3 areas to stay on top of cyber security
Written by Adrian Law on
With the recent cyber attack on the Australian government sending shockwaves through the IT industry, it’s more important than ever to make sure your practice is secure. Resources for reducing vulnerability to cyber attacks, such as the “Essential Eight“, a list of strategies published by the Australian Cyber Security Centre (ACSC), are widely available, but here’s an overview of the main areas you should be looking out for. Even if you’ve seen some of these tips before, what better time to do a check-up on your business?
1. Keep up to date
Our first point can feel a bit like a no-brainer, but keeping operating systems and applications updated is an important step in combating vulnerabilities. Manufacturers and developers update, or patch, their programs regularly in response to newly-discovered vulnerabilities, so prompt updating can prevent attacks that exploit these flaws.
Keeping your practice updated doesn’t have to be a chore, either. With remote management, your operating system and essential programs can be kept up-to-date centrally by your IT team, if not automatically, and update outside of work hours – taking away the dreaded wait for Windows to update when starting up.
2. Ensure systems are configured securely
“Correct configuration of computer systems” can encompass a wide range of concerns, but whether your systems are managed by yourself or by a team, ensure that the available security measures are in place. The ACSC’s recommendations are a good benchmark and with good reason. For example, administrative privileges should only be granted to users where necessary, and not to all applications or the entire operating system, as unwanted admin access can allow intruders access to sensitive information, or control over the computer and/or network.
Effective backup solutions also warrant a mention, especially in light of recent ransomware attacks. Daily backups allow for important recent data to be restored on short notice, neutralising the threat of ransomware locking access to the computer. Ensure backups are retained for some time, and periodically check that these backups can be restored in an efficient way.
Antivirus is another consideration for business computers. While the operating system’s built-in antivirus may be enough for a home user, businesses should strongly consider having all systems protected with an enterprise-grade antivirus solution.
3. Have staff on board with cyber security
Cyber security isn’t just about your IT staff, even if it starts there. Making sure all staff understand the importance of cyber security is important to maintaining a secure environment. This can include having everyone on board with everyday tasks such as using strong, unique passwords and two-factor authentication.
Furthermore, a broader understanding of the need for security goes hand in hand with the security measures already in place. For example, computer systems would be set up to automatically block unapproved or unwanted applications, and staff would similarly recognise and delete such programs, such as downloaded unintentionally from the internet or email. Having staff aware and on board with cyber security strengthens your business.
For more details about any of the strategies mentioned, or more news and resources regarding cyber security, the ACSC’s website contains more valuable resources.
Lotus Network Solutions offers managed IT services covering your practice’s security and more. To find out more, head over to our Services page.