Debunking cyber security myths

We are often bombarded with scaremongering facts telling us how “every 39 seconds a computer gets hacked” or how a “breach of data costs millions of pounds to rectify”. Whilst these may be true, the reality is that being cyber secure is only effective when the approach doesn't focus heavily on the fear factor, but rather on practical goals and skills to enable employees to protect themselves and their businesses.

‘Human beings remain the biggest cybersecurity threat because more than 99% of cyberattacks require humans to take some action' like running a program or entering a password. (Top 6 Reasons Cybersecurity Is Important (utulsa.edu)

Cyber security is a broad term and finding the appropriate measures to protect your networks, devices and data from unauthorized access or criminal use can seem daunting. Whilst it's true that cybersecurity can be complicated, it doesn't have to be.

The first step to finding the appropriate measures and practices to protect your business is dispelling some of the misconceptions and myths about cyber security.

Myth 1: Cybersecurity is not my responsibility

Cyber criminals may target employees in your business that are less knowledgeable about the IT landscape. Therefore, security awareness training is essential for every employee and the only way an organisation will be able to protect itself against cyberthreats at all levels.

Myth 2: A good password is enough to keep your data safe

Although a strong password can help to protect your organisation, it is important to employ other security measures such as enabling multi-factor authentication and data monitoring.

Myth 3: Small businesses are not targets for hacking

Small businesses are prone to cyberattacks as they are likely to have fewer defences against cyberthreats than larger organisations and may not have a dedicated team ready to mitigate a threat.

Myth 4: One solution can address all your needs

Cybersecurity encompasses different processes, systems, and devices and a one size fits all solution will not keep all the facets of your business protected. Different approaches to cyber protection may include physical security measures, defences for your network and employee security awareness training.