Some helpful tips to keep your company and customers cyber safe:
Protect against viruses, ransomware, and other malicious code
- Make sure company computers/devices are equipped with anti-virus and anti-malware protection software. Configure operating systems and software to install updates automatically.
Take steps to secure networks
- Safeguard internet connection, use a firewall and encrypting information. Make sure Wi-Fi network is secure and hidden. Enable encryption on your wireless access point. Password-protect access to the router.
Establish security policies- protect sensitive information
- Create and enforce policies on how employees handle personally identifiable information and sensitive data. Outline consequences of violating cybersecurity policies and hold employees accountable. Educate employees on safe use of social networking sites (how to post content online without revealing private data/trade secrets).
Enhance security around employee authentication to devices/networks
- Require employees to use strong passwords and to change them often. Implement multi-factor authentication requiring additional information beyond a password to gain entry. Check with vendors handling sensitive data, especially financial institutions, to see if they offer multi-factor authentication for accounts.
Implement best practices on payment cards
- Work with your bank or card processor to ensure trusted and validated tools and anti-fraud services are being used. Check additional security obligations under agreements with your bank/processor. Isolate payment systems from other, less secure programs. Don’t use the same computer to process payments and surf the internet.
Back up important business data and information
- Regularly back up data on computers. Critical data includes word processing documents, electronic spreadsheets, databases, financial files, human resources files, and accounts receivable/payable files. Back up data automatically and store the copies either offsite or in the cloud. Ideally one copy would be kept offline.
Control physical access to computers and network components
- Prevent access or use of company computers/devices by unauthorized individuals. Laptops are targets for theft and can be lost. Lock when unattended. Make separate user accounts for each employee and require strong passwords. Administrative privileges should only be given to trusted IT staff and key personnel.
