Cybercrime’s Deadly Impact On Business

Cybercrime is constantly on the rise, with virtually all UK businesses exposed to cyber security risks according to a 2017 Government Data Breach survey.
 
It is important to protect your business against cyber security threats and make the most of the opportunities online. A single successful attack could seriously damage your business and cause financial burden for you and your customers, as well as affect your business's reputation.
 
For instance: last year, 46% of UK businesses have suffered a cyber-attack either through decreased customer trust or the actual theft of money and personal information. A successful cyber-attack can cause major damage to your business. It can affect your bottom line, as well as your business' standing and consumer trust. 
 
Some of the threats to your business IT systems are:
 
  • Adware - Adware is a form of computer virus which fills your computer with advertisements and is a fairly common form of cyber-attack. Adware can often allow other viruses to enter your computer once you’ve accidentally clicked on them.
  • Ransomware - Ransomware is a type of malicious software that designed to withhold access to an individual’s or business’ computer system until a sum of money is paid.
  • Spyware - Spyware is a form of cyber infection which is designed to spy on your computer actions, and relay that information back to the cyber-criminal.
The impact of a security breach can be broadly divided into three categories: financial, reputational and legal.
 
Economic cost of a Cyber Attack - Cyber-attacks often result in substantial financial loss arising from:
 
  • theft of corporate information
  • theft of financial information (e.g. bank details or payment card details)
  • theft of money
  • disruption to trading (e.g. inability to carry out transactions online)
  • loss of business or contract
Businesses that suffered a cyber breach will also generally incur costs associated with repairing affected systems, networks and devices.
 
Reputational Damage - Trust is an essential element of customer relationship. Cyber-attacks can damage your business' reputation and erode the trust your customers have for you. This, in turn, could potentially lead to:
  • loss of customers
  • loss of sales
  • reduction in profits
The effect of reputational damage can even impact on your suppliers, or affect relationships you may have with partners, investors and other third parties vested in your business.
 
Legal consequences of Cyber Breach
Data protection and privacy laws require you manage the security of all personal data you hold, whether on your staff or your customers. If this data is accidentally or deliberately compromised, and you have failed to deploy appropriate security measures, you may face fines and regulatory sanctions.
 
How to minimise the impact of Cyberattacks on Businesses
Security breaches can devastate even the most resilient of businesses. It is extremely important to manage the risks accordingly. 
 
After an attack happens, an effective cyber security response plan can help you to:
  • reduce the impact of the attack
  • report the incident to the relevant authority 
  • clean up the affected systems
  • get your business up and running in the shortest time possible
It is vital invest in user training, education and awareness in your organisation on an ongoing basis. 
 
The statistics often do not match the rhetoric when it comes to cybersecurity and too many organisations are still talking a good game instead of actually implementing robust processes and procedures. The British government is keen to protect the economy and minimise the disruption that cyber criminals wreck on UK business. But research from the Department for Digital, Culture, Media & Sport shows there is still a lot of work to do. Its Cyber Security Breaches Survey 2018 found that while 74pc of businesses say cybersecurity is a high priority, only 27pc have formal cybersecurity policies in place. 
 
Only 30pc of businesses have a board member with responsibility for cybersecurity and just 20pc have put staff through cybersecurity training in the last 12 months.
 
In the last year, 43pc of companies experienced a cybersecurity breach or attack. Where these incidents resulted in a loss of assets or data, the mean cost for small and micro businesses was £2,310, rising to £22,300 for large businesses. When examining the most common cybersecurity threats, virtually all of them fall under one of the following three categories: human behaviour/error; IT or third-party relationship.
 
Human behaviour is the most frequent enabler of cybersecurity breaches, creating a weak spot for criminals to exploit. Whether clicking on an unsolicited link or failing to safeguard passwords, people are the root cause of many successful attacks. 
 
Companies could repel the vast majority of cyber scams by creating a robust digital safety culture within their organisation.
Similarly, technology-based solutions can lock out criminals. Immediately rescinding access to employees leaving the organisation stops them causing problems once they have gone. 
 
Immediately installing software patches and upgrades will ensure the latest security is in place. All too often, it is out-of-date software that gives criminals the access they need.
 
The final category is third parties. If they have access to your systems, but you do not have a robust cybersecurity culture in place, then your own efforts are undermined. 
 
Phishing
The most common individual cyber threats facing businesses are malicious links distributed via Email, known as phishing. Regular and robust training will improve employee behaviours and prevent them from opening unsolicited emails and clicking on links they are not expecting.
 
Poorly Guarded Usernames and Passwords
Offering guidance on username and password generation will prevent employees using the same login details on multiple devices and make them more aware of how to protect these details effectively.
 
Inconsistent Adherence to IT and Data Policies
Ongoing and consistent training will make sure employees know what is expected of them. This learning should be tested regularly.
 
Malware Gaining Access via Personal Devices
The lines between our personal and professional lives have become increasingly blurred. Training should reflect this, seeking to improve behaviours in every aspect of employees’ digital lives and not just focusing on the IT used at work.
 
Social Media Malware
Companies may prohibit access to personal social media accounts, but an increasing number of companies now have corporate accounts and developing this online presence is becoming more important for a wider spectrum of businesses. Companies must develop/recruit the requisite skills to manage, maintain and operate these accounts.
 
Data on Stolen Devices
Is the data encrypted? Is the device password protected? Phones get lost and laptops get left on trains, but reminding employees of their responsibilities when using company equipment and ensuring the appropriate IT security is in place will go a long way to preventing problems.
 
Hackers
Installing patches and software upgrades as soon as they are available must be a priority for every employee. Cybersecurity should also be a primary concern in any dealings with third-party software and IT service providers.   
 
Former Employees Retaining Access to Systems
Standard procedure must ensure permissions are rescinded as soon as an employee stops working with the company.
 
Cyber risks are growing in number and sophistication, but so too are the tools available to mitigate and manage these threats.
 
Insurers can provide a wealth of risk management information to help companies create the right cybersecurity culture and implement robust safeguards. A tailored insurance policy will then provide the financial protection required for the specific exposures that remain. 
 
For more Information and advice on IT Security: Please contact Cyber Security Intelligence 
 
NI Business Info:          Nouveau:       Government of Australia:     Image: AlphaStock Images  / Nick Youngson
 
You Might Also Read:
 
Can Small Business Beat Cyber Attacks?:
 
 
 
« Malware Is Stealing Hotel Guest Data
What Girls Bring To Cyber Security »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Reed Smith LLP

Reed Smith LLP

Reed Smith LLP is an international law firm with offices in the USA, Europe, Middle East and Asia. Practice areas include Information Technology, Privacy & Data Security.

Athena Forensics

Athena Forensics

Athena Forensics is one of the UK's leading providers of Computer Forensics, Mobile Phone Forensics, Cell Site Analysis and Expert Witness Services.

SAI360

SAI360

SAI360 (formerly SAI Global) provide products and services for enterprise risk management including Governance, Risk & Compliance and Digital Risk solutions.

SecuGen

SecuGen

SecuGen is a leading provider of advanced, optical fingerprint recognition technology, products, tools and platforms for physical and information security.

GuardSquare

GuardSquare

GuardSquare is the global reference in mobile application protection. We develop premium software for the protection of mobile applications against reverse engineering and hacking.

ATIS Systems

ATIS Systems

ATIS Systems offers first-class complete solutions for legal interception, mediation, data retention, and IT forensics.

Templar Executives

Templar Executives

Templar Executives is a leading, expert and dynamic Cyber Security company trusted by Governments and multi-national organisations to deliver business transformation.

Verafin

Verafin

Verafin is one of the North American leaders in fraud detection and AML software.

Nucleus Security

Nucleus Security

Nucleus is a leading Vulnerability Management platform for Large Enterprises, MSPs/MSSPs, and Application Security Teams that want more from their vulnerability management tools.

Falcongaze

Falcongaze

Falcongaze SecureTower is a comprehensive DLP solution for the protection of business against internal threats.

ISTC Foundation

ISTC Foundation

ISTC Foundation is one of the leading innovation centers in Armenia, founded by joint initiative of IBM, USAID, Armenian Government and Enterprise Incubator Foundation.

UST

UST

UST is a global provider of digital technology and transformation, IT services and solutions including managed security services.

Acrisure

Acrisure

Acrisure is powered by the best of human and high-tech and offers insurance, reinsurance, real estate, cyber and more solutions to millions of clients around the world.

NorthStar

NorthStar

NorthStar provide the visibility needed to track and reduce risk through risk-based vulnerability management and vulnerability exploit prediction.

Concorde Technology Group

Concorde Technology Group

Concorde Technology Group is one of the UK’s leading IT support and services providers, delivering cost-effective and innovative IT solutions to businesses across the country.

CyberAntix

CyberAntix

CyberAntix offers Premium CyberSecurity for your business using an advanced Security Operations Centre technology and process platform reinforced by a steadfast and expert SOC team.