In the last two years, we've seen a stark shift in the way businesses and business owners talk about cybersecurity. In 2019/2020, managed service providers like Pearson-Kelly were educating small and medium sized businesses on the terminology and attack methods. Now, we're arguably in a worse off spot with business owners understanding what cybersecurity is, but not caring or not taking the time to do anything about it.

If you're business gets hit with a cyberattack, it's not just your bottom line in jeopardy. If you have to lay off staff, or close down completely, your employees go without paychecks and some families could go without food for the week.

This is a very real scenario. A business gets hit with a ransomware attack every 11 seconds. 

If you don't have preventative tools in place to defend your business, you're putting your employees' families at risk. If you don't have an attack strategy in place for WHEN a hacker gets into your business, you're risking the livelihoods of everyone you employ, at the very least.

Don't know where to start? Talk to Pearson-Kelly Technology about prevention options and download our IR Program Toolkit for all the resources you need to get started on your attack strategy today.

WHY IS AN INCIDENT RESPONSE PLAN IMPORTANT?
An Incident Response Program reduces the time and expense associated with a security incident. It requires an organization understand the threats to their environment and prevent common vulnerabilities. Some tips:

• Utilize open community repositories like the National Vulnerability Database to address known vulnerabilities
• Determine the cyber events you currently monitor for
• Complete or evaluate your Business Impact Analysis (BIA)
• Use current resources in your organization to identify, mitigate and monitor threats

WHO SHOULD BE ON YOUR TEAM?
Like business culture overall, the security culture in your organization is defined and driven by the attitudes, examples and tone demonstrated by your top executives and leaders. When you have buy in, its easier to get everyone in the organization on board with your security initiatives. Without it, you’re fighting and uphill battle every day.

An Incident Response Program defines the key stakeholders and key roles within your organization to be involved in a security incident to alleviate those three obstacles during an incident. These should include department managers, senior management, partners, customers and legal counsel. A fully functioning Incident Response Program may include the following roles:

• Legal counsel
• Business Operations
• Executive Management
• Human Resources
• Program/Project Management
• Public Relations
• Outside Consultants
• IT & Security Teams
• Vendors
• Compliance
• Business Partners & Stakeholders

Learn more about building an incident response program on our blog!

TOP TAKEAWAYS
There are 10 actions IT leaders can take this week to drastically improve their cybersecurity practices and defenses against cyber threats:

1. Verify software patches and updates are installed on all devices
2. Enable Multi-Factor Authentication (2FA)
3. Change passwords for network devices and require 2FA
4. Remove internet facing management consoles
5. Upgrade end-of-service software and hardware
6. Document and train on the processes for reporting suspicious activity
7. Implement SIEM
8. Test backups and take at least one version offline every month
9. Review policies and procedures, especially incident response plans
10. Perform a cybersecurity assessment

CONTENT GIVEAWAYS
Check out the free templates Jay referenced during the podcast, as well as the presentation slides and video recording.

10 Actions to Improve Cybersecurity Practices [CHECKLIST]
Presentation Slide Deck
Video Recording
How to Achieve Successful Technology Outcomes [INFOGRAPHIC]