Employees are weak link in business cybersecurity

Daniel Markuson, the digital privacy expert at NordVPN Teams, has agreed that employee negligence is a great threat to business security. However, he points out that this particular risk is easy to control.

There are many digital tools that can help protect organizations from data breaches. These tools and security systems don’t require big investments as cybersecurity starts with the right mindset of employees. That can be achieved through mandatory training.

According to Daniel Markuson, both small businesses and large organizations must focus on cybersecurity. All companies dealing with customer data or confidential information are vulnerable to cyber-attacks. The difference is that big names usually have more data that hackers may want to steal. Meanwhile, small ones tend to lack security resources, thus making easier targets.

To protect your business from hacker attacks, you need to consider these common mistakes your employees might be making every day:

Passwords play the most important role in protecting your business accounts and customers’ data. But people struggle to create unique passwords and keep forgetting them. That's why they often use the same ones for different accounts, and your employees might be no exception. “Weak and reused passwords are easy to hack. The best solution is to help your staff build a habit of using password managers,” says Daniel Markuson. Passwords must be changed from time to time and shouldn’t be shared among coworkers.

Companies are at serious risk of data loss when their employees handle important documents without security in mind. The safest way to store and share files is encrypting them. For example, NordLocker, is easy-to-use encryption software that adds an extra layer of security to data on a computer or in the cloud. In case of a breach, hackers will not be able to access your company’s information — they will only see undecipherable code.

A vast majority of organizations use Wi-Fi networks. Although Wi-Fi gives staff greater mobility within the office, it also makes your business data more vulnerable to hacks. The best way to keep online traffic private is by using a virtual private network (VPN). A VPN creates a secure encrypted tunnel that protects your connection from anyone trying to breach the system. It is also a must for secure remote connections. It allows employees to safely access their work accounts while traveling, working from home, or using public Wi-Fi.

Phishing is one of the main reasons why your members of staff need cybersecurity training. Hackers may try to get sensitive information by faking emails from someone like your company’s CEO or Microsoft representatives. And they use very sophisticated methods for that. “Just one reckless click on a phishing link or one download of an infected attachment can compromise your entire system,” explains Daniel Markuson, the digital privacy expert at NordVPN Teams. Make sure your team is well educated on how to avoid clicking unsafe links or falling for phishing scams.

An average computer user tends to ignore the little pop-up windows that inform about new software updates. Daniel Markuson claims that keeping all software up to date is crucial for your company’s cybersecurity. That’s because updates often repair security flaws, fix or remove various bugs, add new features, and improve the existing ones. Having the latest software version means you are using the most secure version, too.

Daniel Markuson from NordVPN says that employees posting online carelessly can leak sensitive business information. Consider Instagram pictures with workspace in the background. Or Facebook status updates on upcoming business trips or closing important deals. Both reveal too much information that can be used to breach your organization’s security.

It is also a very common mistake during the current situation when people share images online of how their work spaces at home look like. A picture of a desktop with visible icons or open documents can reveal too much than intended. “Businesses need to create social media and data privacy guidelines to prevent employees from sharing confidential information,” the expert suggested.

Your employee might insert a flash drive into their computer without knowing it is infected. According to Daniel Markuson, these media storage devices might contain viruses and other malicious content. These could transfer to your network and compromise the company’s entire system.