What Your Company Needs to Know About Cyberattacks

Last month we addressed cybersmearing — defamation of a business via social media and the internet. The broader issue of cybercrime involves targeted attacks on the network and connected devices that results in a range of security breaches, from bringing down a company’s information technology to obtaining confidential data. As a result, a business can experience catastrophic loss of time, money, privacy, and reputation.

Cyberattack categories common to businesses

The types of cybercrime that attack company security are too numerous to list in this space. Cyber law consultants Cyber Crime Chambers has a helpful guide to the terminology and specifics of various kinds of cyberattacks on its website.

A recent article in Forbes highlights the common categories of threats to cybersecurity and how cybercriminals gain access to information concerning your business, employees, and customers.

• Malicious software (malware), viruses, and ransomware.

  These threats spread via visiting unsecured websites, downloading infected files, or installing suspicious applications. Often, clicking email and spam links spawn such security breaches.

• “Phishing” for confidential information

  Hackers pose as trusted contacts, presenting appealing offers, fake notifications regarding accounts, fraudulent confirmation of purchases, and other seemingly routine email. Remember, confidential information travels as far as your network does — including via public and home Wi-Fi.

• Identity and password theft

  Using employees’ personal information, hackers can access their work accounts. Common or repeat passwords can expose both personal and business data. And anyone who uses your networks and technology, including employees and customers, can leave your company open to attack.

• Invasion of third-party systems

  If your company uses online software and networks, your security depends on the vendor’s. You are vulnerable unless the provider blocks cyberattacks.

The first line of defense

To quote Pango CEO Hamed Saeed, “Your employees are your first line of defense. If they don’t know how to respond in a cybersecurity-conscious manner, your company is at risk."

Employee response starts with adherence to a strict email policy that protects your company from cyberattack. Develop a policy that includes:

• Clarification of guidelines for using business email. Personal use of a business email address reveals account information to hackers.

• Identification of phishing tactics and a policy to address them. Educate employees on how to verify the legitimacy of emails and attachments before replying and opening attachments or links. Provide steps for analyzing a sender’s email address and common red flags such as misspellings, awkward language, unusual URLs, and other suspicious content.

• Requirements for encryption and regular password updates for email and other applications, as well as any device used for business. Encryption takes time, but the protection is worth the effort. Provide password management software to make the process more efficient.

Keep in mind that unless you educate your employees, even the best tools to secure your network may fail to protect your business. Not knowing why and how to follow cybersecurity protocol makes your employees and company vulnerable to attacks. Regularly review requirements for safe use of email, the internet, and social media to protect sensitive information.

Consult your employment attorney to assist with forming solid cybersecurity policies that are compliant with labor and employment law. As always, we are happy to help.