8 Steps to More Effective Small Business Security8 Steps to More Effective Small Business Security
Small business face the same security challenges as large enterprises but with much smaller security teams. Here are 8 things to do to get the most from yours.
April 8, 2019
Big cybersecurity challenges aren't limited to large organizations. Small and medium-sized organizations are subject to the same vulnerabilities, exploits, and attacks that plague multi-national enterprises. Unfortunately, these smaller organizations don't have the same resources as the big companies to use to defend themselves. That's why it's critical that small organizations make the most of the cybersecurity resources they do have.
Constraints on small business security resources aren't limited to finances. Small organizations also have smaller security teams or, in most cases, a team of IT generalists who deal with security as part of their responsibilities. And while technology can be part of maximizing that small team's effectiveness, technology alone can't turn a small team of generalists into a large team of specialists.
That doesn't mean that the small business situation is hopeless. When technology is deployed in support of well-considered policies developed through a thoughtful process, then small businesses can achieve a practical level of security that is as effective as that of larger organizations. The question, then, is which processes and policies will have the greatest impact.
[Want to see how other small IT teams have handled their security challenges? Check out sessions like "No CISO, No SOC, No Problem: Blocking Bigger Threats with Smaller Teams" and "When (and When Not) to Use a Managed Security Service Provider" at Interop19 in Las Vegas, May 20-23.]
The eight steps listed here aren't meant to be taken one at a time like steps on a path. The first is a good place to start but after that they represent things that a small team should do — and can do — to get the most out of the security resources they have to work with. And these steps aren't meant to be an exhaustive list of things to be done. We'd be interested to know which things you've found critical aren't on our list — and whether there are any items on this list that you think are over-rated. Let us know in the comment section.
(Image: duncanandison VIA Adobe Stock)
About the Author(s)
Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication MethodsOct 26, 2023
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
Passwords Are Passe: Next Gen Authentication Addresses Today's Threats
How to Deploy Zero Trust for Remote Workforce Security
How to Use Threat Intelligence to Mitigate Third-Party Risk
Everything You Need to Know About DNS Attacks
How Enterprises Are Managing Application Security Risks in a Heightened Threat Environment
9 Traits You Need to Succeed as a Cybersecurity Leader
The Ultimate Guide to the CISSP
Get the Gartner Report: SOC Model Guide
The Evolving Ransomware Threat: What Business Leaders Should Know About Data Leakage
Building Immunity: The 2021 Healthcare and Pharmaceutical Industry Cyber Threat Landscape Report