Police issue advice for local businesses on cybercrime

Cumbria Police are advising small to medium businesses to take simple steps to protect themselves against online crime, as part of a week-long cybercrime campaign.

Detective Superintendent Andy Slattery explains:

“The key message we want to get across to local businesses is that they cannot afford to be complacent. Theft of data or identity details can lead to loss for clients and damage to their reputation.

“It is important for small to medium businesses in particular to be careful, as they are often unable to recover from a significant loss as a result of cybercrime. Large multi-national corporations are able to dedicate resources to preventing cybercrime but there are practical steps that smaller businesses can take to keep their security and their reputation intact.

“I would ask them to consider the implications of what it would mean if any of their passwords were compromised for example – money can be stolen, sensitive emails can be read, and their business can be seriously damaged.

“The same consequences are true of data loss, spam, phishing, spyware, viruses, and Trojans which no respectable business would want to be associated with. It is vitally important that local businesses are aware of these issues and take action to protect themselves against online crime.”

Information about the above e-crime methods, and how to protect against them, can be found on Cumbria Police’s website here:

http://www.cumbria.police.uk/Admin/uploads/attachment/files/Advice_and_Info/Cyber_Security_/Full_E_Crime_Guide_2.pdf

Cumbria’s Police and Crime Commissioner Richard Rhodes said:

“I would urge all businesses, large and small, to take these very important steps to protect themselves from the threat of cybercrime.  I am aware this is emerging as a significant hazard to the business community and the consequences of businesses leaving themselves vulnerable to such crime should not be underestimated.”

Some important questions Cumbria Police are asking businesses to consider are:

• Do you have an ICT security policy?
• Do you have anti-virus software?
• Does the anti-virus software receive regular updates?
• Do you regularly scan your computer systems?
• Do you have a Firewall?
• Do you have a hardware Firewall separate from your router?
• Does your Firewall receive regular updates?
• Do you have anti-spam, anti-spyware/adware software?
• Do you use the latest version of your internet browser?
• If you have one, is the wireless network encrypted to Wi-Fi Protected Access standard (WPA2)?
• Is your wireless network protected by Media Access Control address filtering (MAC)?
• Do you restrict access to sensitive data amongst staff?
• Do you encrypt sensitive data?
• Do you take your backups offsite?
• Do you ever try to recover data from your backup?
• Do you train staff on how to deal with suspicious emails?
• Do you have a password policy and do you enforce it?

For advice about fraud, or to report a fraud, call Action Fraud on 0300 123 3040.

For more information about staying safe online please visit www.cumbria.police.uk/onlinesafety

More internet safety advice can be found on the Government’s ‘Cyberstreet’ website: www.cyberstreetwise.com