Cyber security for small businesses: the basics that stop most attacks
Most cyber attacks on small businesses are not sophisticated. They rely on a weak password, an unpatched laptop or a convincing email. Five basics, and the free help available.
Finance systems are where the money is, so they are where attackers aim. The government’s advice to small businesses starts with the basics, because the basics stop most attacks.
Five basics
- Sign-inTwo-step verification on email, banking, payroll and accounting, for everyone.
- UpdatesAutomatic updates on every laptop and phone used for work.
- AccessEach person has their own login and only the access they need.
- BackupsRegular backups kept separately, and tested by restoring something.
- PeopleStaff trained to spot phishing, and comfortable reporting a mistake.
Free help
The government’s Cyber Action Toolkit gives sole traders and small businesses short, practical steps. Cyber Essentials is a certification that shows customers you have the basics in place, and is required for some government contracts. Cyber Advisors offer government-approved advice, and small and medium businesses can book a free 30-minute consultation.
If something goes wrong
A business, charity or organisation under a live cyber attack can call the 24/7 reporting line on 0300 123 2040. Report fraud and cyber crime to the police through Report Fraud, and plan your response in advance using the National Cyber Security Centre’s Small Business Guide to Response and Recovery.
More on
This insight is general information, not advice for your circumstances. Talk to us before acting on it.