Skip to main content

Your Board and risk management

Your Board and risk management

For small business owners, it may seem your daily energy is caught up with just keeping the doors open and revenuescoming in. However, unless you were very fortunate when you started up, you have a board of directors; most likelyinitial investors whose focus is on the long term success of the company and on strategies for future growth. Part oftheir concern will be threats and risks to the present business. A particular concern may be the risks to the businessin the case of a cyber attack. Small businesses are just as vulnerable to cyber attacks as large companies. However,they are far less likely to have the resources to recover.

In our next few blogs, we are going to look at what ways a small firm may be vulnerable to a cyber attack. Inparticular, we discuss the major areas of vulnerability your business faces.Specific topics include customer and companydata loss, legal implications, fines and regulatory penalties, brand damage, downtime and revenue loss, and supply chainvulnerabilities.

Obviously, your shareholders want to understand how you plan to defend against and respond to cyberthreats, but that's atopic for another e-guide. Today, we will talk about educating your board about one area that you are at risk for when acyber attack occurs.

Downtime

This is the most obvious and immediate consequence of a cyber attack. Your business becomes partially or fully shutdown.Given our reliance on technology, almost every aspect of a business, even a small service business is, in some way,reliant on technology. For example, a medical office can’t function if its reservation system is attacked. Staff maylose the basic ability to know which patients are scheduled for the day. A smaller retailer can’t ring sales if the POSgoes down. If your website is attacked and compromised, that’s akin to shutting down the doors of a brick and mortaroperation.

Why is this a shareholder topic? Downtime places the entire organization at risk of failure. Small businesses are muchless likely to recover than are large businesses. Your Board will want to be informed about how you propose to keep theorganization safe.

Comments

Post a Comment

Popular posts from this blog

Access matters when things go to **and?)!

Access matters when things go to **&?)! The COVID-19 pandemic brought a multitude of lessons along with it, on both the personal and professional fronts. From the business perspective, the pandemic turned things upside down across almost every industry. One of the biggest trends that the pandemic brought was remote work. While working from home (WFH), or telecommuting as it was called earlier, existed in some industries, the pandemic made WFH mainstream for everyone. From doctor’s offices, to SMBs to IT companies, almost every industry had to resort to remote operations to stay in business. This shift from on-site, brick-and-mortar offices to WFH brought along with it some serious challenges. This blog discusses 2 ways businesses leveraged technology to overcome the various challenges businesses faced with the sudden shift to the remote work environment. Data access This was one of the first and foremost challenges. When shelter-in-place orders and lockdown restrictions were im...
Post a Comment
Read more

Passwords They seem to have been with us forever

Passwords: They seem to have been with us forever. As we continue to suggest things you can do to protect the integrity of your company and customer data, here is a blog that covers an old level of security that we still rely on everyday. That protection is the password, so let's talk about bedding up your employee’s handling of passwords. Password hygiene - Passwords remain the most common everyday tool to ensure only authorized personnel have access to secure material. The issue is that passwords need maintenance and attention to be effective. Here are some common problems to avoid. And again, this requires a routine employee training program. Passwords that are too simple Simple passwords are easy to remember but easy to crack. Words, in any language, are not ideal either. That is why many sites require a mix of letters, characters, and numbers. And yes, some people are still using Myname123 . One universal password Sometimes people find it difficult to remember mul...
Post a Comment
Read more

Thing to do this week to start protecting your customer data

Thing to do this week to start protecting your customer data You have client or customer data in your possession. It is part of running your business in a digital marketplace. If that data is breached, it could permanently damage your reputation. We talked in an earlier blog about types of malware. There are many steps that you can take to protect your systems and data. Here are a few suggestions to protect your business from malware. Consider a Managed Service Provider - Cybercriminals are very sophisticated and every day are releasing new, cutting-edge tools to attack businesses and individuals. Small- and medium-sized businesses do not have the resources to staff an IT department sufficiently to be aware of all the newest tools and technologies needed to protect a business. For example, a business owner cannot possibly keep up with the changes and details of tax laws. Doing it themselves, they would likely overlook important tax advantages or inadvertently break some IRS rule. A...
Post a Comment
Read more