Web Design Company, Lounge Lizard, shares a Cyber Attack Preparedness Checklist
NEW YORK, Sept. 21, 2017 /PRNewswire-iReach/ -- Lounge Lizard is globally recognized as a top web design company within the web design and development industry. Lounge Lizard's brandtenders are creative, tech-savvy, and passionate in developing innovative strategies that drive conversion for both startup and established clients of all industries, making them the "best of breed since 1998."
Cyber attacks can affect any type of business. While many small and medium businesses might try and console themselves with the idea that they are too small to bother with, statistics prove that idea incorrect. In fact, data from Symantec's 2016 Internet Security Threat Report showed that 43% of cyber attacks targeted small businesses. With that in mind, NY based web design company, Lounge Lizard, shares a Cyber Attack Preparedness Checklist.
Create a Password Policy. Over 50% of all data breaches are caused by password issues. Typically many passwords are weak which means the obvious solution is to create a policy that requires not only stronger passwords but also includes password storage and random generation options. Passwords should then be required to be changed every 30 to 60 days. Also upon termination or resignation usernames/passwords/accounts should be immediately frozen/updated as needed.
Enforce the Password Policy. Over 50% of businesses in a recent cyber security survey reported that they have a password policy but do not actively enforce it. That is like paying for a security system but forgetting to turn it on.
Use Anti-Virus and Malware Software. Every business related asset from desktops to laptops to servers to tablets and even smart phones need both anti-virus and malware protection. If you as a business are going to allow business actions to take place on a device and connect to the network then that device must be adequately protected. Even simple things like flash drives should be scanned prior to use.
Limit use of Employee Devices. Ideally employee devices such as laptops, smart phones or tablets should not be allowed for business purposes due to items 1/2/3 that we have already covered. They represent one of the easiest security breaches because as a personal device the business loses control over the ability to dictate password and security requirements. If devices are to be used then an adequate security policy needs to be in place to ensure the device is secure.
Limit Admin Access. Admin access should be given out very carefully. Anyone who is provided admin access should clearly understand the policies and procedures the business has in place for cyber security and be trained as needed on various tactics used to gain access to a system. Admin-level accounts should also include a secondary authentication method such as SMS authentication as these accounts can cause the most harm with a breach.
Regularly Back Up Files. Important data should be backed up regularly and to multiple locations. Ransomware has been successful because of inadequate backups when direct access is prevented. An offsite server can be a lifesaver in the event of an attack or even a natural disaster.
Encrypt all Sensitive Databases. Only about one-third of all small and medium businesses encrypt sensitive databases which leaves them much more open to attack. Any personal customer information should always be encrypted and there are many options to do so.
Test your Website. Your website should be routinely tested for vulnerabilities such as exploitable WordPress plugins, outdated operating systems, or even coding errors that can be exploited. Taking the time to shut and lock the back door only matters if you lock the front door as well.
Train your Employees. This goes for every employee from your IT manager down to your front desk admin. Everyone needs to be aware of not only the general and specific security policies and procedures related to their jobs but general aspects of password security, device security, phishing emails, spear attacks and more. An ounce of prevention is worth a pound of cure.
Lounge Lizard is an award-winning, high-end design boutique specializing in website and mobile app development, UX/UI, branding, and marketing. Lounge Lizard excels in creating the ultimate brand strategy, fully loaded with expertly crafted visuals that work together to increase sales and effectively communicate a client's unique personality.
Media Contact: Ken Braun, Lounge Lizard, 631-581-1000, ken.braun@loungelizard.com
News distributed by PR Newswire iReach: https://ireach.prnewswire.com
SOURCE Lounge Lizard
