Latest / She's On The Money / Keeping Your Small Business Cybersafe

Transcript

Keeping Your Small Business Cybersafe · She's On The Money

• 0:00
  Speaker 1: Hello, my name's Santasha Nabananga Bamblet. I'm a proud yord
• 0:05
  Speaker 1: Order Kerni Whoalbury and a waddery woman. And before we
• 0:08
  Speaker 1: get started on She's on the Money podcast, I would
• 0:11
  Speaker 1: like to acknowledge the traditional custodians of the land of
• 0:14
  Speaker 1: which this podcast is recorded on a wondery country, acknowledging
• 0:18
  Speaker 1: the elders, the ancestors and the next generation coming through
• 0:23
  Speaker 1: as this podcast is about connecting, empowering, knowledge sharing and
• 0:27
  Speaker 1: the storytelling of you to make a difference for today
• 0:31
  Speaker 1: and lasting impact for tomorrow. Let's get into it.
• 0:34
  Speaker 2: She's on the Money, She's on the Money. Hello, and
• 0:58
  Speaker 2: welcome to She's on the Money the podcast Millennials who
• 1:01
  Speaker 2: want financial freedom. Guys, as you probably already know, my
• 1:05
  Speaker 2: name is Victoria Devine and I don't have someone here
• 1:08
  Speaker 2: with me today. I have a little solo episode for
• 1:10
  Speaker 2: you today, all about keeping your small business cyber safe.
• 1:15
  Speaker 2: I feel like at the moment, it's another day another
• 1:17
  Speaker 2: high profile data breach Medibank, Canva Optist Latitude. But it's
• 1:21
  Speaker 2: not just big corporations that are being targeted. Literally every day,
• 1:26
  Speaker 2: individuals and small businesses are under attack and these stories
• 1:29
  Speaker 2: just don't make the news because they're not that newsworthy
• 1:32
  Speaker 2: according to the media. As a small business owner myself,
• 1:35
  Speaker 2: this kind of terrifies me, and a cybersecurity attack could
• 1:39
  Speaker 2: literally end my business but also ruin my reputation and
• 1:43
  Speaker 2: hurt my community. But it is so easy to ensure
• 1:46
  Speaker 2: that your business and your community and your customers are safe,
• 1:48
  Speaker 2: and it's something that we all gloss over, right as
• 1:51
  Speaker 2: a small business owner, it is something that we are
• 1:53
  Speaker 2: so good at overlooking because it's always on the back burner.
• 1:56
  Speaker 2: There's always something so much more important to do. But
• 1:59
  Speaker 2: today I really want to chat to you about how
• 2:01
  Speaker 2: to get cyber safe. But first i'm Statskirl, so I
• 2:04
  Speaker 2: have come prepared with a number of stats for you.
• 2:07
  Speaker 2: So research shows that women are not as confident as
• 2:10
  Speaker 2: men when it comes to preparing, managing, and responding to
• 2:13
  Speaker 2: cyber attacks, even though we are less likely to be
• 2:16
  Speaker 2: scammed compared to our male counterparts. I feel like that's
• 2:20
  Speaker 2: the only good thing to come out of that. A
• 2:22
  Speaker 2: survey of more than two thousand small business owners and
• 2:25
  Speaker 2: employees showed that while female business owners are less likely
• 2:29
  Speaker 2: to be scammed compared to their male counterparts, they're not
• 2:32
  Speaker 2: as confident as men when it comes to their general
• 2:34
  Speaker 2: cybersecurity knowledge. And this survey it was part of the
• 2:38
  Speaker 2: Council of Small Business Organization cyber Warden's program A mouthful,
• 2:43
  Speaker 2: but it was developed in partnership with the CBA, so
• 2:46
  Speaker 2: the Commonwealth Bank and Telstra. All right, let's start with
• 2:49
  Speaker 2: arguably the most vital step, and that is passwords. I
• 2:53
  Speaker 2: feel like I'm talking to myself here, one because this
• 2:56
  Speaker 2: is a solo episode, but two because I'm really bad
• 3:00
  Speaker 2: at passwords. They all used to just be one word,
• 3:03
  Speaker 2: and everyone in my entire team used to know that word.
• 3:06
  Speaker 2: If you knew my family, you probably knew that word.
• 3:09
  Speaker 2: It wasn't good. But passwords really are your first line
• 3:12
  Speaker 2: of defense against cyber break ins, and it's essentially the
• 3:15
  Speaker 2: keys to your business. So strong, long and unique passwords
• 3:19
  Speaker 2: make your accounts more secure and are more likely to
• 3:22
  Speaker 2: keep out hackers. But now with the rise of supercomputers
• 3:26
  Speaker 2: and AI having a short and simple password, it means
• 3:30
  Speaker 2: that these are really easy for cyber criminals to crack.
• 3:33
  Speaker 2: Reusing passwords across different businesses or even personal accounts can
• 3:37
  Speaker 2: make you a target for what they call credential stuffing scams.
• 3:41
  Speaker 2: One compromised account is like giving cyber criminals the master
• 3:45
  Speaker 2: key to your entire business, which is really scaring. In
• 3:49
  Speaker 2: really busy small businesses, the temptation to use short, simple
• 3:52
  Speaker 2: passwords and repeat them is a really easy trap to
• 3:55
  Speaker 2: fall into, and one I used to fall into until
• 3:57
  Speaker 2: I learned about this and had to get myself to
• 3:59
  Speaker 2: get If you're doing your best to create secure passwords
• 4:03
  Speaker 2: and then struggling to remember them all, you're not alone.
• 4:05
  Speaker 2: So pass phrases are actually your best line of defense. Now,
• 4:08
  Speaker 2: if you're wondering what a passphrase was. When I first
• 4:11
  Speaker 2: heard passphrase, I was a little confused, so they let
• 4:13
  Speaker 2: me talk you through it. A passphrase are a type
• 4:16
  Speaker 2: of password that are harder for cyber criminals to crack,
• 4:18
  Speaker 2: and they're easy to remember, which makes them an easy
• 4:21
  Speaker 2: cyber safety win. Passphrases are longer, and they actually contain
• 4:25
  Speaker 2: a sequence of really random words, usually four or five
• 4:28
  Speaker 2: of them, and the trick is making sure it isn't
• 4:32
  Speaker 2: a proper sentence, but an easy combination for you to remember.
• 4:36
  Speaker 2: So if you're wondering the how do I create a
• 4:38
  Speaker 2: strong passphrase? A good passphrase generally contains at least four
• 4:42
  Speaker 2: words that are completely unrelated and completely unpredictable, and the
• 4:46
  Speaker 2: best way to generate a passphrase is to choose completely
• 4:49
  Speaker 2: random words, be extra careful, and make sure that they
• 4:52
  Speaker 2: don't contain any personal information. So if you were me,
• 4:55
  Speaker 2: you wouldn't go, all right, well, I'll use my cats
• 4:56
  Speaker 2: and my dog's name and my husband's name, because that
• 4:59
  Speaker 2: is really easy to guess because it's all over the internet.
• 5:02
  Speaker 2: It is not hard to find that information. Many websites
• 5:06
  Speaker 2: now require you to have it a capitalized character, number
• 5:09
  Speaker 2: and symbol, so you could still add this to a passphrase.
• 5:12
  Speaker 2: So you could capitalize random letters, or you could add hashes,
• 5:16
  Speaker 2: or you could add the at sign. You could also
• 5:18
  Speaker 2: spell out numbers instead of just using the number and
• 5:21
  Speaker 2: mix it all up. So that's what I've ultimately done.
• 5:24
  Speaker 2: And the important thing here is that they're not words
• 5:27
  Speaker 2: that are relatable to you. So I haven't used my name,
• 5:29
  Speaker 2: i haven't used my cat's name. I've literally used random words.
• 5:34
  Speaker 2: I've written down four key points that are kind of
• 5:37
  Speaker 2: like pro tips when using passphrases. So let me whip
• 5:40
  Speaker 2: through these really quickly so that we're all on the
• 5:42
  Speaker 2: same page. Number one don't duplicate your passphrases. So what
• 5:46
  Speaker 2: we want to do is ensure that each passphrase for
• 5:48
  Speaker 2: each account is unique and we never double up. Ever,
• 5:52
  Speaker 2: this means that if one does become compromised, you haven't
• 5:55
  Speaker 2: breached all of your accounts. Number two, We're going to
• 5:58
  Speaker 2: keep our passphrases to ourselves, so we're not going to
• 6:00
  Speaker 2: share our log in details with team members. It might
• 6:03
  Speaker 2: save some time and some money, but it honestly increases
• 6:06
  Speaker 2: your cyber risks and it is not worth doing it.
• 6:09
  Speaker 2: Number three is use a password manager to safely store passwords.
• 6:13
  Speaker 2: So this has been a game changer for me. Apps
• 6:15
  Speaker 2: can be used to securely manage passwords for all of
• 6:18
  Speaker 2: your accounts, and using one is going to keep all
• 6:20
  Speaker 2: of your accounts more secure. Number four is add a
• 6:24
  Speaker 2: virtual alarm by pairing passphrases with multi factor authentication. So
• 6:28
  Speaker 2: if your passphrase is ever compromised, multi factor authentication is
• 6:32
  Speaker 2: going to add another layer of security to keep your
• 6:35
  Speaker 2: account protected. And this for me, I thought it was
• 6:38
  Speaker 2: going to be really complicated, but it's not. I have
• 6:40
  Speaker 2: an app on my phone and it guards all of
• 6:42
  Speaker 2: my accounts. It's a simple code. I pop it in
• 6:45
  Speaker 2: and it just makes so much sense in all honesty,
• 6:47
  Speaker 2: I don't know why I didn't do it earlier. Another
• 6:51
  Speaker 2: massive threat to your small business is what's called a
• 6:53
  Speaker 2: bin attack. No, someone doesn't come at you with a
• 6:56
  Speaker 2: willie bin. Unfortunately, bin attacks are happening in Australia and
• 7:01
  Speaker 2: they're increasing year on year. At the end of twenty
• 7:04
  Speaker 2: twenty three, there was an ABC report who talked about
• 7:07
  Speaker 2: a Melbourne based business who had more than fifteen thousand
• 7:11
  Speaker 2: attempted transactions through their online shop in just a space
• 7:15
  Speaker 2: of two months. You're probably wondering what's a BIN. So
• 7:18
  Speaker 2: a BIN is a bank identification number and it refers
• 7:21
  Speaker 2: to the initial sequence of four to six numbers that
• 7:24
  Speaker 2: appears on your credit card. So it's the number used
• 7:26
  Speaker 2: to identify a cards issuing bank or another financial institution.
• 7:30
  Speaker 2: And a BIN attack is when cyber criminals steal BIN
• 7:33
  Speaker 2: numbers and then attempt to generate working cards by guessing
• 7:37
  Speaker 2: the remaining card numbers to check if these card numbers
• 7:40
  Speaker 2: are linked to real cards. Fraudsters they test them on
• 7:43
  Speaker 2: the payment page of your online shop and then if
• 7:46
  Speaker 2: it's a successful transaction, it means they've guessed a winning
• 7:49
  Speaker 2: combination of numbers and then they can start making a
• 7:51
  Speaker 2: heap more fraudulent transactions, which is really scary. So although
• 7:55
  Speaker 2: every bank card has sixteen numbers, it can be relatively
• 7:58
  Speaker 2: straightforward and pretty fast for cyber criminals to cycle through
• 8:02
  Speaker 2: the oldest of numbers that follow the bin in order
• 8:05
  Speaker 2: to make enough correct guesses and find a live card
• 8:07
  Speaker 2: number with accounts attached. So generating thousands of guesses and
• 8:11
  Speaker 2: testing them is actually fairly easy for a cyber criminal
• 8:14
  Speaker 2: thanks to the help of AI and computer bots. The
• 8:17
  Speaker 2: cyber criminal might then use these working card numbers to
• 8:20
  Speaker 2: make transactions themselves, or they might actually on sell those
• 8:23
  Speaker 2: numbers to other criminals to use them for bigger and
• 8:26
  Speaker 2: scarier things. Then, attacks pose two major risks to small businesses.
• 8:31
  Speaker 2: So firstly, they can be really expensive. Depending on the
• 8:34
  Speaker 2: contract with your payment gateway, you might actually be charged
• 8:37
  Speaker 2: for each attempted transaction, so this expense can multiply really
• 8:41
  Speaker 2: quickly if bots and AI are involved and your hit
• 8:44
  Speaker 2: with a really large attack. Secondly, they can be a
• 8:47
  Speaker 2: serious reputation risk when victims starts seeing your store charged
• 8:51
  Speaker 2: on their credit card, which is terrifying because you know
• 8:55
  Speaker 2: that wasn't you it was actually somebody else. So there
• 8:59
  Speaker 2: are multiple signs of a bin attack. And here are
• 9:01
  Speaker 2: some things that you need to look out for. So
• 9:04
  Speaker 2: are you experiencing lots of low value transactions that might
• 9:07
  Speaker 2: be pretty unusual for your business. You might have gotten
• 9:11
  Speaker 2: a heap of notifications that your customer's cards have been
• 9:13
  Speaker 2: declined multiple times. Have you seen the use of international cards,
• 9:17
  Speaker 2: so banking cards consistently from countries that are outside of Australia.
• 9:22
  Speaker 2: Maybe you've experienced a spike in transactions, whether they're attempted
• 9:26
  Speaker 2: and processed in a short period of time and the
• 9:29
  Speaker 2: same card number being used for multiple transactions. You might
• 9:33
  Speaker 2: also have noticed strange transactions outside your normal customer behavior.
• 9:37
  Speaker 2: So you might see things at three am in the morning,
• 9:39
  Speaker 2: for example, when all your normal transactions generally take place
• 9:43
  Speaker 2: between twelve pm and eleven pm. Or you might have
• 9:46
  Speaker 2: seen an unusually significant increase in transaction fees from your bank.
• 9:50
  Speaker 2: The final thing I want you to watch out for
• 9:52
  Speaker 2: is a really unusual spike in customers disputing payments. If
• 9:57
  Speaker 2: a group of customers all notice that their cards have
• 9:59
  Speaker 2: successfully been used on your website, they might contact you,
• 10:02
  Speaker 2: or they might just go direct to their bank and
• 10:05
  Speaker 2: dispute the payment because they go, well, this is fraudulent,
• 10:07
  Speaker 2: and process a refund or a chargeback. So these are
• 10:11
  Speaker 2: things that I need you to be looking out for.
• 10:13
  Speaker 2: And any small business with an online presence that accepts
• 10:16
  Speaker 2: payments over the internet is ultimately at risk. And this
• 10:19
  Speaker 2: includes me and I don't even have physical products. So
• 10:22
  Speaker 2: the best thing that you can do is actually set
• 10:24
  Speaker 2: yourself up with a payment processor that can identify these
• 10:27
  Speaker 2: types of attacks. So when you're searching for this type
• 10:30
  Speaker 2: of service for your online shop, I really need to
• 10:33
  Speaker 2: make sure that you're reading through what they offer in
• 10:35
  Speaker 2: regards to fraud prevention. Some processors may offer multiple additional
• 10:39
  Speaker 2: layers of protection, requiring customers to type in a capture
• 10:43
  Speaker 2: three D secure and the rate limit that you can
• 10:46
  Speaker 2: easily implement on your website. And I've got a few
• 10:48
  Speaker 2: points that I've written down here, so bear with me,
• 10:51
  Speaker 2: my friends. So what these processes are going to do
• 10:53
  Speaker 2: is check transactions are real and not a robot. This
• 10:56
  Speaker 2: means that you're making sure that genuine customers can make
• 10:59
  Speaker 2: their purchases, but a scammer using software to test various
• 11:03
  Speaker 2: credit card numbers might not be able to get through.
• 11:06
  Speaker 2: Adding a capture is one way that you can do this.
• 11:09
  Speaker 2: So then we're going to want to limit transactions and
• 11:11
  Speaker 2: set alarms for large transaction volumes. A rate limit actually
• 11:15
  Speaker 2: prevents the number of new customers who can be created
• 11:18
  Speaker 2: from a single Internet addressing one day, which is really
• 11:21
  Speaker 2: important if you're a small business where a customer only
• 11:24
  Speaker 2: places maybe like one or two orders. A rate limit
• 11:27
  Speaker 2: is a really sensible option and isn't going to impact
• 11:29
  Speaker 2: your genuine customers because what type of customer is creating
• 11:33
  Speaker 2: lots and lots of different accounts from the same Internet
• 11:35
  Speaker 2: address right. What it's going to do for you is
• 11:38
  Speaker 2: ensure that a scammer can't process hundreds or even thousands
• 11:41
  Speaker 2: of purchases through your website, which protects you and your consumer.
• 11:45
  Speaker 2: And then the next thing you want to do is
• 11:48
  Speaker 2: turn on a virtual alarm for online payments. Are you
• 11:51
  Speaker 2: familiar with multi factor authentication for your online accounts? When
• 11:54
  Speaker 2: you try to log in, you might have to enter
• 11:56
  Speaker 2: like a code or a one time password to double
• 11:58
  Speaker 2: check it's you. I mention before that I've got an
• 12:01
  Speaker 2: app on my phone that lets me get into everything.
• 12:03
  Speaker 2: And when I say everything, I mean everything. If I
• 12:06
  Speaker 2: can multi factor authenticate something. I have my Facebook, my Instagram,
• 12:10
  Speaker 2: obviously my bank, but also more recently I was able
• 12:14
  Speaker 2: to multifactor my pet food ordering company. So we are
• 12:17
  Speaker 2: going hard on this because it's so important, and to
• 12:20
  Speaker 2: be honest, my credit card details are where my pet
• 12:23
  Speaker 2: food is ordered, so I don't particularly want anyone jumping
• 12:26
  Speaker 2: into that. And business is. You can do the same
• 12:29
  Speaker 2: for all online payments. Its official name is three D
• 12:32
  Speaker 2: Secure or three DS, but it works really simply when
• 12:36
  Speaker 2: a customer's card is attempted to be charged, they will
• 12:39
  Speaker 2: have to verify that you're the one trying to make
• 12:41
  Speaker 2: a payment. Think of it like turning on a virtual
• 12:43
  Speaker 2: alarm to online payments, which I think is really smart.
• 12:47
  Speaker 2: Now let's go to a really quick break, because I
• 12:49
  Speaker 2: feel like I have been talking underwater with a mouthful
• 12:51
  Speaker 2: of marbles. So I'm gonna grab a coffee, and when
• 12:54
  Speaker 2: we get back, i'm gonna give you my top four
• 12:55
  Speaker 2: security tips for small businesses, and we're going to be
• 12:58
  Speaker 2: talking about how to pimp your passwork. So don't go anywhere,
• 13:05
  Speaker 2: all right, guys, we are back, and I did promise
• 13:08
  Speaker 2: that I would give you my top four security tips
• 13:10
  Speaker 2: and in a minute, I'll get to how to pimpy
• 13:12
  Speaker 2: a password, but calm down, we actually need to get
• 13:15
  Speaker 2: through these top four security tips first. So number one,
• 13:18
  Speaker 2: I need you to make sure that you don't ignore
• 13:20
  Speaker 2: software upgrades. I am always clicking the button that says
• 13:24
  Speaker 2: remind me later, and it's really easy to do that
• 13:26
  Speaker 2: when pesky software updates pop up on your phone or
• 13:29
  Speaker 2: computer screen. Literally I have only just updated my iPhone
• 13:32
  Speaker 2: and it has been months since the last update came out,
• 13:35
  Speaker 2: and that is honestly not good enough. I also feel
• 13:38
  Speaker 2: like whenever my computer needs an update, it always pops
• 13:41
  Speaker 2: up at the most inopportune time. I'm jumping into a
• 13:44
  Speaker 2: Teams meeting in my computer's like, oh hey, they good
• 13:46
  Speaker 2: time to update your computer, and I always hit remind
• 13:50
  Speaker 2: me later. But what you're gonna do if that happens
• 13:52
  Speaker 2: is just set a little reminder on your phone so
• 13:54
  Speaker 2: that you can come back to it. Software updates often
• 13:57
  Speaker 2: contain really important patches or fixes for secure flaws in
• 14:00
  Speaker 2: your operating system or software, so what we need to
• 14:03
  Speaker 2: do is make sure that they're always up to date.
• 14:05
  Speaker 2: Cybercriminals know about these weaknesses, and they know how to
• 14:09
  Speaker 2: exploit them. It's why your software company wants to update
• 14:12
  Speaker 2: them because they've identified them as well, and usually it's
• 14:15
  Speaker 2: through a breach. So updating your software can close the
• 14:18
  Speaker 2: gaps to make it harder for cyber criminals to break
• 14:21
  Speaker 2: into your business, which is a win for everyone. And
• 14:23
  Speaker 2: cyber criminals, let's be honest, they're quite intelligent. I mean
• 14:27
  Speaker 2: I wish that they would use their intelligence for better
• 14:30
  Speaker 2: but they don't. But they know this and they attempt
• 14:32
  Speaker 2: to impersonate these trusted organizations to scam small businesses. So
• 14:37
  Speaker 2: always check who is sending you this notification. Is it
• 14:40
  Speaker 2: an email, Is that a trusted email? If it's a
• 14:43
  Speaker 2: text message, make sure you're trusting where this is coming
• 14:46
  Speaker 2: from before you action anything. In fact, across my entire life,
• 14:50
  Speaker 2: I have decided to never click a link in a
• 14:52
  Speaker 2: text message ever again, and I think that most businesses
• 14:55
  Speaker 2: are on board with this nowadays. I know the banks
• 14:57
  Speaker 2: are jumping up and down about how do not click links?
• 15:00
  Speaker 2: We would never send you a link, We would never
• 15:03
  Speaker 2: do that to you. So I feel like, if you
• 15:05
  Speaker 2: want my business, you will not send me a link.
• 15:07
  Speaker 2: You'll say, go to my website. I know your website.
• 15:09
  Speaker 2: Oh key it in myself. Thank you. The second thing
• 15:12
  Speaker 2: we're going to do is use multi factor authentication on
• 15:14
  Speaker 2: your devices. So, as I said before, I'm obsessed with this.
• 15:18
  Speaker 2: I have it now. It does make me feel a
• 15:20
  Speaker 2: lot safer. Multi factor authentication is an added layer of
• 15:23
  Speaker 2: security for your accounts that makes it so much harder
• 15:26
  Speaker 2: for hackers to break in. Using multi factor authentication means
• 15:30
  Speaker 2: that anyone who wants to log into your account is
• 15:32
  Speaker 2: going to need to supply additional information in addition to
• 15:35
  Speaker 2: your username and password, and some accounts use a unique
• 15:38
  Speaker 2: text message. Well others will suggest to use an authenticator app,
• 15:42
  Speaker 2: so I use both. But I think it's really important
• 15:44
  Speaker 2: that you're implementing these things. I told you that i'd
• 15:47
  Speaker 2: tell you how to pimp out your password. So new
• 15:50
  Speaker 2: financial year knew me, but also new password babe. The
• 15:53
  Speaker 2: new financial year is a great time to wipe the
• 15:56
  Speaker 2: slate clean with old passwords and usher in some new,
• 15:59
  Speaker 2: stronger ones week. Passwords, especially those used across multiple accounts,
• 16:04
  Speaker 2: are one of the biggest risks to cybersecurity for small businesses.
• 16:08
  Speaker 2: As I mentioned before, a password manager can help you
• 16:11
  Speaker 2: create strong passwords and then save them in a really
• 16:13
  Speaker 2: secure place, meaning you don't need to remember them all
• 16:16
  Speaker 2: for your accounts. They're in your password manager, which is
• 16:20
  Speaker 2: completely protected. And then four, what we're going to do
• 16:24
  Speaker 2: is back up our business. You back yourself in business.
• 16:27
  Speaker 2: You need to back your actual business when it comes
• 16:30
  Speaker 2: to protecting it from a cyber attack. What will you
• 16:32
  Speaker 2: do if your small business was the victim of a
• 16:35
  Speaker 2: cyber attack and your critical business information couldn't be recovered.
• 16:38
  Speaker 2: There's a few things here, right. Let's pretend that someone
• 16:41
  Speaker 2: attacks your business. You lose a heap of money, and
• 16:44
  Speaker 2: the bank refunds all of your money. Fantastic money win. However,
• 16:48
  Speaker 2: what about your reputation. I know that companies who have
• 16:51
  Speaker 2: experienced these types of breaches lose a lot of customers.
• 16:54
  Speaker 2: And they don't just lose customers because it happened to them.
• 16:57
  Speaker 2: They lose customers because the reputation that they were safe
• 17:01
  Speaker 2: makes people really, really worried. So it is so much
• 17:04
  Speaker 2: more important than just worrying about the financial loss. A
• 17:07
  Speaker 2: loss as important as business and customer data could be
• 17:10
  Speaker 2: completely devastating for any small business, and a really good
• 17:14
  Speaker 2: way to help protect yourself from that loss is to
• 17:17
  Speaker 2: make a plan to regularly back up your critical business
• 17:20
  Speaker 2: information either through an external storage drive or in the cloud,
• 17:25
  Speaker 2: or if you're me, you do both because you have
• 17:27
  Speaker 2: anxiety while you make up a backup plan. It's a
• 17:31
  Speaker 2: really good time to consider making an emergency plan in
• 17:33
  Speaker 2: the event of a cyber attack. A sound emergency plan
• 17:37
  Speaker 2: will outline how staff should report a suspected cyber incident,
• 17:41
  Speaker 2: who would you contact for help, and how would you
• 17:43
  Speaker 2: communicate any incident to customers or stuff, and how would
• 17:47
  Speaker 2: you manage if critical systems are then offline for any
• 17:50
  Speaker 2: period of time. An emergency plan sounds a bit silly,
• 17:53
  Speaker 2: but it can actually help you feel in control and
• 17:56
  Speaker 2: recover quickly in the event of a cyber threat or incident.
• 17:59
  Speaker 2: The other thing I would say here is how do
• 18:02
  Speaker 2: you educate your consumer in advance? So I know, because
• 18:07
  Speaker 2: I own a mortgage broken company and we deal with
• 18:09
  Speaker 2: money every single day, that at the bottom of our
• 18:12
  Speaker 2: emails we are always letting customers know. It's literally in
• 18:16
  Speaker 2: our email signature that we will never ask you via
• 18:19
  Speaker 2: email to transfer funds. If we ever send you bank
• 18:22
  Speaker 2: codes BSB and account numbers to deposit money, it is
• 18:26
  Speaker 2: not us because we would never do that. And I
• 18:28
  Speaker 2: think that educating your consumer upfront is going to mean
• 18:32
  Speaker 2: that you're protecting yourself as well as you can. Now,
• 18:35
  Speaker 2: I feel like that was a lot, because it is
• 18:38
  Speaker 2: a lot. Cybercrime is sadly on the rise, and I
• 18:41
  Speaker 2: think it's so important to keep your small business cyber safe.
• 18:45
  Speaker 2: It is something that has slipped to the wayside for
• 18:47
  Speaker 2: a long time for me and now is not, thank God,
• 18:50
  Speaker 2: But I think it's really important that you take it
• 18:53
  Speaker 2: seriously as well. To me, one of the things that
• 18:55
  Speaker 2: stopped me was it felt like an overwhelming admin task.
• 18:58
  Speaker 2: So if you're going to do it, set some time
• 19:01
  Speaker 2: aside and get it done, because it's one of the
• 19:03
  Speaker 2: most important things that you do for your business. But friends,
• 19:06
  Speaker 2: I know I have talked a lot about this. I'm
• 19:08
  Speaker 2: happy to continue the conversation, but unfortunately when it comes
• 19:11
  Speaker 2: to podcast time, that is all we have time for today.
• 19:14
  Speaker 2: So if you'd like to chat more about this, we
• 19:17
  Speaker 2: can jump into the Business Bible Facebook community. You can
• 19:19
  Speaker 2: join us on Instagram. Obviously, we're a community that shares
• 19:23
  Speaker 2: our business and money tips and tricks every single day
• 19:26
  Speaker 2: free of judgment. So so she's on the Money or
• 19:28
  Speaker 2: the Business Bible on Facebook and join us if Facebook's
• 19:31
  Speaker 2: not your thing though, She's on the Money aus so
• 19:34
  Speaker 2: don't forget to join the conversation and I will see
• 19:37
  Speaker 2: you next time, hopefully for another solo episode. The advice
• 19:47
  Speaker 2: shared on She's on the Money is general in nature
• 19:49
  Speaker 2: and does not consider your individual circumstances. She's on the
• 19:53
  Speaker 2: Money exists purely for educational purposes and should not be
• 19:56
  Speaker 2: relied upon to make an investment or financial decision. If
• 20:00
  Speaker 2: you do choose to buy a financial product, read the
• 20:02
  Speaker 2: PDS TMD and obtain appropriate financial advice tailored towards your needs.
• 20:07
  Speaker 2: Victoria Divine and She's on the Money are authorized representatives
• 20:11
  Speaker 2: of Money sherper P t y lt D A b
• 20:14
  Speaker 2: N three two one six four nine two seven seven
• 20:17
  Speaker 2: zero eight AFS L four five one two eight nine