518-373-4111
How much do you know about cyber security? Small business owners often lack the resources to enact a strong defense against cybercrimes and take for granted that their IT systems are relatively safe. All it takes is for one employee to click on the wrong link and your business could be in jeopardy. After a thief hacks into your system, the rewards can be great, so there’s a powerful motivation to keep trying. To guard against security issues and minimize risk, here are some cyber security tips for small businesses to share with your staff.
- Realize that a familiar logo may be a copy, used to create a facade of credibility. Phishers can easily cut and paste graphics from legitimate websites to make an email appear genuine.
- Watch carefully for erroneous messages, for example, an email containing a fake purchase confirmation. The message directs the user to click a link “for more information.” Such links and attachments may allow thieves to gain access to your passwords or install malware on your computer.
- Know that personal details about you in an email don’t necessarily indicate the sender is legitimate. Determined cybercrooks are patient. They gather information about you and use it to create the illusion of familiarity and win your trust.
- Determine whether the sender’s address and name matches that of the alleged sender. A common tactic is to take an email address and slightly misspell the name or add extra letters. An unwary eye might not notice this variation.
- Phishers often use threats or warnings to make you respond quickly, without taking a moment to consider the legitimacy of the email. A common scam is to tell the recipient an account will be locked for nonpayment unless immediate action is taken.
- Notice the mechanics of the message. Internet crooks aren’t known for their ability to spell or to use grammar properly. They generally don’t employ proofreaders. Here’s an example from an actual scam message, which ended with this call to action: “please clicking on reply.”
Cyber Tips for Road Trips
Employees who travel for work need to be on high alert for hacking attempts. This is especially true if they travel to a foreign country that might have a high priority on looking for commercially sensitive data.
Don’t expect any protection from hackers — including the government of the country you are visiting. In some countries, you can assume there’s a good chance your digital communications will be monitored.
If you think there may be a high degree of risk, take only essential digital devices. Otherwise, back up all sensitive data, then delete it off the devices you’ll be traveling with. Use full device encryption for sensitive data, set up strong passwords and make sure all of your applications are up-to-date. Also, you can register for the U.S. Department of State’s Smart Traveler Enrollment Program to receive travel alerts regarding your destinations.
Safe but not Secure
Never assume your digital equipment is secure just because it’s locked in a hotel room safe. Safes can be opened by certain hotel employees if they’re determined to steal data from you.
Public computers in business centers, internet cafés, and kiosks are anything but secure, and shouldn’t be used for any sensitive business or personal communications.
When you get home, be sure that your antivirus software is current and run a full system scan. It might also be wise to change all your passwords and throw away any removable media you bought or used on the trip.
Assume the Worst
When it comes to the security of your company’s databases, you can’t be too careful. In the interest of safety, you need to assume mistakes will be made. That’s why it’s critical to go over computer security issues with your staff regularly, alerting them to new scams and providing tips for avoiding them.
For more information and to learn how GTM helps keep our clients’ payroll data safe from cybercriminals, please contact us at (518) 373-4111.
