{"id":4829,"date":"2018-08-14T10:00:59","date_gmt":"2018-08-14T09:00:59","guid":{"rendered":"https:\/\/www.sage.com\/en-gb\/blog\/?p=4829"},"modified":"2026-01-29T10:33:57","modified_gmt":"2026-01-29T10:33:57","slug":"what-is-cybersecurity","status":"publish","type":"post","link":"https:\/\/www.sage.com\/en-gb\/blog\/what-is-cybersecurity\/","title":{"rendered":"What is cybersecurity and how can it keep your business safe?"},"content":{"rendered":"
\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\tTechnology & Innovation<\/a>\t\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\tWhat is cybersecurity and how can it keep your business safe?\t\t\t\t\t<\/h1>\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n\t\t

\n\t\t
\n\t\t\tPublished
\n\t
\n\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n\t\t\t\n\t\t\t\t\"\"\t\t\t\tStacey McIntosh<\/span>\n\t\t\t<\/a>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n\n

Having a basic understanding about cybersecurity and best practices is crucial for keeping your business safe online. Simply defined, cybersecurity involves the methods used by businesses and individuals to protect the integrity, confidentiality, and availability of data against online threats.<\/p>\n\n\n\n

Why is cybersecurity or IT security important?<\/strong><\/h2>\n\n\n\n

As the world becomes increasingly digital, companies are experiencing an unprecedented level of online risk. According to a 2017 government report, 46% of all UK businesses<\/a><\/u> reported at least one cybersecurity breach or attack over a 12-month period.<\/p>\n\n\n\n

Medium and large businesses face even higher levels of risk, with 66% of medium and 68% of large business experiencing at least one cybersecurity breach or attack in the past year. With such widespread cybersecurity issues, it\u2019s not surprising that almost three quarters of business leaders and managers recognise cybersecurity as a top concern.<\/p>\n\n\n\n

Myth: small businesses aren\u2019t vulnerable to cybersecurity threats<\/strong><\/h2>\n\n\n\n

As a small business owner, it could be easy to mistakenly think that hackers and cybercriminals aren\u2019t interested in your company\u2019s data. After all, media coverage typically only features the cyber-attacks of larger companies such as TalkTalk, Uber and Yahoo. As such, small businesses often don\u2019t have cybersecurity plans in place.<\/p>\n\n\n\n

The same UK government report previously mentioned also revealed that 64% of micro businesses and 34% of small businesses<\/a><\/u> have no cybersecurity plans. Most small business also don\u2019t invest in cybersecurity and spend a very small amount of their budget on online security.<\/p>\n\n\n\n

As such, small businesses are an easy target for cyber criminals. Stats show 24% of companies that don\u2019t have cybersecurity plans have experienced a cyber-attack and 13% of these attacks had a significant impact, such as complaints from customers, damage to the company\u2019s reputation, or being unable to provide goods or services.<\/p>\n\n\n\n

What are the biggest cybersecurity threats for UK businesses?<\/strong><\/h2>\n\n\n\n

In 2017, UK businesses faced a wide range of cybersecurity threats. The biggest IT security issue faced by UK businesses arose as a result of employees receiving fraudulent emails or phishing scams, which accounted for 72%<\/a><\/u> of the cyber-attacks. However, businesses also encountered cybersecurity issues due to viruses, spyware, malware, and ransomware<\/a>.<\/p>\n\n\n\n

UK businesses should be aware of the following cyber threats:<\/p>\n\n\n\n

Phishing scams<\/strong><\/h3>\n\n\n\n

When cyber criminals attempt to obtain sensitive data such as passwords and usernames, customer details, or credit card information by pretending to be a trustworthy, known source in online communication (email, instant message, etc.).<\/p>\n\n\n\n

Spyware<\/strong><\/h3>\n\n\n\n

An attempt to obtain information about an individual or company without their knowledge. This information might then be sent to another organisation without consent or the cybercriminal may take over the device.<\/p>\n\n\n\n

Malware<\/strong><\/h3>\n\n\n\n

As a malicious software, malware infects the users\u2019 computer with a virus, worms, trojan horse, or spyware. Often this damages the device and renders it, at least temporarily, unusable.<\/p>\n\n\n\n

Ransomware<\/strong><\/h3>\n\n\n\n

A malicious software that holds the company\u2019s computer or data hostage and threatens to release the data or restrict access to the device unless a ransom is paid. The largest ransomware attack<\/a><\/u>, which targeted the NHS, occurred in 2017 and demanded payments from 300,000 computer servers across the world.<\/p>\n\n\n\n

Most of these threats can be prevented with proper security measures, educating staff members and promoting corporate vigilance.<\/p>\n\n\n\n

How does a cyber-attack impact your business?<\/strong><\/h2>\n\n\n\n

Cyber-attacks can greatly impact businesses. In fact, one in five companies<\/a><\/u> report material losses as a result of a cyber-attack. Meanwhile, 23% of companies experience a temporary loss of files or networks, while 20% report damaged or corrupted computer software or systems.<\/p>\n\n\n\n

In addition to material losses, cyber-attacks can impact company\u2019s resources as staff will need to focus on handling the issue and implementing a new security system. Employees may not be able to complete their daily work due to the incident. Cyber-attacks can also damage the brand\u2019s reputation, lead to a loss of clients and customers, and impact the company\u2019s quality of service.<\/p>\n\n\n\n

If the cyber-attack results in a data breach, due to new GDPR regulations<\/a>, companies could face heavy fines. Depending on the circumstances, companies could be penalised between \u20ac10m and \u20ac20m or 2% to 4% of global turnover (whatever\u2019s higher). Therefore, it\u2019s become extremely crucial for companies to comply with GDPR<\/a> regulations and properly ensure the protection of sensitive information.<\/p>\n\n\n\n

\"Make
Training is one way to keep your business safe from cyber-crime<\/figcaption><\/figure>\n\n\n\n

How to protect your business against cyber-attacks<\/strong><\/h2>\n\n\n\n

It\u2019s important to have measures in place to protect against cyber-attacks. Practical steps can go a long way towards ensuring you and your customer\u2019s data is safe for cyber criminals.<\/p>\n\n\n\n

Protect your data from a cyber-attack<\/strong><\/h3>\n\n\n\n

Under the new GDPR regulations, any company that collects or processes data on EU citizens must legally use suitable measures to protect customer\u2019s data. Data protection must be either privacy by design or by default. While these regulations apply explicitly to customer data, these methods can also be used to protect other forms of sensitive information.<\/p>\n\n\n\n

Cybersecurity training<\/strong><\/h3>\n\n\n\n

Most cyber threats can be identified sooner and avoided by training employees on cybersecurity. As phishing scams are one of the biggest threats to companies, it\u2019s important that staff can recognise trustworthy links and emails.<\/p>\n\n\n\n

Staff should also know who to inform if they suspect a data breach or cyber-attack. Providing cybersecurity training to staff is a relatively inexpensive and effective way to protect your company and customer.<\/p>\n\n\n\n

Protect your devices and apps from cyber-attacks<\/strong><\/h3>\n\n\n\n

The default settings for most devices and software don\u2019t provide a high-level of security. It\u2019s recommended<\/a><\/u> that businesses check the settings on new devices and software and change security settings for improved protection.<\/p>\n\n\n\n

Both devices and accounts should also be password protected. Passwords, when implemented correctly, are a savvy and cost-effective way to improve security. In addition to standard passwords, you can also protect devices with PINs or touch-ID.<\/p>\n\n\n\n

More important accounts, such as financial or IT accounts, should be protected by two-factor authentication (also known as 2FA). For more information about passwords check out our article on Cybersecurity Basics<\/a>.<\/p>\n\n\n\n

Cyber essentials scheme<\/strong><\/h2>\n\n\n\n

Cyber Essentials<\/a><\/u> is a government-backed scheme that aims to help business master cybersecurity best practices and prevent against cyber-attacks. Depending on your level of commitment, you can read their digital articles<\/a><\/u> or complete an entry-level or more advanced certifications<\/a><\/u> in cybersecurity. Cyber Essentials is a great resource for companies looking to gain a greater cybersecurity awareness.<\/p>\n\n\n\n

Cybersecurity awareness<\/strong><\/h2>\n\n\n\n

While October may be cybersecurity awareness month<\/a>, it\u2019s important to promote awareness year round. Employees are one of the best defences against cyber criminals and attacks and as such should be properly trained to identify cyber threats and scams. Without their support, even the most advanced IT security software is useless.<\/p>\n\n\n

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t

Subscribe to the Sage Advice newsletter<\/h2>\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t

Join more than 500,000 UK readers and get the best business admin strategies and tactics, as well as actionable advice to help your company thrive, in your inbox every month.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tSubscribe now<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\"\"\t\t\t<\/div>\n<\/div>\n\n

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t

Browse more topics from this article<\/h3>\n\t\t\t<\/div>\n\t\t\t
\n\t\t\t\t