Common Mistakes in Business Security

Posted · Add Comment

Unless you’ve been living under a rock for the past few years, at this point in the game, we understand the importance of cyber security and its crucial role in protecting our business.

In efforts to keep information safe, we try to stay up to date on security measures. We have an IT team. We make it a priority to stay on top of the game. But sometimes, while paying attention to the big issues, we neglect to implement safeguards for the small stuff. And often, it’s these same minor details that can cause the most amount of damage.

Failing to train your staff properly

When we talk about cyber security, it’s common to think of hackers or pimply teenagers with no friends who design viruses from their dark bedrooms in Random Town, USA. Or if you want to get more dramatic, you imagine a lonely soul in a Kremlin basement. But what if I told you that your own employees can pose a bigger threat?

Yes, Joe from accounting could unintentionally open an email attachment that causes your entire system to be compromised. His heart will constrict as he thinks about having to sell his organs in the black market in order to make rent next month once management finds out about his mistake.

Wanna save your private information (and Joe’s organs)? Train your staff. Drill into their minds the importance of never opening attachments from senders they do not know.

Failing to establish damage control measures

Ok. So nobody’s perfect. The damage has already been done. Now what? If you haven’t established policies to mitigate damage, there are several possible scenarios: (A) Joe from accounting freaks out, but doesn’t tell anyone, so that he doesn’t get in trouble. (B) Joe tells several people, and they all suggest different alternatives. Joes is confused and doesn’t know what to do.

Are any of those going to help you? No. You don’t wait until you’re in a desert between Las Vegas and Los Angeles to think about whether you have enough gasoline for the trip. You plan ahead. Implement damage control measures. Have a data recovery person. Make sure everyone on staff knows exactly who to contact. Do this now, while everything’s peachy; and bring it up at every staff meeting, so that employees always remember.

The best defense is a good offense. That phrase has been around for ages for a reason. Be smart about your business security. Pay attention to the small stuff. A match can burn down an entire forest.


Comments are closed.