In this article, I explain what cyber insurance is, how the insurance works, its features and benefits, what's normally covered and excluded, and how insurers can provide an instant response service.

In this article, I'll explain why managing the online risks to your key information assets is vital for your small business. I'll give you the hard facts, explain the options and give you a simple risk framework to apply to your business.

In this article, I ask "Is your small business ready for a cyber-attack?" I explain what cyber incident response is, what role it plays in the cyber risk management framework, and why your small business needs an incident response plan.

I explain the online risks that every small business must understand, the types of cyber-attacks that we're seeing right now, the business sectors that are most exposed, and how GDPR, the EU's data protection law has increased the obligations of all.

In this article, I explain why your small business should be worried by cyber risk, what cyber risk is, the sources of cyber risk, and the findings of a 2022 Hiscox Report on Cyber Readiness.

Small Business Owners can discover a simple 5-Step Strategy to manage cyber risk, learn the technology controls essential for internet risk and create their First Cyber Survival Plan, in the next 30 days without cybersecurity expertise.

Today's article discusses 5 Common Cyber Threats to Small Businesses, the Consequences of Cyberattacks and the Surviving Cyber courses for small business owners.

 In this article, I list 10 tips that will help small businesses improve their cyber resilience, ensure their data is safe and retain the trust of their stakeholders.

This article gives a comprehensive look at what small businesses really think about cybersecurity and cyber risk. It is based on a Survey Pre COVID-19,

A key step in the efforts of small companies to become cyber resilient is to ensure that they have considered all areas of cyber risk in the business. A straightforward checklist will help identify the major risks that exist in your small business.

Cybersecurity is a complex business-critical risk, not just an IT problem. It involves the entire company. To properly assess the risk, a business should consider its technology risk, human risk and governance risk.

As the owner of a small business, I understand the small company perspective. This article explains a few frequently asked questions about cyber risk that I often get from the small businesses that engage with me.

Surviving Cyber offers a free cyber resilience workshop, "How small business owners can create their First Cyber Resilience Plan in less than 30 Days". In this quick article, I explain a little about the workshop.

I will soon release free cyber risk management video training for small businesses. In this article, I set out what the training will cover, why I am doing it, why it could be important for you and how you can get free access. 

There are three big mistakes that most small businesses make with cyber risk. Avoiding these mistakes is not difficult, and doing so will materially improve the risk level in your small business. I explain how you can avoid these mistakes. 

The final myth in the series says "We won’t need to provide evidence of our cybersecurity.” In this article, I reveal the truth which is that small businesses will increasingly need to provide evidence of their cybersecurity in the future.

Myth number 14 says that insiders do not present a cyber threat. However, the truth is that the insider cyber threat from people who have intimate knowledge of the business cannot be ignored. This threat often appears in industry and government reports.

Myth number 13 says that cyber insurance is the ‘silver bullet’ for cyber risk. It is dangerous because it fails to recognize how insurance policies work and the current cyber insurance market conditions, which are a lot more demanding than before.

Myth number twelve says that improving cybersecurity offers no opportunity to small businesses. In this article, I explain that the potential upside for your small business is significant.  

Myth number 11 says that the Cloud provides 100% Cybersecurity. The truth is that cloud platforms operate under a shared responsibility model whereby you share cybersecurity responsibility with the cloud provider.  

Myth number 10 says that the COVID-19 cyber risk increase is temporary but the truth is that it is here to stay and provides an opportunity for small companies to re-evaluate their cybersecurity needs.

Truth Number 9 says that the cybersecurity of others is not our concern but the truth is that our business is connected to other businesses and poor cybersecurity presents a risk to the business and all its trading partners.

Myth number eight says: "Small businesses don’t need to plan for a cyber incident”. In this article, I explore the truth that every small business needs to plan for a cyber incident and explain why this is such a vital issue.

Myth number 7 says that cybersecurity is too expensive for small businesses. The truth is that putting in place basic technology controls, people training, and governance structures is not an expensive exercise.

This myth says that small businesses don't have time to manage cybersecurity. The truth is that implementing basic cybersecurity measures doesn't need to be time-consuming, even for the smallest company.