Due to the Russian invasion of Ukraine, there is a greater risk of cyber attacks against businesses. The West has placed many sanctions on Russia and is continuing to do so. Although there is no current risk, there could be retaliation and Russia has used cyber-attacks in the past.
So what does this mean for your business?
The Cybersecurity and Infrastructure Security Agency has advised US businesses that they must be prepared to defend against cyber-attacks originating from Russia and has issued a 'shields up' warning. (Note, Canada will not be exempt from the potential uptick)
Many businesses, of all sizes, will be at risk of attack as the aim will be to cause as much damage and disruption as possible.
Business owners need to be especially vigilant with their cyber security measures right now, as any lapses may be more costly than usual. There are a few things you can do to tighten up ahead of time.
Backups. The first thing you need to do is make sure you have a working backup. If you are hit by a cyber-attack – such as ransomware for example – this will ensure you still have access to all of your data and documents, even if the attack is successful.
Make sure that all your applications, systems, and devices are up-to-date, and that any relevant patches are in place.
Use password managers to make sure your team uses unique passwords that are less likely to be hacked. You should also strongly consider using multi-factor authentication (where you get a login code on an authenticator app) across your applications for a higher level of security.
Make sure your incident response and recovery plan is up-to-date and everyone is aware of the steps they should take if they suspect a security breach. Your co-workers need to know who to report a possible breach to, and what their role in the response process is.
You may want to consider company-wide cyber security training that includes everyone from the most senior employee to the most junior. This will help to make everyone aware of the most common threats, and teach them how to protect themselves from scams and phishing emails.
If you're not sure if you have the right protections in place, consult an expert to help you put your mind at ease and make sure your business is as protected as possible.
