In this article, I ask "Is your small business ready for a cyber-attack?" I explain what cyber incident response is, what role it plays in the cyber risk management framework, and why your small business needs an incident response plan.

Today's article discusses 5 Common Cyber Threats to Small Businesses, the Consequences of Cyberattacks and the Surviving Cyber courses for small business owners.

 In this article, I list 10 tips that will help small businesses improve their cyber resilience, ensure their data is safe and retain the trust of their stakeholders.

This article gives a comprehensive look at what small businesses really think about cybersecurity and cyber risk. It is based on a Survey Pre COVID-19,

A key step in the efforts of small companies to become cyber resilient is to ensure that they have considered all areas of cyber risk in the business. A straightforward checklist will help identify the major risks that exist in your small business.

Surviving Cyber offers a free cyber resilience workshop, "How small business owners can create their First Cyber Resilience Plan in less than 30 Days". In this quick article, I explain a little about the workshop.

There are three big mistakes that most small businesses make with cyber risk. Avoiding these mistakes is not difficult, and doing so will materially improve the risk level in your small business. I explain how you can avoid these mistakes. 

Myth number 13 says that cyber insurance is the ‘silver bullet’ for cyber risk. It is dangerous because it fails to recognize how insurance policies work and the current cyber insurance market conditions, which are a lot more demanding than before.

Myth number twelve says that improving cybersecurity offers no opportunity to small businesses. In this article, I explain that the potential upside for your small business is significant.  

Myth number 11 says that the Cloud provides 100% Cybersecurity. The truth is that cloud platforms operate under a shared responsibility model whereby you share cybersecurity responsibility with the cloud provider.  

Myth number 7 says that cybersecurity is too expensive for small businesses. The truth is that putting in place basic technology controls, people training, and governance structures is not an expensive exercise.

Myth number four says: Cybersecurity is just a technology issue. This is a deeply rooted myth in the thinking of a lot of small business owners. I explain why it is a dangerous myth.

"We're not responsible for cybersecurity". Small business owners cite a lack of familiarity and concerns that they are not well equipped to deal with cyber risk management, as reasons to avoid responsibility.

The Myth says: "No cybersecurity incidents means we've no problems". This is a commonly held understandable view among small business owners that leads to a belief that they really don't have a problem.

Cybersecurity is not important for small businesses". This myth is based on a misunderstanding of the risk. The truth is that cybersecurity is important for all businesses, regardless of their size, and regardless of their sector.