Featuring fresh takes and real-time analysis from HuffPost's signature lineup of contributors
GET UPDATES FROM Julius Genachowski
 

Small Business Cybersecurity: A New Way To Customize Your Online Defense System

Posted: 11/18/11 03:06 PM ET

To get our economy moving again and get unemployed Americans back to work, we need our small businesses creating jobs at massive scale. In an increasingly digital economy, broadband Internet offers big opportunities for small businesses to gain new customers and revenue through online marketing, and reduce costs through cloud- based services. To maximize the benefits of being online, small businesses need to avoid the pitfalls - most notably, the threat of online attacks. The good news: there are straightforward steps small businesses can take to protect themselves.

By almost any measure small businesses have an outsized impact on our economy. Small businesses employ more than half of all private sector workers and they have generated about two-thirds of net new jobs over the past fifteen years. Small businesses drive innovation, are responsible for many breakthroughs, and small businesses produce thirteen times more patents per employee than large ones.

According to a new survey released in October, 2011 by Symantec and the National Cybersecurity Alliance, two-thirds of U.S. small businesses rely on broadband Internet for their day-to-day operations. Broadband connectivity and online business tools enable small businesses to reach millions of customers though the online marketplace, driving new sales. And broadband-enabled cloud-based services allow small businesses to manage their operations more efficiently, lowering costs. Higher sales and lower costs equal more small business profit, which they can and will reinvest in their businesses, resulting in job creation.

We know that the benefits of information technology and high-speed Internet are real, but so are the security challenges. The Symantec survey also found that 85 percent of small businesses think their companies are cyber-secure, but barely half of these businesses actually have a cybersecurity strategy or plan in place and nearly 80 percent say they lack a written Internet security policy.

A recent study found that American small businesses lose billions annually to threats like intellectual property theft, hacking, viruses, or spyware. The cost of each individual cyber attack to small- and medium-sized businesses averages about $200,000. What's more, statistics show that roughly 60% of small businesses will close within six months of a cyber attack. According to the Norton Cybercrime Report, the total cost of cyber crime to consumers and small business owners alike is greater than $114 billion annually.

With larger companies increasing their online defenses, small businesses are now the low hanging fruit for cyber criminals. And too many businesses are unknowingly leaving the virtual doors unlocked and the keys in the car.

It's vital that small businesses take the necessary steps - generally simple steps - to increase their protection against cyber threats.

What should small business owners do? For starters, they should:

  • Make sure that Wi-Fi routers are secure and password protected;
  • Regularly change passwords;
  • Install anti-virus and provide firewall security for your Internet connection;
  • Download and install software updates for your operating systems and applications as they become available;
  • Train employees on security principles, such as protecting sensitive information and not clicking on email attachments or links from untrustworthy sources; and
  • Do not plug an unknowns USB thumb drive into your computer
Earlier this year, the FCC and a coalition of public and private-sector partners developed a cybersecurity tip sheet, which includes these and other tips to educate business owners about basic steps they can take immediately to protect their companies.

Today, as part of an unprecedented collaboration with government experts and private IT and security companies, the FCC is releasing the Small Biz Cyber Planner, a new easy-to-use online tool to help small businesses customize their own cybersecurity defenses. The online tool is available at www.fcc.gov/cyberplanner.

This tool will be of particular value for businesses that lack the resources to hire a dedicated staff member to protect themselves from cyber-threats. Even a business with one computer or one credit card swiper can benefit from this important guidance.

Also starting this month, Hewlett Packard is distributing the FCC's cybersecurity tip sheet through its HP.com Security Center, its small business newsletter, and via the HP Support Assistant, an application pre-installed on most HP PC's. This distribution by Hewlett Packard will reach millions of small business owners.

The stakes are high, so we all must heed the "Stop. Think. Connect." message of the national cybersecurity awareness campaign. But with government and the private sector working together, we can overcome our cybersecurity challenges and help ensure that U.S. small businesses become and even more powerful engine of economic growth and job creation.

 
To get our economy moving again and get unemployed Americans back to work, we need our small businesses creating jobs at massive scale. In an increasingly digital economy, broadband Internet offers bi...
To get our economy moving again and get unemployed Americans back to work, we need our small businesses creating jobs at massive scale. In an increasingly digital economy, broadband Internet offers bi...
 
 
  • Comments
  • 9
  • Pending Comments
  • 0
  • View FAQ
Comments are closed for this entry
View All
Favorites
Recency  | 
Popularity
09:41 AM on 11/21/2011
If you really want to help small business to compete with big corporations they must teach small business, how to build up their business credit profiles. This is the KEY to helping any business getting funded. Here.
10:48 AM on 11/20/2011
spend all you like, can`t keep it safe from gov man.....business hit you may not recover from
photo
MSROADKILL612
am not convinced geothermal energy is above ground
08:01 PM on 11/19/2011
Organisea buy on the net but pay over the phone - pots - not voip

my bank sends me a code via sms when i do anything radical with my accounts

a friend just buys a debit card from a gas station to make net payments
photo
HUFFPOST SUPER USER
firewired
Compared to what?
04:14 PM on 11/19/2011
A simple "keylogger" on a USB stick will do WONDERS for infiltrating a system! When you're not looking, someone else plops on in to your hidden USB port, and your world is theirs! And an AV program will not likely find it there.
10:30 AM on 11/19/2011
And yet Huffponians only last week asserted there was no such thing as cybercrime except of course whatever the US and Israel commits in order to conquer the known world.
11:56 PM on 11/18/2011
Although the article is light on content, the thought is good. For our small business, the main use of the internet is information access, but we also use it to buy stuff. I really don't know much about net security: if we log on to secure websites to make these transactions, would a spybot be able to read our password?
This user has chosen to opt out of the Badges program
08:56 PM on 11/18/2011
Good article, Julius, but I'm quite surprised that you omitted this one thing: "Be Clark Kent at all times, not Superman."

A computer is: a piece of office equipment. It is a machine that knows about exactly two things: "1," "0," and there is nothing in-between. Its purpose is to execute whatever instructions are given to it, very fast. Those might be instructions that you wanted it to execute and that you were aware that it was executing; or, they might not.

So ... you practice "the principle of least privilege." You use the security features of your system to set up rules that have "yes or no" answers. "Are you the accountant? Yes, or no?" "Are you the shipping clerk?" "Are you Superman?" "Or are you just Clark?"

When you define the roles of each system user (even if they're all just different manifestations of you, and you wear many hats...), and if you then afford to each one the =least= level of permissions that are required to perform that role, then the computer can enforce that "bright-line rule." It doesn't know whether you "know" or "intend" for the software that it's executing to be running, but it knows what "you" can and cannot do.
06:55 PM on 11/18/2011
Here's a few more tips..

1. All user login accounts should be at the "User" permission level (Yes, even the Network administrator's) He Should use a separate Admin-level account for maintaining the network.
2. Executive/management staff should NOT have Admin-level permissions EVER!
3. Login passwords should be at least 12 characters long, should not be a word that can be found in a dictionary and contain the following:
- alphabet characters
- numbers
- characters such as $, %, &, !, @, etc.
(example: StarlightExpress can be changed to $t@rl1ght3xpres$)
4. Download and install patches for the Operating system and applications no later than two weeks after they have been put out by their respective vendors.
5. Make sure your employees understand and sign off on acceptable use policies and make quaterly security training MANDATORY! (from the Executives down to the temps!)
6. If you can't hire a full-time Network Admin, get someone part-time but get someone who knows their way around an office network configuration! (someone who knows how to tinker with a computer is worlds apart from someone who knows how to manage an office/company network).

That's all for now.
06:10 PM on 11/18/2011
Good info, thank you.