Every year on 30 November, we celebrate Computer Security Day, which highlights the importance of keeping your online data secure and safe. This day has been around since 1988, and we have seen huge advancements in the sophistication of devices and software available to us, but also a big increase in cybercrime.

SMEs account for 99% of Wales’ business population, making them a significant part of our economy. Yet, they can also be an appealing target for cybercriminals since they often lack the security measures that larger organisations with greater resources will have in place.

For many SMEs and micro-businesses, the financial and reputational damage caused by these attacks can be devastating, which is why prioritising cyber security is so important, and Computer Security Day is the perfect opportunity to start putting in simple measures to protect yourself.

Two of the first lines of defence to deploy are anti-virus software and firewalls. So, let’s explore what these are and why it’s essential for a business to put these in place.

Anti-virus software 

This is designed to detect, block, and remove malicious software, such as viruses, ransomware, and spyware. Without it, the consequences of a successful attack could include:

·       Data breaches leading to financial penalties and reputational damage

·       System downtime if a virus affects your systems making them unusable and disrupting business operations

·       Encryption of files and data disrupting business operations and blackmail demands for their release

Firewalls

These act as a barrier between your internal network and the internet, monitoring and controlling incoming and outgoing traffic. They allow you to set rules, prevent unauthorised access and block suspicious activity. Without a firewall your business could potentially face the following:

• Criminals gaining unauthorised access into your system leading to possible data breaches, financial penalties and reputational damage

• Your network being exploited by criminals so they can gain access to other organisations

For organisations, implementing these tools is relatively simple and affordable, yet the protection they offer is invaluable.

Start by:

• Reviewing your anti-virus and firewall solutions—are they up to date? These updates often include security patches that protect against the latest threats

·       Educate staff and employees about the importance of cyber security and help them to recognise phishing

emails

• Backup your data to a secure, offline location as this ensures you can quickly recover in the event of a ransomware attack

• Use strong and unique passwords and implement two-factor authentication (2FA)

• Take advantage of free resources and support that are available from the WCRC and the National Cyber Security Centre. The NCSC’s Cyber Action Plan and Exercise in a Box are good places to begin

  
  

Cyber threats are evolving every day, but with the right tools and practices small businesses can protect themselves effectively. For SMEs and micro-businesses operating on a tight budget, the impact of a cyber-attack can be catastrophic, so this 30 November, make cyber security a priority—it could save your business.

The Cyber Resilience Centre for Wales is here to support SMEs and micro-businesses across the country. Sign up for our free membership, which will inform you of the current threats and simple steps to take to reduce your vulnerability to an attack.

The centre also provides cyber security services at a discounted rate which includes security awareness training and vulnerability assessments to provide reassurance that you have an appropriate level of security in place and a policy review service.