How to Fix Common Data Security Mistakes

How to Fix Common Data Security Mistakes

Your favorite bagel shop may have an amazing selection of sesame, garlic, parmesan, and blueberry bagels, friendly customer service, and that quirky vibe that you love. But it may not have the much-needed security in place to protect them and you against cybercrime. The damaging effects of cyber threats like malware, phishing, and ransomware on a small business can put sensitive and personal data of employees and customers at risk — not to mention vendors and everyone in the supply chain.

In fact, 60% of small companies go out of business within six months of falling victim to a data breach or cyberattack. Small to medium-sized businesses (SMBs) face the same type of cyberattacks as their larger counterparts but are more vulnerable because they often lack a robust cybersecurity infrastructure, internal security support, and technology know-how. The evolution of the digital landscape and the effects of the pandemic have unfortunately made smaller organizations the perfect target for cyber criminals. And it’s a big problem — according to the Small Business Administration, there are 32.5 million small businesses with less than 500 employees in the U.S.

A hole in a bagel is acceptable, but a security hole could be a recipe for disaster. Considering how much data a small business has that could potentially be compromised — financial information, customers’ credit or debit card numbers, personal identification numbers, passwords, or customers’ personal information (name, address) from loyalty programs — it might be time to shore up security efforts.

Eight Common Data Security Mistakes and How to Fix Them

Fortunately, common data security mistakes are easily remedied without adding headcount or much cost:

1. Treating all data equally. Often, businesses don’t know what to protect. Understanding the value of different types of data will help with a corresponding data security strategy. Once you determine your most sensitive data, encrypt it — this makes it unreadable if compromised. Many small businesses look to full-disk encryption obtained through built-in programs or third parties.

2. Setting up Wi-Fi yourself. Offering secure, reliable Wi-FI for customers can help you with repeat customers and Yelp reviews. But a poorly configured Wi-FI could provide an opening for cyber thieves. Look to experts to help you strategically plan, configure, and install the right equipment.

3. Misconfiguring a Virtual Private Network (VPN). Similarly, consult experts to help with your VPN. Traditional VPNs do not have adequate control over who or what device can connect to the network. It is often exploited because there is no standard way to set it up, operate, or distribute access. Organizations may want to look to an expert to ensure the access channel is secured to protect data and confidentiality.

4. Trying to handle security yourself. With limited people and budget, consider outsourcing security to service providers with the specialized knowledge to properly configure and keep your systems and applications safe. A trusted and experienced third party can manage this for you so that you won’t overlook some of the key security features.

5. Not prioritizing employee security training. Humans are the weakest link in cybersecurity. Most compromises are caused by a simple error such as an employee clicking on a harmful link. Training employees on good security practices, such as two-factor authentication, will go a long way to greatly reduce cyber threat risks.

6. Relying on old technology. Many companies rely on outdated, legacy systems to save costs. Legacy applications rely on older, more limited frameworks, software libraries, and operating systems, presenting more security issues. Modern applications are better integrated with newer frameworks and platforms and have built-in security features to reduce the chance of data compromise.

7. Skipping data backup. Many businesses, large and small, often overlook this critical step. A frequent backup strategy is essential, especially to protect financial data, intellectual property, source code, and email. A good plan is to start backing up your mission critical data first.

8. Forgetting software patches. Don’t leave your organization and employees vulnerable when security updates and patches are readily available for everything from operating systems to applications to devices.

Most companies don’t need a complete security overhaul. A few measured, practical steps can make a big difference in helping small businesses protect their data, systems, reputations, and livelihoods. While your favorite bagel shop may have already perfected the chewy bagel, a few adjustments to security practices may be on the menu.

Featured

  • The Need for a Comprehensive Strategy Addressing Cybersecurity and Quantum Technology

    The Need for a Comprehensive Strategy Addressing Cybersecurity and Quantum Technology

    Over the past two years, the Biden Administration has taken a series of steps centered on quantum and cybersecurity. Read Now

  • IoT Saves the Day

    IoT Saves the Day

    Today, creating a safe environment across schools, hotels, office buildings, housing complexes and other facilities has become a necessity. There are so many dangers lurking in buildings of all sizes and shapes from fire hazards, vaping issues, chemical/air quality issues, intruders and so much more. Read Now

  • One Pane, Less Pain

    One Pane, Less Pain

    Just because a solution is built on an open-standards platform doesn’t ensure that all the vendors’ systems will work together as promised. Some features may not be supported, or not supported to their fullest potential. Read Now

  • Revamping Wrigley Field

    Revamping Wrigley Field

    When talking about baseball in the United States, it’s hard not to think of the Chicago Cubs and Wrigley Field. With a history spanning more than 100 years, the Chicago Cubs are one of the most recognized teams in professional sports. Read Now

Featured Cybersecurity

Webinars

New Products

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance. 3

  • Camden Door Controls ‘SER” Surface Boxes and Extension Rings

    Camden Door Controls ‘SER” Surface Boxes and Extension Rings

    Camden Door Controls has introduced new ‘SER” surface boxes and extension rings that provide a complete solution for new construction. In addition, they provide a simple and robust solution when replacing round wired and manual push plate switches with either Camden’s wired or wireless SureWave™ no-touch switches or Kinetic™ no-battery wireless switches. 3

  • Unique Oversized ID Card Printer

    Unique Oversized ID Card Printer

    Idesco Corp. is announcing its card printer – the XCR100 2.0 printer- that allows customers to personalize oversized ID cards on demand. The printer is ideal for assisting healthcare organizations find the right badging solution. As healthcare facilities continue to combat the spread of COVID-19, issuing oversized ID cards has helped identify staff clearly while adding an extra layer of security. The XCR100 2.0 printer is the only dye-sublimation printer on the market that can personalize CR100 cards (3.88" x 2.63"). The cards that are 42% larger than the standard credit card size. The printer can produce up to 180 full cards per hour in color, and up to 1,400 cards per hour in monochrome. An optional flipper is available to print dual-sided badges in one pass. Contactless encoding comes as an option to help healthcare facilities produce secure access badges on demand and the card printer features a 2-year warranty. 3