Small firms not taking cybersecurity seriously could end up out of business if they don’t take steps to protect themselves.
That was the stark warning from experts at a recent free training session provided to small businesses by Denbighshire County Council at its office in Denbigh.
Firms in the county were given a session on Cyber Essentials, a UK Government backed, industry-supported, scheme for basic cybersecurity.
Jason Davies, director of Ruthin-based Safonda, a Cyber Essentials accreditation company which trains businesses to protect themselves from attacks, led the session.
He said: “Cybersecurity is vital for small businesses. Larger businesses can absorb a cyberattack, for small businesses, if you lose access to your data, even for a day, it can have a massive impact on your company or even shut you down.
“If you are in-line with Cyber Essentials, ransomware can’t hit you to start with. As long as you are up-to-date and doing all the things you should be, it shouldn’t get you.
“If you are the victim of a cyberattack, the first thing you should do is speak to your internet provider. Then look at what the impact is and what has been affected.
“We can’t tell people whether to pay for their data or not after they have been hit by a ransomware attack. If you pay a ransom for your data then you are funding those criminals but at the end of the day you are a business and if the data is vital to you, we can’t say don’t pay it.”
In 2016 cybercrime cost UK businesses £29 billion and Mr Davies said the best defence is to back up your data.
He said: “There is very little someone can do to you or your network that can’t be repaired with a good back up system.
“If you want a good all-round solution, the answer is to go and look at the Cyber Essentials scheme. It gives you the guidance on the five most important actions.
“Denbighshire County Council has been vital in raising the awareness of cybersecurity within the North Wales region.
“By putting courses like these on, it is showing they are helping small businesses that wouldn’t otherwise have access to the information they need to help protect themselves and their customers.”
As part of its work on developing the local economy, Denbighshire has been helping local businesses understand what they can do to make themselves resilient to the growing threat from online crime.
Cllr Hugh Evans OBE, leader of Denbighshire, said: “Denbighshire is being pro-active in providing training to businesses and is leading the way among North Wales authorities on cybersecurity.
“Our business survey last year suggested a low level of local awareness of cybersecurity threats and this is one of the steps we are taking to address that.
“In 2015 the UK Government introduced Cyber Essentials certification as mandatory for certain contracts involving personal or sensitive data, not just for the principle contractors but also the wider supply chains.
“The Council therefore wants to help make local businesses aware of this so they can improve their chances of winning tender opportunities.”
Cyber Essentials encourages businesses to set up firewalls and other software to prevent unauthorised access and to make sure malware and anti-virus software is installed and up-to-date.
Maureen Young, co-owner of Ruthin Decor, was a victim of a cyberattack last year and she described it as ‘devastating’.
She said: “Cybersecurity is a big issue for our business. We had a malware attack and whilst it didn’t affect our main accounting systems, it did affect some of the documents I held.
“It is now a real concern for us to make sure we are up-to-date on protecting the business against those risks.
“I would urge other businesses to take this threat very seriously. I thought of myself as someone who was very much aware when an e-mail comes in, to know if I should open it or not, but I still opened something I shouldn’t have.
“The session was very useful. I have a list of things to check on. It is nice to see the Council help small businesses in this way. This is exactly the type of help that we need. It is the sort of thing that if you have to pay for, people put it as a low priority but if you are the victim of a cyberattack it can be absolutely devastating.”
Stuart Baldwin, owner of Rhyl-based Quest Consultancy, which provides training and project management services to businesses, said: “This course makes perfect sense for us. Cybersecurity is something we are very concerned about.
“It is something that could be detrimental to a business. You hear of major attacks happening on multi-national companies and public services. We feel much more informed after this course. It has reduced the fear, they have let us know that there are some simple steps we can take and make sure we are compliant.”
* Denbighshire County Council is looking to host another free course for businesses in October and to register your interest e-mail econ.dev@denbighshire.gov.uk