Revamped cyber guide will help small businesses work securely online

The five recommended areas of focus are:

Backing up your data: Top tips include keeping a back-up of data separate, reading our Cloud Security guidance, and backing up regularly.

Protecting from malware: Top tips include switching on firewalls, preventing staff downloading dodgy apps, and controlling how USBs can be used.

Keeping your smartphones (and tablets) safe: Top tips include making sure devices can be wiped remotely, not connecting to unknown Wi-Fi networks and keeping device software up-to-date.

Using passwords to protect your data: Top tips include avoiding predictable passwords, using two-factor authentication, and changing default passwords.

Avoid phishing attacks: Top tips include checking for obvious signs of phishing, reporting all attacks, and testing resilience using our Exercise in a Box tool

Earlier this year, a survey by the Department for Digital, Culture, Media and Sport (DCMS) found around half of micro and small businesses (52%) reported falling victim to a cyber security breach or cyber attack in the past year. The average cost to these businesses was nearly £1,000 – rising to more than £3,000 for some.

The Small Business Guide is part of a collection of NCSC guidance which has been reviewed and refreshed to offer up-to-date tips on implementing key security controls.

This includes the Small Business Guide: ‘Actions’ resource, which breaks down the recommendations into individual steps, and our Response and Recovery guidance which outlines how to prepare, manage, resolve and report an incident if one does occur.

The NCSC has published tailored advice and guidance to support all organisations, including how they can securely move their physical operations online and safely scale-up home working.