Stay a Step Ahead: Cybersecurity in Motion...One report found 47% of small businesses had at least...

3
or visit Dell.com/SBChat 877-BUY-DELL Contact a Small Business Technology Advisor today at Copyright © 2019 Dell Inc. or its subsidiaries. All rights reserved. Dell Technologies, Dell, EMC, DELL EMC and other trademarks are of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners. Offers subject to change, not combinable with all other offers. Taxes, shipping, and other fees apply. Free shipping offer valid only in Continental (except Alaska) U.S. Offer not valid for Resellers. Dell reserves the right to cancel orders arising from pricing or other errors. **Subject to credit approval, product availability, applicable law, and documentation provided by Dell Financial Services. Coming Wednesday, October 2nd Equipping smart employees to use smart technology Most cyberattacks are directly or indirectly enabled (or not noticed) by employees. Teaching people to practice good cybersecurity and equipping them with the right tools turns what can be the biggest vulnerability at a small business into its biggest security asset. Learn about best practices in training and policies for small business security, and what tools they should use to make a business more robust and resilient in the face of threats. part three Coming Tuesday, October 1st With cybercriminals constantly adapting the techniques they use to target small businesses, it is critical that defenses be kept up to date. That means updating software, replacing software that is not supported, and upgrading hardware as new security features become available. Learn how common software solutions, such as Microsoft Windows 7 and Microsoft Server 2008, are reaching their end of service life, what new security options are available in hardware, and how businesses can deploy them affordably. Staying up-to-date in a changing landscape part two up next... Ransomware attacks were the most common, where data is locked and held for payment. But in addition to direct costs, there are also the harder-to-calculate costs of lost time, productivity and, if sensitive data was compromised, potential legal claims from clients. The good news is that small businesses are not helpless. By closing off common avenues of attack, training employees (or themselves) to spot and repel attacks, and having up-to-date Antivirus subscription, such as McAfee Small Business Security, small business owners can reduce their risk and increase their security. The only misconception more dangerous for small businesses than “I’m too small for hackers to bother” is “I’m too small to do anything about it.” In reality, as McAfee notes, not only are small businesses prime targets for hackers, but they are often more reliant on fewer devices – an entire business’ data may be hosted on a single laptop, or all its transactions conducted on a few mobile devices. For these businesses, cybersecurity is absolutely mission-critical. One report found 47% of small businesses had at least one cyber attack in the past year. (Hiscox) Scaling cybersecurity for any size business almost 5 million firms – with fewer than 20. (SBE Council, 2016) While these businesses often have limited funds available for technology and security, they also have more options available then before – many security enhancements have minimal cost and come mostly from training employees in common- sense procedures. New technology funding options, like equipment leases or low-interest technology financing, put more tools at a business’ disposal.** And modern security software solutions offer exceptional value, protecting businesses better and more affordably than even before. Small businesses may not realize it, but they are a big target for cybercriminals. As large corporations have invested millions in cybersecurity and elaborate training for their employees, the large number of small businesses who have yet to adapt to digital threats now present a far more tempting opportunity. Fortunately, powerful new security measures have become more readily available to small businesses, and that technology has become more affordable. That’s good news for the 98.2 percent of American businesses with fewer than 100 employees, and the 89 percent – No business too small, no threat too large part one of three Why updating cybersecurity is a necessity for small businesses Stay a Step Ahead: Cybersecurity in Motion Sponsored content from $36,604 average cost to small businesses of a cyber attack (Hiscox) 900k new phishing URLs detected in Q3 2018, more than triple the previous quarter (McAfee, Dec 2018) 100% increase in losses (from $677 million to $1.3 billion) due to Business Email Compromise attacks in 2018 over 2017 (FBI ICCC) 58% of breached companies were using products beyond end-of-life (SecurityScorecard) 43% of confirmed breaches in 2018 involved small businesses (Verizon Enterprise, 2019)

Transcript of Stay a Step Ahead: Cybersecurity in Motion...One report found 47% of small businesses had at least...

Page 1: Stay a Step Ahead: Cybersecurity in Motion...One report found 47% of small businesses had at least one cyber attack in the past year. (Hiscox) Scaling cybersecurity for any size business

or visit Dell.com/SBChat877-BUY-DELL

Contact a Small Business Technology Advisor today at

Copyright © 2019 Dell Inc. or its subsidiaries. All rights reserved. Dell Technologies, Dell, EMC, DELL EMC and other trademarks are of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners. Offers subject to change, not combinable with all other offers. Taxes, shipping, and other fees apply. Free shipping offer valid only in Continental (except Alaska) U.S. Offer not valid for Resellers. Dell reserves the right to cancel orders arising from pricing or other errors.**Subject to credit approval, product availability, applicable law, and documentation provided by Dell Financial Services.

Coming Wednesday, October 2nd

Equipping smart employees to use smart technology Most cyberattacks are directly or indirectly enabled (or not noticed) by employees. Teaching people to practice good cybersecurity and equipping them with the right tools turns what can be the biggest vulnerability at a small business into its biggest security asset.

Learn about best practices in training and policies for small business security, and what tools they should use to make a business more robust and resilient in the face of threats.

part three

Coming Tuesday, October 1st

With cybercriminals constantly adapting the techniques they use to target small businesses, it is critical that defenses be kept up to date. That means updating software, replacing software that is not supported, and upgrading hardware as new security features become available.

Learn how common software solutions, such as Microsoft Windows 7 and Microsoft Server 2008, are reaching their end of service life, what new security options are available in hardware, and how businesses can deploy them affordably.

Staying up-to-date in a changing landscape

part two

up next...

Ransomware attacks were the most common, where data is locked and held for payment. But in addition to direct costs, there are also the harder-to-calculate costs of lost time, productivity and, if sensitive data was compromised, potential legal claims from clients.

The good news is that small businesses are not helpless. By closing off common avenues of attack, training employees (or themselves) to spot and repel attacks, and having up-to-date Antivirus subscription, such as McAfee Small Business Security, small business owners can reduce their risk and increase their security.

The only misconception more dangerous for small businesses than “I’m too small for hackers to bother” is “I’m too small to do anything about it.” In reality, as McAfee notes, not only are small businesses prime targets for hackers, but they are often more reliant on fewer devices – an entire business’ data may be hosted on a single laptop, or all its transactions conducted on a few mobile devices.

For these businesses, cybersecurity is absolutely mission-critical. One report found 47% of small businesses had at least one cyber attack in the past year. (Hiscox)

Scaling cybersecurity for any size business

almost 5 million firms – with fewer than 20. (SBE Council, 2016)

While these businesses often have limited funds available for technology and security, they also have more options available then before – many security enhancements have minimal cost and come mostly from training employees in common-sense procedures. New technology funding options, like equipment leases or low-interest technology financing, put more tools at a business’ disposal.** And modern security software solutions offer exceptional value, protecting businesses better and more affordably than even before.

Small businesses may not realize it, but they are a big target for cybercriminals. As large corporations have invested millions in cybersecurity and elaborate training for their employees, the large number of small businesses who have yet to adapt to digital threats now present a far more tempting opportunity.

Fortunately, powerful new security measures have become more readily available to small businesses, and that technology has become more affordable.

That’s good news for the 98.2 percent of American businesses with fewer than 100 employees, and the 89 percent –

No business too small, no threat too largepart one of three

Why updating cybersecurity is a necessity for small businessesStay a Step Ahead: Cybersecurity in Motion

Sponsored content from

$36,604average cost to small

businesses of a cyber attack(Hiscox)

900knew phishing URLsdetected in Q3 2018, more than triple the

previous quarter(McAfee, Dec 2018)

100%increase in losses

(from $677 million to $1.3 billion)due to Business Email Compromise

attacks in 2018 over 2017(FBI ICCC)

58%of breached

companies were usingproducts beyond

end-of-life(SecurityScorecard)

43%of confirmed breaches in 2018

involved small businesses(Verizon Enterprise, 2019)

Page 2: Stay a Step Ahead: Cybersecurity in Motion...One report found 47% of small businesses had at least one cyber attack in the past year. (Hiscox) Scaling cybersecurity for any size business

Copyright © 2019 Dell Inc. or its subsidiaries. All rights reserved. Dell Technologies, Dell, EMC, DELL EMC and other trademarks are of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners. Offers subject to change, not combinable with all other offers. Taxes, shipping, and other fees apply. Free shipping offer valid only in Continental (except Alaska) U.S. Offer not valid for Resellers. Dell reserves the right to cancel orders arising from pricing or other errors. **Subject to credit approval, product availability, applicable law, and documentation provided by Dell Financial Services.

This is especially helpful for new businesses without a strong credit history.

Owners can use personal credit to apply for business purchases.**

4.

Acquiring technology and security expenses through specialized financing gives small businesses flexibility.

Customizable financing options are available.**

3.

Businesses can finance software, consulting services, and tech support in addition to the hardware needed to improve security.**

It’s not just for machines.2.

“I’ve had clients who leased a single laptop,” said Dell’s Jane Johnson.**

No business is too small.1.

things to remember

only17%of small businesses

have someone in charge of information security

(Better Business Bureau, 2017)

16,555vulnerabilities identified

in 2018, including 1,370 for Windows Server 2008 and

1,229 for Windows 7(CVE Details, 2019)

1.9million new

mobile malware threats were detected in Q4 2018

(McAfee, 2019)

Check back tomorrow for part three: Equipping smart employees to use smart technology

This approach helps small businesses focus on their core business, roll all technology expenses into a single convenient payment, and ensure all the pieces work well together, eliminating the security gaps common in piecemeal systems.

“It’s a common misconception that financing and leasing is only for larger customers, but we really work with credit analysts to get smaller customers approved,” says Johnson. “No business is too small for good security.”

Another advantage of financing is it lets small businesses upgrade their entire system at once. “It keeps it all together – hardware, software, services and support,” said Johnson. “They can get on-site keeps it all together – hardware, software, services and support,” said Johnson. “They can get on-site tech support, and then don’t need to hire an IT resource.”

These security upgrades usually can’t be added to old hardware. Added security is just one justification for upgrading. The other is productivity – newer computers are faster and can eliminate the time wasted working around incompatibilities in older machines.

When you add new hardware and software, you should train your employees. They must be taught to use enhanced security features and should be regularly informed of new ways cybercriminals are targeting small businesses.

Making security investments work for small businessesFor most small business customers, the biggest constraint on security investments is budget,” says Jane Johnson, a financial coach with Dell Financial Services. “A lot of them are just starting up and feel security is a luxury, rather than the necessity it is.”

Fortunately, there are creative ways to help small businesses invest in their cybersecurity while minimizing cash flow impact. Purchases of any size can be financed, spreading out costs, and often offering a competitive rate low monthly payments.** Many software solutions, such as McAfee Small Business Security, are now available as subscriptions, so users get the latest version automatically. And there may even be a leasing option available, which ensures regular upgrades.

Biometric logins: These include fingerprint scanners and infrared-capable cameras for facial and retina recognition, which significantly reduce a cybercriminal’s ability to hack a stolen device.Fingerprint-sensing mouse peripherals: These new innovations bring touch-login security to desktops.TPM 2.0 (Trusted Platform Module) built into processors: These enable trusted machines to communicate securely and block outside attackers.

·

·

·

Even without end of service events, small businesses should be regularly installing security patches, upgrades and new versions of software they own. Hardware upgrades improve security and productivityNeeding a new operating system is an opportunity to upgrade hardware. In recent years, new features have been added to devices that reduce the risk of breaches, including:

“These major end-of-service events involving the biggest software companies don’t happen often,” said Rao. “You want to pay attention.”

For small businesses to operate, it’s important not to take a “set it and forget it” approach. “Bigger companies are more likely on a fixed refresh cycle,” says Rohit Rao, a Senior Technology Advisor with Dell Small Business Solutions. “Small businesses tend to be less consistent. But it’s really important that they upgrade software, hardware and policies.”

Coming Soon to Small Businesses: Windows 7 and Windows Server 2008 End of ServiceSmall businesses should take note of the upcoming end of support for two common operating systems: Microsoft’s Windows 7 computer OS and Windows Server 2008 server OS.

Despite being over a decade old, many small businesses still use these systems. After January 14, 2020, Microsoft will no longer release security updates or patches for the operating systems, which means any exploits hackers find will never be closed.

Small businesses can count on one thing when it comes to cybersecurity: hackers, scammers and cybercriminals who target small businesses are never standing still. They are constantly developing new attacks, chipping away at existing security, and sharing what they learn among themselves.

Staying up-to-date in a changing landscapepart two of three

or visit Dell.com/SBChat877-BUY-DELL

Contact a Small Business Technology Advisor today at

Why updating cybersecurity is a necessity for small businessesStay a Step Ahead: Cybersecurity in Motion

Sponsored content from

Page 3: Stay a Step Ahead: Cybersecurity in Motion...One report found 47% of small businesses had at least one cyber attack in the past year. (Hiscox) Scaling cybersecurity for any size business

Copyright © 2019 Dell Inc. or its subsidiaries. All rights reserved. Dell Technologies, Dell, EMC, DELL EMC and other trademarks are of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners. Offers subject to change, not combinable with all other offers. Taxes, shipping, and other fees apply. Free shipping offer valid only in Continental (except Alaska) U.S. Offer not valid for Resellers. Dell reserves the right to cancel orders arising from pricing or other errors. **Subject to credit approval, product availability, applicable law, and documentation provided by Dell Financial Services.

or visit Dell.com/SBChat877-BUY-DELL

Contact a Small Business Technology Advisor today at

TECHNOLOGY Enable encryption of emails and encrypt data on devices. Make sure all attachments and files are scanned for suspicious code.

TRAININGTeach employees how to use these tools.

Data protection 3.

TECHNOLOGY Automatic, frequent data backups to secure locations walled off from the rest of the network can allow a business to recover quickly.

TRAININGEmployees need to know how to recognize when data has been compromised, who to report it to, and how to access and use the backup.

Attack recovery2.

TECHNOLOGY Buy equipment with layers of security, like fingerprint and facial recognition on top of passwords. Install remote-wipe tools.

TRAININGMake sure employees use the technology. Set up a protocol and expectation to report missing devices promptly.

Device security1.

Three ways people and technology work together to secure small businesses

working together

in cybersecurity – not only direct financial losses, but potentially the loss of business secrets, customer data, legal fees, and ultimately the reputation of a business – which makes cybersecurity worth the effort for businesses of every size.

Advice: Do as much as you can, and plan for the next phaseRao sees small business security is a balancing act. The key is recognizing the threats and starting with the behaviors and mentality of employees and owners. Once that is in place, the security tools they use become much more effective.

It’s also important to remember what is at stake

Train employees to spot phishing: Often sent via email, cybercriminals use email to direct people to legitimate-looking login pages to capture login credentials and then break into or infect systems. Teach employees to check the return email address and link. If anything seems off, don’t click the link. Log in from a new browser window or call to ask about the email.

Don’t click suspicious texted links on phones: In a new tactic used to infect mobile devices, hackers text message a link to a target. Clicking it downloads and installs a hidden app that can capture information or provide a backdoor into a network.

Establish a clear chain of approval for financial transactions: A popular scheme involves spoofing an email to an employee, seemingly from a business leader (whom the hacker knows to be unavailable), asking for an urgent financial transfer – right to the hacker’s account. Businesses should set up backup protocols to check the validity of transfer requests.

Practice safe online habits: Set expectations about not visiting suspicious sites, not downloading unapproved software or media, and setting strong, unique passwords that are changed regularly.

·

·

·

·

Training employees is essential and can counter emerging threatsStill, many of the most serious cyberthreats facing small businesses actually use employees as a way in, and even require the employee to take some action to enable the attack.

“I tell my clients, security starts with behavior,” said Rao. “The vast majority of threats start at the endpoints, somebody clicking on a link they shouldn’t or responding to a phishing email.”Taking the time to train employees can go a long way to repelling the most successful types of cyberattacks.

Some good training to put in place to address top threats:

The computers and devices employees use are different for business use as well, with added physical security features. Working with a consultant who can bundle solutions, offer financing** and establish what is truly necessary can help even the smallest businesses get strong security.

“One of my customers was planning to buy 10 or 15 very, very basic computers,” recalls Rao. “By understanding his needs, and working on the financing, we were able to get him better systems plus a good firewall, and that’s had a huge impact on the overall security of his business.”

“Some products are tailored for home use, and some for business,” said Rohit Rao, a Senior Technology Advisor with Dell Small Business Solutions. “Small businesses sometimes opt for home-use technology for budget reasons, but there is a difference when it comes to security.”

Security starts with the overall network, says Rao. Small businesses are better served by a hardware firewall that is designed to stop hackers from getting in, can analyze and sequester suspicious data before it gets to a computer, and can protect networked devices that don’t have software firewalls. For home users, a combined modem/router with less robust software-based firewall usually suffices.

Small business cyber security is a multi-layered defense that combines the right technology with people trained to use it, with upgrades and training on a regular schedule. But one size does not fit all.

Equipping smart employees to use smart technologypart three of three

over90%of successful cyberattacks start as phishing emails

(Better Business Bureau, 2017)

72%of employees admit they’d

share confidential infoin some circumstances

(Dell, 2017)

<50%of small businesses

train their employees in cybersecurity

(Better Business Bureau, 2017)

Why updating cybersecurity is a necessity for small businessesStay a Step Ahead: Cybersecurity in Motion

Sponsored content from