This document discusses the risks and challenges of cyber security for small and medium businesses. It notes that if a business uses email or has a bank account, it is a target for cyber attacks. Some key points made include that every minute a computer accesses a malicious website, every 3 minutes an infected computer communicates with an attacker, and every 10 minutes a malware is downloaded. It provides tips for improving cyber security in 10 minutes a day, such as ensuring systems and backups are updated, using strong unique passwords, and practicing safe web browsing. The document stresses that employee education is key to preventing most breaches.

1. UNDERSTANDING THE
RISKS & CHALLENGES
OF
Cyber Security
DAVID NIMMO InDepth IT Solutions
DAVID HIGGINS WatchGuard
NEIL PARKER BridgePoint Group
A BridgePoint Group Special Business Briefing for SMEs June 2015

2. HOW DO YOU KNOW IF YOU
REALLY ARE A TARGET?
“If you’re on the internet
– if you use email & you have
a bank account…
you’re a target”
DAVID HIGGINS
WatchGuard

3. Every single
minute
A COMPUTER ACCESSES A
MALICIOUS WEBSITE
Source: Protecting Your Business from Cyber Attacks in only 10 minutes a day
Boaz Fischer

4. Every 3
minutes
AN INFECTED COMPUTER IS
COMMUNICATING WITH ITS
ATTACKER
Source: Protecting Your Business from Cyber Attacks in only 10 minutes a day
Boaz Fischer

5. Every 10 minutes
A MALWARE IS BEING
DOWNLOADED
Source: CheckPoint Security Report 2014
Protecting Your Business from Cyber Attacks in only 10 minutes a day
Boaz Fischer

6. DID YOU KNOW
20% of Small Businesses fall
victim to CyberCrime each
year…
60% of those go out of
business within six
months of an attack
Source: National CyberSecurity Alliance
Protecting Your Business from Cyber Attacks in only 10 minutes a day
Boaz Fischer

7. Businesses with less
than 250 employees are
increasingly targeted
2013 – Target US – 80 million customer
email addresses & payment details were
hacked and stolen via a trusted small
business supplier’s IT infrastructure & their
link into Target systems

8. Ransomware:
A software that denies you access into your
files until you pay a ransom
Often targeting small & medium business
Ransomware seeks to get a small amount
of money from a large number of people –
often between $600 - $3000
IDENTIFYING SPECIFIC THREATS

9. Have you ever received an email reminder
about a traffic offence?
No … That’s
CryptoLocker
An email about a late speeding fine
payment?
Clicking on any attachment or link will
install MALWARE on your computer and
data can be ENCRYPTED – until you pay
the RANSOM
one of the most common types of ransomware

10. PROTECT AGAINST RANSOMWARE
Ensure you have a regular
BACK-UP of all data
SME CYBER SECURE TIP
& know how to restore it.
It’s a good idea to test your capability to restore from back-up
before you really need to do it.

11. Ensure you & all staff “patch”
your system regularly
A patch is a piece of software designed to update a
computer program or its supporting data, to fix or improve
it. This includes fixing security vulnerabilities and other
bugs, and improving the usability or performance.
By not applying a patch you might be leaving the door
open for malware to come in.
SME CYBER SECURE TIP

12. CLOUD COMPUTING SECURITY
Do you store business data
on the cloud
Is it ENCRYPTED?
Or can anybody read it if there’s
a breach?
PROTECTING YOUR DATA
SME CYBER SECURE TIP
Encrypt data you store on the cloud

13. CLOUD COMPUTING
Know WHERE
your data is
&HOW it is protected
SME CYBER SECURE TIP

14. REMOTE ACCESS
Protect “data in motion” by using a
Virtual Private Network
to encrypt the traffic between two points.
SME CYBER SECURE TIP
A PC connecting to your company network, to
access applications or data, should be
connected by a Virtual Private Network, or VPN.

15. PRIVACY ACT 2014
The 2014 Privacy Act brings
significant changes to the way
businesses handle personal data.
DO YOU COMPLY?
SME CYBER SECURE TIP
If you have Private Data that you don’t need –
get rid of it!

16. WHAT CAN YOU DO TO IMPROVE CYBER SECURITY &
DECREASE THE RISK IN 10 MINUTES A DAY
Ensure your PC operating system,
applications & anti-virus software
are all regularly updated
Turn your PC firewall on
Back-up your key data today

17. IMPROVE CYBER SECURITY
10 MINUTES A DAY
Use strong & unique passwords
Only download applications from trusted
websites
Lock or shutdown your PC when
not in use

18. IMPROVE CYBER SECURITY
10 MINUTES A DAY
Log onto your PC without admin
privileges
Treat all emails as suspicious
Practice “safe” web browsing

19. IMPROVE CYBER SECURITY
10 MINUTES A DAY
Do NOT respond to requests with
personal information
Never post personal information online
Never leave personal information lying
around – including passwords

20. The biggest threat we face is
ourselves…
TOP SME CYBER SECURE
TIP
MOST breaches can be PREVENTED by
Employee
education &
training

21. WHAT TO DO IF YOU ARE
BREACHED
Unplug computer from the internet
KEY CONTACTS
www.acorn.gov.au
www.acsc.gov.au
www.indepthit.com.au
Determine the extent of breach & isolate
affected computers
Begin repair process
Restore data from most recent back-up

22. Watch video highlights
from our business briefing
DAVID HIGGINS
WATCHGUARD

23. Contact us for the next steps in
managing Cyber Security & Risk
in your business
NEIL PARKER
BRIDGEPOINT GROUP
DAVID NIMMO
INDEPTH IT SOLUTIONS
www.bridgepointgroup.com.au
Ph 1300 656 141