How to Fix Common Data Security Mistakes

How to Fix Common Data Security Mistakes

  • By Jerry Hsieh
  • Jun 02, 2022

Your favorite bagel shop may have an amazing selection of sesame, garlic, parmesan, and blueberry bagels, friendly customer service, and that quirky vibe that you love. But it may not have the much-needed security in place to protect them and you against cybercrime. The damaging effects of cyber threats like malware, phishing, and ransomware on a small business can put sensitive and personal data of employees and customers at risk — not to mention vendors and everyone in the supply chain.

In fact, 60% of small companies go out of business within six months of falling victim to a data breach or cyberattack. Small to medium-sized businesses (SMBs) face the same type of cyberattacks as their larger counterparts but are more vulnerable because they often lack a robust cybersecurity infrastructure, internal security support, and technology know-how. The evolution of the digital landscape and the effects of the pandemic have unfortunately made smaller organizations the perfect target for cyber criminals. And it’s a big problem — according to the Small Business Administration, there are 32.5 million small businesses with less than 500 employees in the U.S.

A hole in a bagel is acceptable, but a security hole could be a recipe for disaster. Considering how much data a small business has that could potentially be compromised — financial information, customers’ credit or debit card numbers, personal identification numbers, passwords, or customers’ personal information (name, address) from loyalty programs — it might be time to shore up security efforts.

Eight Common Data Security Mistakes and How to Fix Them

Fortunately, common data security mistakes are easily remedied without adding headcount or much cost:

1. Treating all data equally. Often, businesses don’t know what to protect. Understanding the value of different types of data will help with a corresponding data security strategy. Once you determine your most sensitive data, encrypt it — this makes it unreadable if compromised. Many small businesses look to full-disk encryption obtained through built-in programs or third parties.

2. Setting up Wi-Fi yourself. Offering secure, reliable Wi-FI for customers can help you with repeat customers and Yelp reviews. But a poorly configured Wi-FI could provide an opening for cyber thieves. Look to experts to help you strategically plan, configure, and install the right equipment.

3. Misconfiguring a Virtual Private Network (VPN). Similarly, consult experts to help with your VPN. Traditional VPNs do not have adequate control over who or what device can connect to the network. It is often exploited because there is no standard way to set it up, operate, or distribute access. Organizations may want to look to an expert to ensure the access channel is secured to protect data and confidentiality.

4. Trying to handle security yourself. With limited people and budget, consider outsourcing security to service providers with the specialized knowledge to properly configure and keep your systems and applications safe. A trusted and experienced third party can manage this for you so that you won’t overlook some of the key security features.

5. Not prioritizing employee security training. Humans are the weakest link in cybersecurity. Most compromises are caused by a simple error such as an employee clicking on a harmful link. Training employees on good security practices, such as two-factor authentication, will go a long way to greatly reduce cyber threat risks.

6. Relying on old technology. Many companies rely on outdated, legacy systems to save costs. Legacy applications rely on older, more limited frameworks, software libraries, and operating systems, presenting more security issues. Modern applications are better integrated with newer frameworks and platforms and have built-in security features to reduce the chance of data compromise.

7. Skipping data backup. Many businesses, large and small, often overlook this critical step. A frequent backup strategy is essential, especially to protect financial data, intellectual property, source code, and email. A good plan is to start backing up your mission critical data first.

8. Forgetting software patches. Don’t leave your organization and employees vulnerable when security updates and patches are readily available for everything from operating systems to applications to devices.

Most companies don’t need a complete security overhaul. A few measured, practical steps can make a big difference in helping small businesses protect their data, systems, reputations, and livelihoods. While your favorite bagel shop may have already perfected the chewy bagel, a few adjustments to security practices may be on the menu.

Featured

  • AI Is Now the Leading Cybersecurity Concern for Security, IT Leaders

    Arctic Wolf recently published findings from its State of Cybersecurity: 2025 Trends Report, offering insights from a global survey of more than 1,200 senior IT and cybersecurity decision-makers across 15 countries. Conducted by Sapio Research, the report captures the realities, risks, and readiness strategies shaping the modern security landscape. Read Now

  • Analysis of AI Tools Shows 85 Percent Have Been Breached

    AI tools are becoming essential to modern work, but their fast, unmonitored adoption is creating a new kind of security risk. Recent surveys reveal a clear trend – employees are rapidly adopting consumer-facing AI tools without employer approval, IT oversight, or any clear security policies. According to Cybernews Business Digital Index, nearly 90% of analyzed AI tools have been exposed to data breaches, putting businesses at severe risk. Read Now

  • Software Vulnerabilities Surged 61 Percent in 2024, According to New Report

    Action1, a provider of autonomous endpoint management (AEM) solutions, today released its 2025 Software Vulnerability Ratings Report, revealing a 61% year-over-year surge in discovered software vulnerabilities and a 96% spike in exploited vulnerabilities throughout 2024, amid an increasingly aggressive threat landscape. Read Now

  • Motorola Solutions Named Official Safety Technology Supplier of the Ryder Cup through 2027

    Motorola Solutions has today been named the Official Safety Technology Supplier of the 2025 and 2027 Ryder Cup, professional golf’s renowned biennial team competition between the United States and Europe. Read Now

  • Evolving Cybersecurity Strategies

    Organizations are increasingly turning their attention to human-focused security approaches, as two out of three (68%) cybersecurity incidents involve people. Threat actors are shifting from targeting networks and systems to hacking humans via social engineering methods, living off human errors as their most prevalent attack vector. Whether manipulated or not, human cyber behavior is leveraged to gain backdoor access into systems. This mainly results from a lack of employee training and awareness about evolving attack techniques employed by malign actors. Read Now

Most   Popular

New Products

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.”

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.