11 Cyber Security Questions Every Small Business Should Ask Themselves

Therese Park
Aug 11, 2022
2 min read

I have a question for you:

Do you regard a cyber-attack as a potential risk for your small business?

If your answer is no, well, think again.

Because here is the hard truth: cybercrime is on the rise and hackers are increasingly targeting small businesses!

The big question therefore is: are YOU prepared for a cyber-attack?

Well, if you are confused and unsure if you are prepared, here are some questions every small business owner must ask themselves to ensure that they are indeed prepared for a cyber-attack.

#1: Does Every Employee Have a Strong Password?

More than half of all data breaches caused by weak passwords and yet just 24% of small businesses have a strict password policy in place.

#2: Are Your Employees Required to Change Their Passwords Regularly?

Despite having a password policy in place, 65% of businesses do not enforce it. It should be mandatory for your employees to change their passwords regularly to protect data.

#3: When Possible, Do You Use Two-Factor Authentication?

Add an extra layer of data security by enforcing two-factor authentication wherever possible. For example, by adding SMS authentication.

#4: Do Your Employees Use Their Personal Smartphones for Work Purposes?

Chances of malware attacks are greater when personal phones and devices are used in the office network. To prevent data theft, give your employees secure work phones with a passcode.

#5: Are You Backing Up Your Files?

Cyber-attacks can make your confidential files completely inaccessible. It is therefore a good idea to keep local backups as well as an offsite server.

#6: Does Every Company Device Have Antivirus and Malware Software Installed?

Make sure the updated versions of antivirus and malware software are installed and check devices before use.

#7: Have You Limited the Amount of Employees with Admin Access to Only Those Who Absolutely Need it?

Give access sparingly and only to those employees who really need it. Importantly, make sure those employees are well educated on security issues.

#8: Are Your Employees Trained in Recognizing Phishing Emails?

Phishing accounts for 49% of all cyber-attacks, and it can be tricky for an employee to identify it. It’s important to train employees to ensure they do not respond to suspicious emails.

#9: Do Your Employees Know Never to Give Sensitive Information to Supervisors Via Email?

Sometimes hackers create an email address that looks genuine and is in the name of a colleague. Ask your team to double-check email requests for sensitive information.

#10: Do You Encrypt Databases and Customer Information?

Without encrypting, your sensitive data is accessible to hackers. That’s why, you must ensure all your information is encrypted.

#11: Are Your Websites Properly Protected?

Most attacks happen on your company’s websites. It’s therefore a good idea to install updates and stay updated on your website’s security best practices to avoid data loss.