacks on the rise, no business is too small to be targeted, which means cybersecurity needs to be a priority for everyone.

Why it matters

We’ve seen that even the largest corporations aren’t immune to cyber threats. Take MOVEit, for example—a major file transfer platform used by businesses worldwide. Earlier this year, MOVEit was hit by a data breach that exposed sensitive data of companies and millions of individuals. Hackers took advantage of a vulnerability in their software, highlighting how devastating a cyberattack can be when security isn’t airtight. If it can happen to a big player like MOVEit, it can certainly happen to a smaller business with fewer resources.

How small businesses can protect themselves

While small businesses may not have the cybersecurity budgets of larger enterprises, there are still several affordable and effective measures they can implement to safeguard their operations:

Use strong passwords and multi-factor authentication (MFA): Weak passwords are a major vulnerability. Ensure all employees use strong, unique passwords, and whenever possible, implement MFA to add an extra layer of protection.

Update software regularly: Cybercriminals often exploit outdated software with known vulnerabilities. Make sure all systems, apps, and devices are updated regularly with the latest security patches.

Backup data frequently: Having regular data backups ensures that in the event of a ransomware attack, your business can restore critical data and minimize downtime. Store backups in a secure, offline location.

Train employees: Human error is one of the biggest causes of security breaches. Conduct regular cybersecurity training to make sure employees can spot phishing emails, use secure browsing practices, and handle data securely.

What you can ask your colleagues to do

Stay vigilant against phishing: Encourage employees to be cautious with unexpected emails or links. Phishing remains one of the most common forms of attack.

Report suspicious activity: Create a culture where reporting suspicious emails, pop-ups, or slow-running systems is encouraged. The sooner issues are reported, the quicker action can be taken.

As we dive into Cybersecurity Month 2024, let’s make sure we all do our part to keep our businesses safe from cyber threats. A few proactive steps now can prevent costly problems down the line!

PS If you want to stimulate your brain outside of the workplace, check out the Philosopher-in-Residence blog – out fortnightly on Thursdays, courtesy of Make Me A Plan’s Principal Planner, Anna Pascoe. Browse the latest edition here:

https://www.makemeaplan.com/news/on-babies/