No business is safe from an array of business scams including phishing, email compromises, vendor or customer impersonations, and misdirection of payments. Email is the most frequent method used and employees are often the weak link in your protection. Knowledge, training, policies, procedures, and preparation may be your best protection.
Some of the easiest protections to implement include:
- Maintain good records of orders and purchases to detect bogus accounts, invoices and payment directives.
- Double check your vendor and customer identities and their cyber security policies.
- Don’t email payment or account information and double check before you send money.
- Protect your devices with proper computer protections and firewalls, install all security updates, limit employee personal usage, and identify a contract person when a problem arises.
- Establish and update usage policies and procedures, and train and educate employees emphasizing the importance of protection for your business.
- Don’t open or download attachments from unknown parties.
- Create an environment with employees, vendors, customers, and consultants to protect your business and its assets, and to question unusual circumstances.
- Ensure passwords, restricted access, double verification, and other protections are current and updated for various levels of information protection needed.
- Engage appropriate consultants and others that can assist in your protection efforts and be available in an emergency.
- Obtain cyber-security insurance protection.
- Have a plan in place for immediate implementation in the event of a breach.
Just because your business is small is no reason to believe that it may not be a target of scammers. Small businesses are often targeted as they spend less on cyber-security and are more lax. We can assist you in implementing policies and addressing problems.