skip to main content
Back to all blog posts

Posted in: Data Protection | Data Security/Privacy

Jun 6, 2017

Report Indicates that Most Small Businesses Are Not Prepared for a Cyber Incident

According to a May 2017 report by U.S. data firms Advisen and Experian, “seventy-five percent of insurance brokers and legal experts noted that their small business clients were either ‘not prepared at all’ or ‘not very well prepared’ to respond to a cyber incident.” The report highlights the “misconception that small businesses are too small to be targeted by hackers, when in reality they are often the lowest hanging fruit.” The report also states that less than a quarter of experts’ small business clients “were confident in their team’s ability to manage a cyber incident.”

Phishing and social engineering remain top concerns of risk managers and experts. As Aird & Berlis lawyers Paige Backman, Donald Johnston and Meghan Cowan noted in a February 2017 webinar, 60 to 90 percent of threats of IT systems are caused by “insiders” — people who have authorized access to hard and soft technology assets, including employees, contractors, business partners, suppliers, service providers/subcontractors and technology escrow providers. Please access the webinar archive and PDF presentation for more information, including steps to mitigate threats to your IT system.

Data security risk increases in the context of employee turnover. Please see lawyer Aaron Baer’s recent post on how to protect sensitive and confidential corporate data when an employee leaves.

Related Blogs

Posted in: Data Security/Privacy | Data Protection

Insights TheSpotlight
OEB Provides First Look at Proposed New Cyber Security Framework By Gaurav Gopinath and David Stevens Jun 16, 2017 In December 2015, the lights blinked out across multiple provinces in the Ivano-Frankivsk region of Ukraine. Nearly a quarter of a million people lost power. Shortly after power was restored, Ukraine’s Computer Emergency Response Team announced they had identified the root cause: a cyb...

Posted in: Data Security/Privacy | Data Protection

Insights TheSpotlight
Cybersecurity and Ransomware: Understanding Cyber Threats, Monitoring Data Leakage and Monitoring Reputational Damage By Aaron Baer Jun 05, 2017 Organizations around the world were recently (and rather rudely) reminded of their data vulnerability when WannaCry unleashed its international ransomware attack that seized data remotely and demanded a ransom for its release. This attack provided an important reminder of the risks associated wit...
Password Misery! By Donald B. Johnston Oct 18, 2016 We all hate passwords. Anyone who says s/he doesn't is fibbing.I had an experience recently, while at the International Bar Association conference in Washington, that renewed my hatred for passwords. The word "hatred" is inadequate to express how I actually feel about passwords - it's more like t...