SMEs are increasingly becoming a prime focus for cybercriminals. The strategic importance of good cyber hygiene
04/09/2024
Cyber threats are a significant concern for businesses of all sizes, so good cyber hygiene is imperative to safeguarding enterprises in the digital era.
In today's increasingly digitised world, cyber threats have become a significant concern for businesses of all sizes, including small and medium-sized enterprises (SMEs). These threats can range from
- Data breaches
- Phishing attacks
- Ransomware and
- Malware infections
They can devastate SMEs, leading to financial losses, reputational damage, and operational disruptions.
Despite often being considered less attractive targets than more giant corporations, SMEs are increasingly becoming a prime focus for cybercriminals.
This is due to several factors, including:
- Perceived vulnerability:
- Cybercriminals often assume that SMEs have weaker security measures in place, making them easier targets to exploit
- Lack of resources:
- SMEs often have limited resources to dedicate to cybersecurity, making it more challenging for them to implement and maintain robust security protocols
- Data value:
- SMEs still hold significant amounts of valuable data, such as customer information, intellectual property, and financial records, which are attractive targets for cybercriminals
The impact of cyberattacks on SMEs
- To put it simply, the consequences of a cyberattack can be devastating.
- They can result in substantial financial losses, reputational damage, and operational disruptions, impacting organisations for years.
- One-way enterprises can combat the potential risk of a cyberattack is through good cyber hygiene, which is the practice of taking simple and proactive steps to protect yourself and the organisation from cyber threats.
Denis Dorval, VP of International (EMEA and APAC) of JumpCloud, explains.
- That one of the reasons why SMEs have become a target for attacks stems from the widely held belief that these organisations possess less robust and well-defined security measures.
- Due to budget and resource limitations, SMEs often lack comprehensive cyber hygiene and end-user security awareness training, making them prime targets for phishing and social engineering attacks.
In addition, infrequent system updates, weak passwords, and unpatched devices further exacerbate their vulnerability.
- A staggering 25% of UK IT admins acknowledge using the same passwords across multiple applications as a significant security concern. However, despite recognising this issue, the adoption of password managers among UK organisations falls short of the global average.
- Only 58% of UK respondents utilise password managers, compared to 64% worldwide,
- Only 13% of the population plans to implement such tools soon.
When asked about their most significant security concerns, UK IT admins said:-
- Network attacks (40%),
- Ransomware (35%), and
- Software vulnerability exploits (28%),
- Password across different applications. (25%)
Dorval says:
- “The growing sophistication of security threats continues to plague IT admins within SMEs, and external threats are causing the most alarm.
- “Part of the solution is an IT environment built around identity.
- Identity is now at the core of every IT access transaction; it’s the new security perimeter.
- The ideal environment for SMEs, as it is for larger organisations, is to securely connect the right users with the right resources at the right time in the right way, no matter where users log in.”
The importance of adopting good cyber hygiene
- The growing sophistication of security threats poses a continuous challenge for IT admins in SMEs, with external threats emerging as the most concerning.
- By adopting good cyber hygiene practices, SMEs can significantly reduce their risk of falling victim to cyberattacks, which, in turn, can protect valuable assets, maintain their reputation, and ensure the continuity of their business operations.
- Investing in cybersecurity is not just about protecting against threats but also about gaining a strategic advantage.
- SMEs prioritising cybersecurity can demonstrate their commitment to data protection and customer trust, enhancing their reputation and attracting new business opportunities.
- Good cyber hygiene is a technical necessity and a crucial part of SME's strategy.
- By implementing effective cybersecurity measures, SMEs can safeguard their business, protect their assets, and thrive in an increasingly interconnected and vulnerable digital world.
Source
https://cybermagazine.com/articles/the-strategic-importance-of-good-cyber-hygiene
The Team
Meet the team of industry experts behind Comsure
Find out moreLatest News
Keep up to date with the very latest news from Comsure
Find out moreGallery
View our latest imagery from our news and work
Find out moreContact
Think we can help you and your business? Chat to us today
Get In TouchNews Disclaimer
As well as owning and publishing Comsure's copyrighted works, Comsure wishes to use the copyright-protected works of others. To do so, Comsure is applying for exemptions in the UK copyright law. There are certain very specific situations where Comsure is permitted to do so without seeking permission from the owner. These exemptions are in the copyright sections of the Copyright, Designs and Patents Act 1988 (as amended)[www.gov.UK/government/publications/copyright-acts-and-related-laws]. Many situations allow for Comsure to apply for exemptions. These include 1] Non-commercial research and private study, 2] Criticism, review and reporting of current events, 3] the copying of works in any medium as long as the use is to illustrate a point. 4] no posting is for commercial purposes [payment]. (for a full list of exemptions, please read here www.gov.uk/guidance/exceptions-to-copyright]. Concerning the exceptions, Comsure will acknowledge the work of the source author by providing a link to the source material. Comsure claims no ownership of non-Comsure content. The non-Comsure articles posted on the Comsure website are deemed important, relevant, and newsworthy to a Comsure audience (e.g. regulated financial services and professional firms [DNFSBs]). Comsure does not wish to take any credit for the publication, and the publication can be read in full in its original form if you click the articles link that always accompanies the news item. Also, Comsure does not seek any payment for highlighting these important articles. If you want any article removed, Comsure will automatically do so on a reasonable request if you email info@comsuregroup.com.