833-847-3280
Schedule a Call

Protect your Business from Cybercrime this Holiday Season

You are a small business owner and the holidays are usually your “make it or break it” time of year. Everything rides on your ability to get as much revenue as you can over the season to float through the cashless fog of January and February. You know cybersecurity is important and can wreck your company, but you are not an IT expert, and Christmas is 35 days away, what can you do?

Fortunately, there are several inexpensive steps you can take that to secure your business this holiday season. So let’s take a look at…

9 Steps to Better Sleep this Holiday Season for Business Owners.

#1 No New Technology: the holiday season is no time for you to try out new technology in your company. Yep, your IT shop says it will make you millions, save you money and do everything but cook dinner. Still, wait till next year to try it out. The reason? New technology may impact your IT architecture in ways you cannot know, and the holiday season is no time to be learning that lesson.

#2 Be PCI Compliant: the new requirement behind PCI DSS 3.1 require you to scan quarterly and pentest annually. These simple actions and compliance with PCI requirements such as firewall management, Anti-Virus and Anti-Spam solutions and end point management will greatly reduce your vulnerability to hackers during the busy season.

#3 Protect your mobile data platforms: A lot of retailers are using IPads and tablets to conduct store transactions, order food and to get customer feedback. Ensure that these devices are encrypted both internally and on the network being used (cellular, wireless, Bluetooth) to communicate.

#4 Encryption of Data. This is one of the best security measures a retailer can take to protect data that is on site or that could be stolen. It’s easy to sleep at night knowing that if someone makes off with your data, it is unreadable. Another cool point, depending on the data stolen, is that if it was encrypted, you may not have to report it.

#5 Ensure you can recover your data (back up). Once data is hacked, encrypted through ransomware or stolen on devices it is gone, but it’s not gone forever. Ensure that your or your data hosting facility provides regular backup of your data. Occasionally, test the system, but not by losing your data.

#6 Lock down your hardware. Most companies are challenged to identify all the hardware that they have. Ensure that you enumerate all the hardware you have, identify whom it is assigned to and where it is and be able to track it. A lot of data that is lost is obtained through stolen hardware from a company.

#7 Secure your Network. Yep, having Wi-Fi is cool and offering it to your customers is even cooler, but not if the network is unsecure and is attached directly to your IT infrastructure. Ensure your networks is secured using WPA2 encryption and have a hard to find password. Better yet, ensure you have a “guest” network that operates in parallel to your retailer network but is not connected to it at all.

#8 Have good customer service: Consumers that buy retailer goods and then call the credit card companies to challenge the purchase or quality force the retailer to incur steep charges. Called “chargebacks” or “friendly fraud,” retailers are forced to refund the cost of the purchase through credit card companies, and then do not recover the goods due to the cost of investigating the complaint. Ensure you have good customer service to ensure that consumers have a friendly voice to voice dissatisfaction.

#9 Hire security. Even the smallest company can defer fraud by bringing on affordable expertise to assist them with security. Hiring a third party managed service provider, or cloud based security alerting service can provide businesses with another level of security making them harder to hack and forcing criminals to turn to other companies.

It is critical that retailers focus on their business and accruing critical revenue during this holiday season. By following at least a few of these steps, business owners can harden their companies against hackers, drive revenue into their companies and maybe, just maybe, be able to enjoy the most wonderful time of the year.

 

Latest Posts

A transparent image used for creating empty spaces in columns
 You can’t “fix” web application security and call it done. Security isn’t a project with a start and end date. It’s not something you achieve once and move on from, or a checkbox you mark complete. Web application vulnerabilities aren’t a problem you solve…
A transparent image used for creating empty spaces in columns
Your firewall is important, but it’s just not enough. For years, the security model was simple: build a strong perimeter around your network. Put up a firewall, lock down the border, and keep the bad guys outside. Everything inside the perimeter was trusted, and everything…
A transparent image used for creating empty spaces in columns
Sarah walked into the conference room already skeptical. As CFO of a mid-sized manufacturing company, she’d approved the $6,000 penetration test because the CISO insisted it was necessary for their cyber insurance renewal. Fine. But now she was being pulled into a “findings debrief” that…
A transparent image used for creating empty spaces in columns
Small business cybersecurity advice usually sounds like this: “Implement a comprehensive security program with layered defenses, regular risk assessments, security awareness training, incident response planning, and continuous monitoring.” Great. That’ll take six months, cost $50,000, and require expertise you don’t have. Meanwhile, attackers are targeting…
A transparent image used for creating empty spaces in columns
Most small and medium-sized businesses don’t have a Chief Information Security Officer. They can’t justify the $150K-$250K salary for a full-time security executive when they’re a 10 or 50-person company still figuring out basic growth. But cybersecurity risk doesn’t care about your company’s size. Ransomware…
A transparent image used for creating empty spaces in columns
A competitor recently claimed on a webinar that any penetration test under $5,000 is “half-assed.” Let’s unpack why that statement is completely wrong and reveal a fundamental misunderstanding of the small and medium business market.   The Enterprise Mindset Problem Here’s what’s actually happening: many…
contact

Our Team

This field is for validation purposes and should be left unchanged.
Name(Required)
On Load
Where? .serviceMM
What? Mega Menu: Services