Five Common Cybersecurity Myths for Companies in England

Small and medium-sized businesses are increasingly being targeted for cyber-attacks. We live in an increasingly digital world which allows processes to be more efficient. However, digital progress and expansion come with the increased risk of cyber-attack on businesses in England. So more than ever, your company needs to focus on cybersecurity and ensure you do not expose your business to hackers and cybercriminals. This article will examine some common cybersecurity myths and what your business should do to protect itself from cyber-attacks. 

Why is Cybersecurity So Topical?

In recent years, the number of cyber-attacks on businesses in England has skyrocketed. This was partly due to the COVID-19 pandemic, which resulted in the sudden shift to staff increasingly working from home. Home working presented hackers with potentially weaker entry points into organisations.

Why Are Cybercriminals Targeting Businesses?

There are usually two primary purposes behind cyber attacks on organisations in England. The first type of attack is known as a ‘ransomware’ attack. As the word ‘ransom’ suggests, this locks the business owner and staff out of the IT system and demands payment for re-entry. The financial cost of these attacks, including the ransom amount and the loss of business while locked out of the system, can be substantial. Alternatively, your business may suffer a security breach. This usually involves cyber criminals attempting to steal sensitive and personal information from your business. Sensitive information can include passwords, employee information and bank details, which can enable theft of company funds, fraud and identity theft of staff members.

Given the significant consequences of suffering a cyber attack, let us explore five common cybersecurity myths so your business gives itself the best level of protection.

1. Antivirus Software Alone is Enough

Having up-to-date antivirus software is a good starting point, but you must also implement other precautions. Using only antivirus protection is like locking your front door at night but not closing your windows. You have protected the main entry point, but others could offer opportunities for intruders.

2. Data Theft Only Comes From Outside

Most cybersecurity issues are from external hackers. However, individuals and staff members can sometimes do more damage, whether intentional or not. For example, an employee inserting an infected USB stick into a company computer can cause massive damage. Therefore, your organisation must ensure employees cannot plug media into USB ports or devices, usually by locking access without administrator approval.

3. Cybercriminals Don’t Attack Small Businesses

It is a widespread myth that cybercriminals only attack large businesses. In reality, many cybercriminals target smaller organisations because they likely have a weaker security system. Many recent surveys show nearly half of known cyber attacks target small or medium-sized businesses. Part of this is the belief that a successful attack would cause substantial damage and make payment of a ransom more likely.

4. Strong Passwords Are Enough

Using a long, complex password is a fantastic starting point. However, it does not offer complete protection. This is because some forms of computer virus can track keystrokes and record the entry of any passwords, no matter how strong.

5. It is Obvious When a Cyberattack Occurs

Not all computer viruses announce their arrival with a locked screen or ransom messages. Instead, some viruses enter discreetly and remain on the system to steal new data entries. This scenario occurred in 2018 when a popular hotel chain discovered malware that was present on the system for four years. During those four years, the malicious computer software stole customer details and passport information. As such all guests were at risk of identity theft. This demonstrates the need to actively search IT systems for unusual software.

Key Takeaways

Cyber attacks are becoming increasingly complex and require more proactive measures to counteract them. Unfortunately, some businesses suffer cyber attacks due to implementing only basic protection such as installing antivirus software. However, many business owners are now taking more interest in cybersecurity in light of the number of attempted cyber attacks on businesses over the past 24 months.

If you need help with data protection security and improving your cybersecurity, our experienced Data, Privacy and IT lawyers can assist as part of our LegalVision membership. For a low monthly fee, you will have unlimited access to lawyers to answer your questions and draft and review your documents. Call us today on 0808 196 8584 or visit our membership page.

Frequently Asked Questions