In today’s connected world, everyone benefits from advanced cyberdefense programs. But how do you check your business’s cyber security health?

Australian Cyber Week aims to raise awareness about the importance of cyber security, and the simple steps that you can take to protect your business.

Small Business Cyber Security Guides

For an overview of cyber security basics, the Australian Cyber Security Centre’s (ACSC) Small Business Cyber Security Guide is an excellent place to start.

Designed specifically to help small businesses understand, take action, and increase their cyber security resilience, the guide highlights six simple measures that businesses can introduce to help prevent common cyber threats. These include:

• Automatically updating your operating systems, software, and apps
• Regularly backing up your important data
• Enabling multi-factor authentication (MFA) on important accounts wherever possible
• Managing who can access what within your business
• Where MFA is not possible, using passphrases to protect accounts and devices
• Training staff in cyber security basics

Step-by-Step Guides

Step-by-step guides are also available which detail cyber security instructions for specific software, applications, and devices. These include:

Updating your Operating System

• Update Android – how to keep the software on your Android phone or tablet up-to-date.
• Update Microsoft Windows – how to turn on automatic updates on a desktop computer for the Microsoft Windows 10 operating system.
• Back Up and Restore (Microsoft Windows) – how to back up and restore files on your Microsoft Windows device using OneDrive.
• Update Apple iOS and Apple macOS – how to turn on automatic updates on an iMac, Macbook, iPhone and iPad.
• Back Up and Restore Apple iOS and Apple macOS -how to back up and restore files on your Apple iOS device using iCloud or a computer.

Password Security 

• How to change your passphrase for Microsoft Windows 10, macOS and Apple ID.
• How to check your desktop email account security for Outlook and Gmail.

Protecting your device from malware

• Turn on real-time protection in Windows 10 to stop malware from being installed on your device
• Turn on Ransomware Protection for Microsoft Windows 10 to protect your business from an attack on your files
• Perform a malware scan for malicious software such as viruses, spyware, trojans, and worms.

Visit www.cyber.gov.au to learn more and view the full list of guides.

Cyber Security Assessment Tool

The Department of Industry, Science, Energy, and Resources has developed a Cyber Security Assessment Tool to help identify a business’s cyber security strengths and weaknesses.

This tool will ask a series of questions about how you manage your cyber security risks and based on your answers will provide a downloadable PDF list with recommendations to action.

Testing your Password Strength

Passwords and PINS are used to identify who you are. Sometimes they are the only defense to protect your information against unauthorised access.

Some of the best practices for creating secure passwords are:

• The longer, the better; use 16 or more characters.
• Use a combination of letters, numbers, and special characters.
• Avoid using consecutive letters or numbers.
• Avoid using personal information such as an address, phone number, or pets’ names.
•  Avoid using the same password across multiple accounts.

Put your password security to the test with Security.org’s Password Strength Tool.

Helpful webinars

The Queensland Government, in partnership with Qudos Management, has developed a series of free webinars on how businesses can protect themselves against cyberattacks. These webinars are

To view a recording of the first two webinars, check out:

1. Introduction to Information Security Management 
2. Information Security Management and the new edition of ISO 27001

The final webinar, Information Security Management: Developing your System, will be held on 29 November 2022.

Think you’ve been involved in a cyber incident?

Data Breach

have i been pwned is a free online resource for anyone wanting to quickly assess whether their phone or email has been at risk due to an online account of theirs being compromised, or ‘pwned’ in a data breach.

Hacking

The Australian Cyber Centre’s Have you been backed? webpage to find out if you’ve been hacked, or call the Cyber Security Hotline on 1300 292 371.

Scams

Scamwatch is an initiative run by the Australian Competition and Consumer Commission (ACCC) that provides information to consumers and small businesses about how to recognise, avoid, and report scams. Stay up to date with the latest advice and subscribe to Scamwatch for email alerts on the latest scams. If you think you’ve been scammed, report it now.

Reporting a cybercrime

Report a cybercrime online via the ACSC’s online form. If there is an immediate threat to life or risk of harm, please call 000.

Sources: Australian Cyber Security Centre | Australian Competition and Consumer Commission | Department of Employment, Small Business, and Training | Scamwatch

18 November 2022