5 basic steps you should take to protect your business dataLabs IT Serviss - Computer and server maintenance

Although high-quality antivirus software is a must-have for any business, we recommend that you take other basic steps to protect your business data. You don't have to worry about costs or workload to implement these methods, you can start implementing some of these methods right now.

This publication will explore some preventative measures that can be taken right away to keep your business data secure.

1. Two-factor authentication (2FA)

Two-factor authentication, often abbreviated as 2FA, is a security protocol that is becoming the standard day by day. Basically, one-factor authentication, such as password instead of two-factor authentication, adds another layer of security.

What this second layer looks like varies depending on the user's preferences. Sometimes it is biometric authentication, such as facial or fingerprint scanning. Other times, it can be an additional password or answers to changing personal questions addressed to a specific individual.

We recommend that you and your employees implement 2FA without delay. Biometric data is one of the more difficult-to-decrypt and hacking data that hackers can try to steal and use to gain access to your network. It doesn't matter which authentication factor comes first. For example, if you have an iPhone, you may have noticed that you are prompted to enter a password or pin code after using the face scan feature - this is one example of a randomly activated 2FA login. In many situations, such authentication is required after turning off the mobile phone, restarting it, updating the software, connecting to other data sources, and when the phone has been idle for a long time.

Some programs (random code generators) use time-limited passwords - passwords with an "expiration date" that are periodically refreshed as a second - an additional factor for your security. When you log in with your usual username and password, you may be redirected to a window where you must enter a time-limited password and this password will be displayed on your phone or email, or on any additional device. One good example of such an authentication method is Google Authenticator (a random terminator).

2. Cyber security education and training

The old saying - "To know means to be better protected" definitely corresponds to this.

You need to educate yourself and your team regularly about the latest cyber security threats. Cybercrime attacks are constantly evolving and, as a result, digital security experts are constantly improving their knowledge. And knowledge is needed to protect against hacking, data leakage and other cybercrime that happens every day and even more often.

The digital struggle, if you may call it that, has grown. The relationship between hackers and digital security experts has deteriorated rapidly in recent years, and unfortunately small businesses are increasingly the victims of abuse, and in many situations, they will even become distributors of malware. As in medicine, they will become carriers of the virus. Be careful!

Here are some statistics on the prevalence of cyber security threats in Latvia in 2021:

97% - Banking Trojans, Malicious software designed to obtain bank access data;

78% - Adware, shows unwanted ads and tries to lure users to dangerous sites;

53% - Remote connection exploits, attacks networks and devices using remote connection;

40% - OS exploits, exploits vulnerabilities in frequently used programs to gain access;

28% - Hacker attacks, hacking to steal information, install malware and spread a virus.

… And these data tend to grow.

Most of these threats are initiated by most courts through an "innocent" e-mail with a link to a malicious website or an attached infected file.

These are all obvious reasons why you and your employees need to hold regular cybersecurity meetings and develop cybersecurity rules in your organization ASAP (as soon as possible).

3. Perform inspections and tests of your IT system

IT security companies offer many services to help business owners assess the quality of their cybersecurity. Different types of IT audits are available, but one of the most effective ways is to simulate an intrusion or at least identify vulnerabilities in a company's IT system. Business owners and employees are often unaware that there are "windows" through which hackers can access data, and such simulated intrusions help identify vulnerabilities in a company's IT system.

When performing simulated intrusions, IT technicians will use phishing schemes and other tools to try to trick employees into downloading malware. Such artificial incidents create a great experience and allow employees to be trained when they encounter malware.

In what situations should you contact your cybersecurity supervisor?

You should contact the cybersecurity supervisor if you upgrade your system or make changes to your network. In transition, companies are usually the most vulnerable to cybercriminals.

You should also contact security professionals if you have recently expanded your network and / or have new employees.

Since the beginning of the COVID-19 pandemic, many changes have been made to day-to-day work - many company employees have been working remotely from home. Some companies even started fully remote operations. As a result, remote accesses were created. Whereas in the past the networks of many companies were closed and could only be accessed locally - on the spot, then access to databases, documents and programs was created from the outside when remote work began.

The fact that employees have access to your company's network remotely via an Internet connection is much riskier than having an employee work locally. Because the risk of burglary increases with each remotely connected employee. And where else is the human factor. Even knowledgeable professionals tend to make mistakes after phishing attempts and download an unwanted document (file).

Before establishing a remote connection, it would be very important to inform the employee about the risks and actions to be taken in the event of various types of incidents or their symptoms.

4. Install business class WIFI (wireless network)

By installing a home-type WIFI in your company, you are really risking your business. Business-class WIFI has many more advantages, including the ability to prioritize connections, configure more accurately, have higher speeds, and provide better service.

… And it is no surprise that business devices are much more secure and stable.

5. Use business-class antivirus for business needs

Whether your team runs MacOS or Windows, you'll need high-quality antivirus software. If you have not yet installed Business Class Antivirus, we recommend that you purchase it now. Why? - A good antivirus will protect you and your employees in many situations, both from the above-mentioned "human factor" and from many other incidents. Often, you don't even know that you've visited a malicious site or downloaded an infected document. And it must be borne in mind that cyber security professionals today, in a highly competitive environment, work very hard to protect their customers and develop high-end antivirus software.

Why use paid versions? - Because paid versions of virus databases are constantly updated and this is very important if you want to be protected from current viruses. As well as nowadays, the cost of antivirus is quite inexpensive compared to the service offered.

… Whatever your decision or confidence in the security of your company's network, you can always call Labs IT Service and ask for support - We will help.

Cybercrime is ongoing and statistics are growing every day.

Don't become a statistic!