The Smallest Businesses Face the Biggest Cyber Risks
Friday, March 22nd, 2013
While many of us long for the days when people had real-life conversations rather than truncated text chats, the reality is that the Internet is here to stay. And in the Internet Age, data is king.
As a small business owner, you collect customer data every day. And if you’re using the Internet, that data – along with all of your company’s sensitive information – is vulnerable to attacks.
Without the proper safeguards in place, your business could suffer a data breach that exposes sensitive information, disrupts your operations and opens the door to an expensive lawsuit.
Why Cyber Security Matters to Small Business
The majority of data breaches happen to small and mid-sized business. Surprised? Consider these chilling stats:
- About 40% of all cyber attacks are aimed at small businesses, but because smaller firms have fewer resources to devote to cyber security…
- More than 72% of successful data breaches happen in smaller companies.
- About 71% of small business owners admit to lacking confidence in their current cyber security measures.
- As many as 65% of businesses go without cyber insurance – even though many of them cite data breaches as their number one concern.
Even more troubling? The average cost of a data breach for a small to mid-sized business is a staggering $5 million.
Why Cyber Security Matters to YOUR Small Business
When a small business suffers a data breach, the fallout can be tremendous. A single breach can trigger a variety of financial damages, including:
- Lawsuits (and the attendant legal costs) from clients whose data and security were compromised. These alone can reach into the tens of thousands of dollars and beyond.
- Site repair costs to address security issues that allowed the breach to happen.
- Public relations and / or advertising costs to restore the company’s image among current and potential clients.
- Lost confidence and lost future business from current and potential clients whose confidence is shaken by the data breach.
Unfortunately, most small business owners believe that a data breach won’t happen to them, either because they have adequate protection in place or because their information isn’t worth stealing. In reality, hackers often see small businesses as prime targets because the data they store is typically less diligently protected than the data held by large corporations.
How Data Breaches Happen
In small businesses, data breaches can happen in a number of ways. Common scenarios include:
- Your employee opens an email that contains a damaging virus, which spreads itself to everyone on the employee’s contact list, including clients. The virus hurts your business’s computer system, as well as your clients.
- A virus compromises your company website, forcing you to redo the site and institute new security policies – which, of course, requires that you hire someone familiar with the relevant technology.
- A hacker finds a way into your system and outright steals data from your files.
- An employee who works from his tablet loses the device, which isn’t password protected, putting sensitive data at large. You now have to handle the data crisis as well as the fact that your employee’s productivity will likely plummet.
- A former employee who left on bad terms accesses your system and wreaks havoc internally thanks to unchanged passwords.
Any of these scenarios could cause your clients financial loss, open your business to lawsuits, force you to shut down operations while you address the problem and damage your reputation with current and prospective clients. The associated costs could quickly spiral out of control.
Luckily, you’re not completely powerless against the data breach risks your business faces.
Tips to Manage Your Cyber Security Risks
The good news is that there are several strategies you can implement to keep your risk of data breaches low. These include:
- Using strong passwords. More than half of data breaches are caused by weak (aka “guessable”) passwords. Make yours strong and change them regularly.
- Implementing virus protection, firewalls and encryption techniques. These all make your network less vulnerable to attacks.
- Limiting information disclosure. Only give access to sensitive data to team members who absolutely need it.
- Investing in cyber liability insurance. Depending on your needs, you may be able to purchase this type of coverage as an add-on to your general liability policy. If your business has bigger data security needs, you can purchase a stand-alone cyber liability policy. Either way, the coverage will pay for the legal and recuperative costs associated with a data breach that affects your company.
The takeaway? The Internet, data and all its accompanying risks are not going away any time soon. Do your business, your clients and your bottom line a favor by preparing for the risks you face before they cause serious damage.
Courtesy: Small Biz Trends