The CyberSecure My Business™ Review is a monthly newsletter for organizations highlighting recent headlines in cybersecurity news, resources and upcoming events.
Business Cybersecurity in the News
Two Escalating Small Business Cybersecurity Threats
Bob Botezatu, senior e-threat analyst at Bitdefender, highlights data from the company’s recent Global Threat Landscape Report, including that more than 160 ransomware families emerged over the course of 2017 – each spawning dozens or even hundreds of variations. Additionally, the data shows that one in six spam emails contains ransomware; Botezatu discusses the growing sophistication of ransomware and the threat of banking Trojans and encourages small and medium-sized businesses (SMBs) to “deploy malware defenses that are able to block both traditional and newer attack avenues.”
Approaching Cybersecurity as a Critical Business Function
According to CSO contributor Gary Hayslip, many small business leaders don’t see their organizations as targets for cybercriminals because they “imagine themselves as debris that are so small, no one will notice”; however, cybercrime is a real and growing threat across all industries and organization sizes. Hayslip outlines a few key considerations for SMBs looking to reduce their risk exposure – understanding the drivers behind cybersecurity investments, reviewing the company IT portfolio, conducting risk assessments and developing strategic cybersecurity improvement plans.
Cybersecurity Tips That Are Cost-Effective and Efficient
Cyber threats to businesses are on the rise, with increasingly common and sophisticated ransomware attacks and attacks causing growing amounts of damage to impacted businesses. Dirk Morris explains some best practices enterprises should implement to mitigate cyberattacks: keeping employees educated about cyber hygiene, keeping systems updated, beginning data security strategies at the network level and leveraging high-quality security tools.
The Disconnect Between Cybersecurity & The C-Suite
Despite the growing prevalence of cyberattacks in the news, many organizations still “struggle to comprehend the scale of and manage emerging cyber-risks” – in fact, of more than 9,500 senior executives who participated in PricewaterhouseCoopers’ Global State of Information Security Survey (GSISS), only 39 percent report being very confident in their ability to detect and trace cyberattacks. Reporter Marc Wilczek discusses this and other findings of the GSISS, including executives’ opinions on the biggest potential consequences of cyberattacks and the absence of chief information security officers (CISOs) on the payroll at many organizations. He advocates for leaders taking more responsibility for building cyber resilience and greater information sharing and coordination among stakeholders.
Resources From Our Partners and Friends
- Federal Trade Commission (FTC) – Protecting Small Businesses: If you’re a small business owner, you have a lot on your mind. You can’t afford to lose time or money to scammers or a compromised network. The FTC can help you avoid scams, protect your computers and networks, keep your customers’ data safe – and protect your bottom line. You also can find out what the FTC is doing to protect small businesses. Stay connected by subscribing to the FTC’s Business Blog.
- MediaPro: Your risk landscape changes constantly. Your employee awareness program should too. MediaPro offers award-winning awareness training, reinforcement and communication tools, phishing simulator, planning tools and knowledge assessments – all designed to change behavior and build a risk-aware culture. Check out the Resources page for toolkits, articles and other insights on cybersecurity for your business.
Tuesday, Jan. 9
2:00-3:00 p.m. EST/11:00 a.m. – 12:00 p.m. PST
Join a webinar hosted by the National Cyber Security Alliance (NCSA) – as part of the CyberSecure My Business™ program – to learn how your business can protect key data and technology. Resources are available to help you improve the cybersecurity of your business.
#ChatSTC Twitter Chat: Fostering a Culture of Privacy Awareness at Work
Wednesday, Jan. 24
3:00 ‒ 4:00 p.m. EST/12:00 ‒ 1:00 p.m. PST
Data Privacy Day is less than week away, and it’s an opportune time to think about how your business collects, stores, manages and uses data.
Personal information about customers, vendors and/or employees may be valuable to your business – but it’s something consumers value, too. During this Twitter chat, we’ll discuss the importance of safeguarding data at your organization, things to consider in protecting this information and how you can foster a culture of privacy awareness at all levels of the organization. Use #ChatSTC to join!
Monday, Jan. 29
8:00-11:30 a.m. (CST)
University of Memphis, University Center Ballroom
499 University Center
Every business – large or small, for profit or nonprofit – holds data that has value. The best practices for protecting online accounts are the same for any type of organization. This workshop is designed to help all organizations better understand the threats they face and connect them with free resources to improve security.
Attendees will hear from experts about how to keep their online business data safe from cyber threats and what to do if they have fallen victim to cybercrime.
Tuesday, Feb. 13
2:00-3:00 p.m. EST/11:00 a.m. – 12:00 p.m. PST
Join a webinar hosted by NCSA – as part of the CyberSecure My Business™ program – to learn about how to respond when a cyber incident happens. Resources are available to help you improve the cybersecurity of your business.