Keeping information safe and secure is challenging developments for businesses of all sizes over the last few years. Expeditious shifts from in-person to online to hybrid workplaces forced companies to change, or at least reexamine, their cybersecurity practices and protocols, and far too often they weren’t prepared. In fact, according to CyberEdge’s Cyberthreat Defense Report, 85% of organizations suffered from a successful cyberattack in 2021.   

Now, businesses who have suffered cyberattacks along with companies who’ve been fortunate enough to avoid being a victim of breaches and hack are looking at ways they can bolster their defenses and safeguard their data. But which plans, practices, and services should these organizations invest in? 

Below are 4 steps businesses of all shapes and sizes can take to better protect themselves against cyber-attacks:  

1. Identify “Crown Jewels” of Your Business  - Creating an inventory list of the valuable data and assets within your organization, including manufacturer, model, hardware, and software information. Note who has access to data and information, including storage locations, in case of a vulnerability breach.

2. Protect Assets by Updating and Authenticating - Make sure your security software is current by maintaining up-to-date software, web browsers, and operating systems.  Do the following:

• Activate auto-update on all devices:
•  Auto-backup of all data, whether internally on a separate in-house server or in the cloud
•  Ensure staff are using strong authentication to protect data access
•  Allow select employees access permissions to sensitive data
•  The use of using multi-factor authentication (MFA) for all employees is recommended

3. Monitor and Detect Suspicious Activity - Companies must always be on the lookout for possible breaches, vulnerabilities, and attacks:

• Invest in antivirus and antimalware software to monitor your networks
•  Employees and personnel must adhere to all established cybersecurity protocols

4. Have a Response Plan Ready  - Businesses should have a cyber incident response plan “ready to go” prior to a breach by embracing savvy practices:

• Disconnect any affected computers from the network
• Notify your IT staff and the proper third-party vendors
• Utilization of any spares and backup devices while continuing to capture operational data