Small businesses lose $2 million per week to cybercrime according to FBI estimates, while cybercrime profits totaled $1 trillion in 2009 according to MacAfee. Common misconceptions are that antivirus software and only visiting trusted sites ensure safety, but antivirus only catches 25-40% of malware and trusted sites like Anthem and Facebook have been compromised. Having "nothing worth stealing" is also a misconception, as criminals hack to demand sexually explicit videos or send child pornography and threats. Self-auditing security is not advisable, as IT providers prioritize uptime over safety and lack specialized security skills. Businesses should keep systems patched, limit network content, teach skepticism, and disconnect suspicious devices to call

1. Because IT support does not equal Data Security

2. Small businesses in the US are losing $2 Million per WEEK to cyber crime – FBI Estimate Cyber crime take in 2009 a TRILLION dollars. Bigger than combined sales of Walmart, Exxon and GE. – MacAfee Estimate

3. Common Misconceptions

4. I’m safe, I have Antivirus software. AV software only catches between 25% and 40% of Malware. Most of the products take an average of nearly two days to detect the latest threats. - NSS Labs

5. I only go to trusted web sites. Like these? All of which have been compromised at one time or another. Anthem Blue Cross Facebook BusinessWeek Wal-Mart US Army US Postal Service Bank of India Fox Sports NASA Bill O’Reilly PBS Daily Telegraph Twitter Microsoft Hotmail Sarah Palin US Treasury Aetna World of Warcraft Apple iTunes Durham Police City of Denver Kaspersky Security Monster Godaddy Dolphin Stadium

6. I don’t have anything worth stealing. I only open email from people I know. Man suspected of hacking computers arrested on Federal charges related to demands for sexually explicit videos from women and teenage girls while posing as their boyfriend on-line. Man indicted for hacking into neighbor’s wireless internet system and posing as the neighbor to email child pornography and threats to the Vice President.

7. Fake AV Warning that looks VERY real.

8. U.S. indicts Ohio man and two foreign residents in alleged Ukraine-Based "Scareware" fraud scheme that caused $100 million in losses to internet victims worldwide

9. Houston computer administrator sentenced to 12 Months in prison for hacking former employer’s computer network Guess they should have changed the password. What’s your terminated employee policy? Woman pleads guilty to hacking email accounts and deleting documents in domestic relations dispute. Another password problem. Man arrested and charged with operating international online "Phishing" scheme to steal Income Tax Refunds. What’s your phishing protection strategy? Mid-Sized bank compromised through job interview process. How much information do you divulge in a supposed job interview?

10. I already have an IT provider They are typically NOT security specialists. Keeping your network running is their priority, not keeping you safe. Self audit is usually NOT a good idea.

11. Things you can do: Keep your Operating System Patched. Auto-Update isn’t enough. Keep your applications up-to-date. Especially those used to deal with electronic content such as Adobe Reader, Java, your browser and any streaming media players. Limit the content you allow on your network. Teach your employees to be a little skeptical. Don’t browse the Internet with Administrative Rights.

12. What to do if you suspect trouble…. Pull the plug and call for help!