Defence Online

How SMEs and startups are approaching cyber security

Homeland January 29, 2020

SMEs are leading the way in the adoption of new cyber security technologies and are turning their focus towards their security practices.

Cyber security has become a bigger focus in recent years and SMEs have been approaching unique solutions to issues surrounding attacks, malware, and denial of service. Larger businesses are investing in SMEs and startups to access innovative new technologies. Technology such as IoT and AI has become more accessible to smaller businesses and many SMEs are leading the way in taking advantage of these innovations, including startup Ordr, which raised $27.5million for its model protecting IoT devices.

Smaller businesses are more likely to be the victims of attacks which can often be disguised as standard business emails. Since they are usually less well protected and easier to compromise, it’s easier for cybercriminals to find ways into their networks and even use them as a gateway to larger companies and organisations. The manner of threats is changing along with advancing technology. Innovations like IoT can be helpful for smaller businesses, but they provide more windows for cyber attackers. Digital tools exist to strengthen computer systems that are easy for new SMEs and startups to use. Software specifically created for SMEs include Secure Internet Gateway (SIG) tools which help organisations transition to cloud-based systems. Some firms and wider organisation specialise in cybersecurity for SMEs, providing advice and education as well as technology.

SMESEC is an organisation created by the EU to help SMEs improve their cybersecurity practices. The group assesses the needs of small businesses and uses technology from partners to provide frameworks for their systems. They also provide training and low-cost solutions. Training is an important factor for SME cybersecurity, as well as hiring capable staff with digital skills. SMESEC provides online training and access to affordable technology. Innovations such as blockchain and AI play a large role in modern cybersecurity solutions.

Blockchain provides a means of storing data that has no central server and requires a ‘key’ to access, making it almost impossible to corrupt. Blockchain is also readily accessible and affordable as well as providing potential solutions to other issues facing SMEs such as financing and adoption of new technologies. SMEs often lead the way with blockchain and the sector is expected to grow in the future.

Another increasingly available technology being tentatively used by SMEs is artificial intelligence. AI has become a useful tool in cybersecurity, however, according to AI firm Senseon, many smaller companies are reluctant to use it. Senseon reports that automated cybersecurity processes are especially useful for smaller organisations as they can act in tandem to IT staff and allow them more time for other parts of the business.

According to Senseon, AI is essential to the future of cybersecurity, especially for SMEs. In a changing threat landscape, companies must stay ahead of cybercriminals who constantly adapt, which can be extremely difficult for a smaller organisation. AI can work faster than traditional tools and can improve human ability by working alongside IT staff. Machine learning recognises patterns and can adapt to them often before organisations are even aware of the threats.

Traditional anomaly detection can be time-consuming and often doesn’t recognise new methods of hacking. Many SMEs have limited IT teams, or very few staff members solely dedicated to IT. SMEs are more likely to adopt AI than larger enterprises as bigger companies are more risk-averse. The National Cyber Security Centre (NCSC) advises SMEs on cybersecurity tools and technologies, including AI, which they explain how to use effectively. They offer guidance for SMEs on making the right choice in cybersecurity intelligence tools in terms of price and suitability for their company. One risk is that attackers can also use AI.

Seeking targets can be made into a faster and more effective process through AI allowing criminals to match an organisations’ power. By adopting AI and machine learning, SMEs can ensure they stay ahead of cyber trends. The capability of cyber attackers is moving quickly and businesses must respond with systems capably of matching their tools.

Cloud technology is another accessible way for SMEs to improve their security practices. It has become popular with many businesses and makes safe storage of information easier. The cloud allows small teams of IT staff to safeguard multiple systems on a server separate from their central systems. The information is readily available without being subjected to the vulnerabilities of the organisation’s computer network.

Data can be transferred through a cloud security programme and assessed for risks before being sent on to servers. This reduces the need for security hardware. It also reduces the need for security configurations and puts all administration in one place managed by external parties. The NCSC provides guidance for SMEs on getting the right cloud security provider. This includes advice on contract length and what to look for in qualifications. SMEs, in particular, can benefit from cloud security as it as a more cost-effective and less complicated way of installing security. With the right practices, cloud security can be entirely reliable. However, the cloud is not airtight. Using the cloud for storage of data contains risks such as weak passwords and the potential for hacking and malware, similar to traditional servers.

The government advises monitoring vulnerabilities and incidences to keep cloud storage secure. Malware can be put into cloud coding and act as a way of monitoring activity or stealing information. There is also the possibility of authorised users accessing data maliciously. With data on the cloud, the most important steps are to recognise security protocol and keep APIs secure. Training staff in best practices is also an important factor in keeping cloud data storage secure. Experts advise diligence while moving data to the cloud and ensuring that the workforce recognises their individual roles and understands how it works within their industry.

To learn more about cyber security and how your business can stay protected from threats, visit the Cyber Essentials Online website.

If you would like to join our community and read more articles like this then please click here.

ai Blockchain Business cloud security cybersecurity Data SMEs

Post written by: Ciara Houghton