The holiday season is fast approaching and it’s a busy period for all companies. You’re often increasing services to customers before the end of the year, while staff are preparing for time away with their families. With increased activity and extra distractions, the door is open for errors or negligence and this leaves your business vulnerable to attacks from cybercriminals.

Hackers don’t stop for the holidays, so take the necessary precautions to educate your employees and protect your business. Here are 6 essential steps to consider:

1. Understand your vulnerability

From government institutions to medium-sized businesses and individuals – anyone can be a target of cybercrime. While no industry is spared, those like retail and manufacturing that process large amounts of money and sensitive customer data, are more at risk. Assessing your risk is the first step in preventing an attack.

2. Have a cyberattack plan

Criminals are fine-tuning their skills and becoming more sophisticated in their methods, which is why it’s essential that businesses of all sizes have a comprehensive business security plan in place to deal with a successful security breach. A good plan will ensure that the right escalation path is followed and the appropriate incident response team members contacted immediately if there is a problem.  

3. Update software and systems

You need a good baseline by installing security software and ensuring that it is regularly updated. Firewalls, encryption and antivirus, antimalware and antispam software, all form part of your first line of defence. By routinely checking and maintaining software, you ensure it continues to keep your system resilient and effective.  

4. Educate and train employees

Conduct cyber awareness training sessions throughout the year and include a refresher course before the holiday season. It pays to remind employees of the threats facing your business and how you can be exposed. By keeping them updated with the latest threats you increase the likelihood that a vigilant employee will recognise suspicious activities. All unusual communication must be reported to security personnel or the IT department.

5. Beware of popular tactics

Cyberattacks are constantly evolving. As a business owner it’s essential that you are aware of the common threats to your business, such as malware, viruses, ransomware, spyware and phishing. By learning of the latest scams and keeping employees educated, you reduce your vulnerability and the risk of a successful attack.

6. Limit physical access

Not all threats are online. To prevent someone gaining physical access to sensitive areas or data centres, you need to secure your physical environment. Restrict staff access, implement camera surveillance, have a secure perimeter fence and employ best practices like badged door entry. In addition, instil a clean desk and clean screen policy that ensures sensitive or confidential business data isn’t visible or easily accessible.

Cybersecurity is vital throughout the year, however with increased risks during the peak holiday season, it’s essential that you step up your security measures. We may take the holidays off, but cybercriminals do not. By taking the necessary security precautions you will protect your employees and your customers, while safeguarding your business and its reputation.

For more information about cybercrime insurance, please contact an Indwe advisor on 0860 13 13 14 or indwe@indwe.co.za.

Indwe Risk Services (Pty) Ltd is an authorised FSP 3425.