Attackers go after your small business because it's easier than going after a bank. The breaches that make the news hit governments and large companies, which hold lucrative targets and pay for security that's hard to crack. When the big system won't break, hackers move down the line to softer targets.
That's where you come in. A small business still has money and data worth stealing, but usually defends it with a fraction of what a government agency spends. The good news is that ordinary security strategies keep most attackers out. Their methods keep changing, so you have to stay a step ahead. Here are the layers worth putting in place.
Cloud security
Cloud security protects data stored online from theft, leaks and deletion. As businesses move off local hard drives and into remote databases, it matters more. The tools include firewalls, penetration testing and VPNs. Plenty of people assume a hard drive on their own network is safer, but cloud-stored data can actually be more secure, depending on how the provider defends it. Not all of them defend it the same way. Do your research and pick one that will actually protect your data.
Network security
Network security protects the infrastructure underneath everything from unauthorized access, misuse and theft. This is what your network administrator sets up to keep your devices and data safe. Start with a strong WiFi password. Random numbers and letters work best for a small office, since nobody outside the people who need it can guess it. A strong password isn't enough on its own, though. You also have to plan for attacks that come from inside.
VPNs and firewalls
A VPN masks your IP address by routing your connection through a different server, which makes it harder for websites or the government to pinpoint your location. It also encrypts your network traffic inside a secure tunnel. A firewall is a shield between your computer and the Internet, and it can block access to sites that could harm your network. Used properly, both tools work well. Neither one stops every threat.
Keep everything updated
It sounds basic, but staying current on updates does more for your security than most people expect. The companies behind your tools hunt for new threats and ship patches to close the holes they find. Your job is to install those updates promptly and confirm they actually went through.
Keep more than one backup
Keep multiple backups of your business data. A power surge or a natural disaster can wipe your live files with no warning. Backing up regularly is what gets you back on your feet when it happens.
Train your people
Limit who can reach your systems and data. Not everyone needs access, so give it only to people who can't do their jobs without it. Train everyone on security, too. Phishing and weak passwords cause as much damage as outside hackers do. A single breach can badly hurt your business, and your staff need to understand that so they stay alert and catch problems early.
Whichever combination you choose, protecting your network is the most important thing you can do for a small business. Big companies and government agencies absorb a security lapse far better than you can. One bad breach can stop a small business cold.