Keep your business cyber secure

Cyber attacks are on the rise and pose an increasing threat to businesses. Find out about common types of cyber attack, how to keep your business secure and why cyber security should be a key priority at the heart of your business.

Common types of cyber attack

Cyber attacks and cybercrime are on the rise and they pose an increasing threat to businesses. There are many different forms of cyber attack. Here are just a few of the more common types:

Phishing: fraudulent communication (often email) that looks like it's come from a reputable source
Malware: malicious software such as spyware, viruses and ransomware - often activated when users click on links or open email attachments
Denial-of-service attack: systems, networks and servers are flooded with traffic and can stop working
Social engineering: users are tricked into clicking on malicious links or deception is used to physically gain access to a device
Man-in-the-middle: attackers interrupt the data moving between your device and the network you're using (such as unsecured public Wi-Fi) to steal your information

Criminals are also taking advantage of the rise of work-from-home, targeting remote staff with fraudulent emails, phone calls, texts, messages or social media posts.

Six reasons why cyber security matters

Protect your customers, protect your business

£44,000 estimated average cost of a cyber attack, but the damage can be far-reaching and more than financial

39% of companies were affected by a cyber attack in 2020

£1.3 billion total cyber losses among affected companies in 2020

Cyber Readiness Report, Hiscox, 2020

Protect your business

Prevention is cost-effective and being resilient is an opportunity to create value and differentiate your business from your competitors. Make cyber security a key priority at the heart of your business - it shouldn’t just be left to your IT department.

Attacks often succeed because many businesses are missing basic defences and security policies, such as patching, anti malware software, using strong passwords and network security. Having regular penetration tests (a simulated cyber attack) are also important and can help you find vulnerabilities in your networks and applications.

Cyber Essentials certification is a good and achievable starting point for most businesses to begin their journey towards cyber resilience.

Security protection anti-virus software - Photo by Pexels 60504

Cyber Essentials certification

Cyber Essentials certification is increasingly recognised as a cost-effective way for organisations to protect themselves against cyber attack.

Cyber Essentials is a UK Government backed certification, run by the National Cyber Security Centre (NCSC). It's a relatively simple way to make sure you have controls in place against the most common types of cyber threats.

And importantly, it allows you to publicly demonstrate your commitment to cyber security.

Cyber Essentials guidance from NCSC

Sources of help and advice

Business Gateway Cyber Resilience toolkit

Find Business Gateway's guidance and support on the cyber landscape and the steps you can take to become cyber resilient.

Find out more

Laptop user gesticulating with his hands

Digital development loans

If you want to improve your digital capabilities and processes in areas such as cyber security, data analytics, software engineering and digital skills development, the Scottish Government provides interest free loans to help.

Find out more