Most businesses use tools that can be exploited by criminals and other hostile actors to access your systems, data or money. Securing your accounts and controlling access can reduce the risk.
The National Cyber Security Centre (NCSC) is the UK authority for cyber security and publishes information that can help you protect your business against cyber threats.
Its Cyber Action Toolkit provides a list of actions you should complete to protect your accounts, devices and data.
NCSC’s Early Warning System alerts you if it learns that your business has been exposed to known cyber threats, like attempted attacks or data leaks.
Cyber resilience centres across England and Wales can offer local support to businesses who want to improve their cybersecurity.
Weak points in your email, website or other systems can give hackers access to your business.
Use NCSC’s online tool to check for vulnerabilities and understand where your business may be at risk.
Human error can be the main point of weakness for a business, so make sure anyone with access to your systems understands basic cyber risks and can spot suspicious activity.
Passwords that are weak, shared or reused make it easier for criminals to take over accounts, especially if account details are leaked from another website.
Improve password and account security by:
Unused or shared accounts can be a real security risk to your business.
Do a regular review of who has access to business accounts, such as email, online banking, payment systems, website admin, social media accounts and shared file storage.
Check if you’re still giving access to:
Remove any account or login that is no longer needed. Suspend and review any accounts that may still be needed but haven’t been used in the last few months.
Outdated software can contain weaknesses that criminals can exploit to gain access to your systems and data.
To minimise risk:
Backups let you recover data so your business can recover quickly if files are lost or damaged, through a cyber attack or normal human error.
Security risks can change over time as criminals get more sophisticated and your staff, systems and processes change.
Cyber Essentials is a government-backed certification scheme that helps you protect your business from common online security threats. You can become certified by:
Businesses preparing for Cyber Essentials certification can get a free advice session from a cyber adviser.
