SMBs’ guide to staying cyber safe during COVID-19

SMBs’ guide to staying cyber safe during COVID-19

During the COVID-19 pandemic, it hasn’t been business-as-usual for many businesses. This disruption makes it more important than ever to make sure yours is staying cyber safe.
COVID-19 has showed us how quickly the world can change, but the need to stay cyber safe hasn’t. Educating employees on cyber safe business practices is key to protecting your company from cyber attacks.

Keep your workplace safe with these simple steps

Adopt a cyber security policy

It’s impossible for any employee to know every cyber threat out there, but clear cyber security rules can help everyone make better decisions when faced with one.

An effective cyber security policy should cover:

Internet usage guidelines

Rules for email safety

Social media guidelines

Practice safe passwords

All employees should use passphrases, a series of at least four words and is 15 characters in length.

Or use complex passwords with:

• At least 12 characters
• Upper and lower case letters, numbers and symbols
• No personal information

Use a different password for every account

Never share your passwords with anyone

Change your passwords if an account has been compromised

Enable multi-factor authentication

Multi-factor authentication (MFA) uses two or more different ways of verifying that you are who you say you are to add an extra layer of protection to your accounts and devices. We call these authentication factors.  

Some different types of authentication factors include:

• Proof of who you are, like fingerprint scanners or facial recognition
• Proof of what you know, like a security question or password
• Proof of what you own, like a USB key

If many people in your business need to access business accounts or devices, make sure they all have their own ways to verify who they say they are.  You can control which employees or visitors have access to your accounts.

Don’t take the bait

Businesses are key targets of phishing and spear-phishing scams, where cyber criminals, often masquerading as employees, will ask for sensitive company information, like passwords or financial info.

If you receive an unexpected email, even if it looks like it’s being sent from a colleague, here’s what to do:

Breathe. Phishing messages often pressure or threaten you to respond quickly. If an email needs you to “act now”, it could be a scam.

Don’t open any links or attachments you’re unsure of. Reach out to the sender through a different channel, like by phone, to confirm.

Talk to tech support. Unsolicited messages asking you to reset a password or update account info are likely fake.

Delete any messages that seem too good to be true, like winning a contest you didn’t enter.

Get more tips to protect yourself, your business and your devices at

GETCYBERSAFE.CA

 
Follow us on social media
@GetCyberSafe