Story image

FY18 is here: ESET's guide to top cybersecurity investments for SMBs

03 Jul 2017

As Australian businesses and SMBs start to formulate their budgets for FY18, ESET is underlining the importance of security irrespective of their business size.

However, SMBs are more likely to underplay security's importance, particularly around reaction and response.

The company says that SMBs need to understand threats and draw on expertise from IT departments, ensuring the FY18 protects all aspects of the business.

ESET senior research fellow Nick FitzGerald says, "“Irrespective of business size, it’s critical to have a broad reach across the whole organisation with a cohesive cybersecurity solution, and more importantly, a response and reaction plan".

The company says that even cyber insurance firms are starting to get tougher on security requirements. Recent cases have not looked favourably on 'we had firewall and antivirus but still got hacked' cases, suggesting that businesses now need much more.

Cyber insurance policies tend to cover requirements that can, at a minimum, ask for competency across process, logging and monitoring so that businesses are covered when breaches occur.

ESET says that for some businesses who have those kinds of protections, cyber insurance is a good option. If not, businesses should consider upping their security so they're actively preventing threats and covered if breaches occur.

The company also says that there are three areas SMBs and businesses should focus on: Security, reliable backup and talent.

Security: Comprehensive endpoint security software that offer extra, interoperating levels of security. Anti-malware is also recommended.

Reliable backup: Backing up systems at regular intervals is crucial. Keep one backup on offline storage at all times. Also ensure backup systems are working properly.

In addition, it can take a long time to deploy patches and system software updates, but it will save businesses in the long run. Turning on automatic updates can help this process.

Managed service providers should also check what system update policies apply to their systems and consider their applicability.

Talent: Training employees to identify threats and investing in talent is the best way to maximise current assets, ESET says.

Move beyond compliance to training systems and encourage them to become the change to better defend themselves and their company. using real-world examples of threats and threat protection can help them in the workplace - and at home.

ESET says a team doesn't need to be a collective cybersecurity expert, however a good understanding of the warning signs to look out for and having procedures in place that emphasise the importance of reporting will go a long way.

Slack doubles down on enterprise key management
EKM adds an extra layer of protection so customers can share conversations, files, and data while still meeting their own risk mitigation requirements.
NVIDIA introduces a new breed of high-performance workstations
“Data science is one of the fastest growing fields of computer science and impacts every industry."
Apple says its new iMacs are "pretty freaking powerful"
The company has chosen the tagline “Pretty. Freaking powerful” as the tagline – and it’s not too hard to see why.
NZ ISPs issue open letter to social media giants to discuss censorship
Content sharing platforms have a duty of care to proactively monitor for harmful content, act expeditiously to remove content which is flagged to them as illegal.
Partnership brings AI maths tutor to NZ schools
“AMY can understand why students make a mistake, and then teach them what they need straight away so they don't get stuck."
Polycom & Plantronics rebrand to Poly, a new UC powerhouse
The name change comes after last year’s Plantronics acquisition of Polycom, a deal that was worth US $2 billion.
Unencrypted Gearbest database leaves over 1.5mil shoppers’ records exposed
Depending on the countries and information requirements, the data could give hackers access to online government portals, banking apps, and health insurance records.
Mozilla launches Firefox Send, an encrypted file transfer service
Mozille Firefox has launched a free encrypted file transfer service that allows people to securely share files from any web browser – not just Firefox.