{"id":809,"date":"2024-09-17T07:36:32","date_gmt":"2024-09-17T12:36:32","guid":{"rendered":"https:\/\/cmitsolutions.com\/boston-ma-1089\/?p=809"},"modified":"2024-09-17T14:14:14","modified_gmt":"2024-09-17T19:14:14","slug":"the-15-most-effective-cybersecurity-tactics-for-smbs","status":"publish","type":"post","link":"https:\/\/cmitsolutions.com\/boston-ma-1089\/blog\/the-15-most-effective-cybersecurity-tactics-for-smbs\/","title":{"rendered":"The 15 Most Effective Cybersecurity Tactics for SMBs"},"content":{"rendered":"

Ready To Test Your Cybersecurity Awareness?<\/strong><\/h1>\n

October is Cybersecurity Awareness Month. Did you know\u2026 one in five small businesses will suffer a cyber breach this year? 81% of all breaches happen to small and medium sized businesses? And that 97% of breaches could have been prevented with today\u2019s technology? To help boost awareness, we compiled a Cybersecurity Awareness Checklist with the 15 most effective tactics your security team should be doing to protect your company, your staff, and your clients\u2019 data from a cyber-attack.<\/p>\n

DOWNLOAD the 15-Point Cybersecurity Awareness Checklist HERE<\/a><\/strong><\/h3>\n

\"\"<\/a><\/p>\n

The 15 Most Effective Cybersecurity Tactics To Protect Your Business<\/b><\/h2>\n

Want to know where your company stands? Check out the Cybersecurity Awareness Checklist and read on to see how well your organization is protected.<\/p>\n

1. Security Assessment<\/strong><\/h3>\n

A security assessment<\/a> seeks to identify both the good security and privacy practices an organization has in place, identify gaps and then document the steps needed to close them. It\u2019s important to establish a baseline and roadmap for your cybersecurity and privacy program. A security assessment provides that framework and enables a company to develop a comprehensive plan to address deficiencies. We\u2019ve found that 90% of IT employees lack confidence in their companies\u2019 ability to detect IT problems. When was your last assessment?<\/p>\n

2. Phishing Emails<\/strong><\/h3>\n

Secure your email. Roughly 90% of breaches and compromises start with phishing attacks. Phishing emails<\/a> are becoming harder and harder to spot. Even when detected, nearly half of organizations reported that it takes a day or longer to remove phishing emails from endpoints once a phishing attack is reported to the security team\u2014largely due to a lack of manpower.<\/a> We\u2019ll help you train your staff and provide technical solutions to protect your business and staff from these attacks.<\/p>\n

3. Passwords<\/strong><\/h3>\n

A password policy<\/a> that provides for strong password and passphrases, requires users to use different passwords for different accounts and leverages password safes is another key piece to a robust cybersecurity program. Weak password policies make hackers\u2019 jobs easy. Knowing these four key steps can help secure your passwords<\/a>. What\u2019s your password policy?<\/p>\n

4. Security Awareness<\/strong><\/h3>\n

Train your users \u2013 often! Teach them about data security, phishing attacks, and your policies and procedures. We offer a variety of training solution which can be tailored to your business and its needs. Security-related risks are reduced by 70%<\/a> when businesses invest in cybersecurity awareness and training<\/a>.<\/p>\n

5. Advanced Endpoint Detection & Response (EDR)<\/strong><\/h3>\n

Protect your computers data from malware, viruses, and cyber-attacks with advanced endpoint security<\/a>. Today\u2019s latest technology protects against file-less and script-based threats and can even rollback a ransomware attack.<\/p>\n

6. Multi-Factor Authentication (MFA)<\/strong><\/h3>\n

A staggering 81% of hacking-related breaches leverage either stolen and\/or weak passwords. It is crucial to utilize MFA<\/a> whenever you can\u2014including on your network, email, banking websites, social media and any other services your business uses. MFA adds an additional layer of protection to ensure that even if your password gets stolen, your data still stays protected.<\/p>\n

7. Computer Updates<\/strong><\/h3>\n

Keep your operating system, iOS and third-party software up to date (e.g., Adobe, Chrome and Java products). According to the 2018 Trustwave Global Security Report, 100% of web applications tested displayed at least one vulnerability, with 11 as the median number detected per application. We provide vetted, automated updates for your workstations, servers and third-party patching. Are your machines and devices up to date?<\/p>\n

8. Dark Web Research<\/strong><\/h3>\n

Knowing in real-time what passwords and accounts have been posted on the Dark Web<\/a> can allow you to be proactive in preventing those credentials from being used by hackers to access your personal or sensitive information. We scan the Dark Web<\/a> and take action to prevent your business from stolen credentials that have been posted for sale.<\/p>\n

9. SIEM \/ Log Management (Security Incident & Event Management)<\/strong><\/h3>\n

SIEM<\/a> uses big data engines to review all event and security logs from all covered devices to protect against advanced threats and to meet compliance requirements. Intel Security reports that 93% of security personnel are overwhelmed by alert data and unable to triage all potential threats.<\/a><\/p>\n

10. Physical Security<\/strong><\/h3>\n

Physical security is an often overlooked piece of your security program. Make sure your main entrances and exits are protected. Also, protect areas with sensitive documents and computer equipment by limiting access to authorized individuals. Keeping uninvited guests out of your office and securing areas is crucial to protecting sensitive data and your business from breaches.<\/p>\n

11. Mobile Device Security<\/strong><\/h3>\n

As many as 91% of businesses plan to have a mobile workstyle strategy in place, while 62% already have one<\/a> according to insight.com. Cyber criminals attempt to steal data or access your network by way of employees\u2019 phones and tablets. They\u2019re counting on you to neglect this piece of the puzzle. Mobile device security<\/a> closes this gap.<\/p>\n

12. Firewall<\/strong><\/h3>\n

Firewalls are a critical piece of your security infrastructure.\u00a0 Improperly configured, they can allow hackers into your internal network allowing them to bypass your filters.\u00a0 Properly configured firewalls, leveraging the latest tools, provide a baseline of protection for your company.<\/p>\n

13. Encryption<\/strong><\/h3>\n

A laptop is stolen every 53 seconds.<\/a> Whenever possible, the goal is to encrypt files at rest, in motion (think email) and especially on mobile devices. Encryption of sensitive data can help limit the impact of stolen devices and provides a safe harbor in some regulations.<\/p>\n

14. Backups<\/strong><\/h3>\n

Backups are critical as they protect your company from accidental or intentional data loss.\u00a0 They also protect your data from Ransomware. Having up to date backups adds an additional layer to your security program. Backup local. Backup to the cloud. Have an offline backup for your company\u2019s data. Test your backups often. And if you aren\u2019t convinced your backups are working properly, call us ASAP.<\/p>\n

15. Cyber Insurance<\/strong><\/h3>\n

If all else fails, protect your income and business with cyber damage and recovery insurance policies.\u00a0 Cyber insurance policies can be complex and overwhelming.\u00a0 Make sure you work with a professional insurance agent and that you fully understand the coverage limits of your policy.<\/p>\n

How Secure Is Your Company?<\/strong><\/h3>\n

Hopefully your run through the checklist went well. Maybe it opened your eyes to a few cyber security blind spots in your organization and inspired you to take action to secure your business. Still unsure where to start? A great first step is to perform a security assessment. This will help identify the areas for improvement and enable your company to develop a roadmap with recommendations tailored to your environment. Remember that the hackers don\u2019t rest, so act now to begin addressing your company\u2019s cybersecurity program. Contact your trusted CMIT advisor if you need help.<\/p>\n

Written by: Chris Zambuto<\/a> | Chief Information Security Officer @<\/a>CMITBostonCambridge<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Ready To Test Your Cybersecurity Awareness? October is Cybersecurity Awareness Month. Did…<\/p>\n","protected":false},"author":259,"featured_media":1036,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28],"tags":[59,29,32,25,51,34,31,35,46,60,44,30],"class_list":["post-809","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-blog","tag-awareness-training","tag-cmit-solutions","tag-cybersecurity","tag-cybersecurity-awareness-month","tag-dark-web","tag-edr","tag-email-phishing-testing","tag-endpoint-detection-and-response","tag-log-management","tag-mobile-device","tag-multi-factor-authentication","tag-phishing"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t