Data security tips for small businesses

Smaller businesses survive and thrive precisely because they can be more flexible than larger companies. These smaller businesses are often able to make best use of remote access into the network (whether via VPNs on the PC or laptop or mobile devices) driving high efficiencies and high levels of staff productivity. Yet, at the same time, with a greater variety of devices access accessing the network there is an increased risk of security threat. Furthermore, these threats are getting much more sophisticated and the damage therefore much more difficult to control without the right processes and tools in place.

So how can small businesses maintain the highest levels of data protection?

Layer your security

It’s important to defend your business in depth. Use an integrated endpoint security solution and ensure your security patches are up to date. In addition, your antivirus definitions and intrusion prevention signatures must be updated regularly, and all desktops, laptops and servers should also be updated with the necessary security patches from the operating system vendor.

Consider deploying a personal firewall to help control network traffic to any of the endpoint devices that have to access your network. Also, make sure to enable the security settings on Web browsers and disable file sharing.

Additionally, teach users to develop strong passwords with at least eight characters and a combination of numbers, letters, and special characters. Recent research has shown that people tend to use the same passwords every time they go online and more than 1.7 million people are at risk of falling victim to internet fraud.

Ensure your business isn’t at risk by changing all passwords every 45-60 days to make it more difficult for intruders to access your data.

Spam is the leading source of malicious software entering networks today. Spam not only diminishes productivity, it also puts a strain on storage and bandwidth requirements. Deploy anti-spam technologies at the mail gateway to proactively protect your environment.

Implement a network access control solution

All network-connected computers and inbound/outbound traffic should be monitored for signs of unauthorised entry and malicious activity. Ensure any infected computers are removed from the network and disinfected as soon as possible. Also, create and enforce policies that identify and restrict applications that can access the network.

To ensure they have the latest protection, small businesses should apply operating system and security software updates and patches as soon as they are released. In order to protect against successful exploitation of Web browser vulnerabilities, upgrade all browsers to the latest versions.

Stay Informed

Several companies publish reports that help define the threat landscape for small businesses. These reports can be found on their websites or through online searches. This is a great way to stay informed about what you’re up against.

Don't forget physical security

There are a number of routine physical security tactics employees within smaller businesses can use to help strengthen their companies’ security defences. These include using the screen-locking feature when away from the computer, shutting the computer off when done for the day, locking laptops with a cable, not leaving passwords written down, and being mindful of the physical security of mobile devices and laptops, which are popular target for theft.

Back up your data

For any number of reasons – disaster, human error, hardware failure, and so on – your IT system could be brought down. It is critical to back up important data regularly and store extra copies of this data off site. Since tapes containing confidential customer or business data may be lost or stolen in transit, encrypting those backup stores is a good idea.

Also try our top network security threats for small businesses.