Courtesy Bond, Schoeneck & King PLLC
By Michael D. Billok, Esq.
As a business owner or operator, there are always a half-dozen items that require your immediate attention, and then the dozens of other items on the “back burner” that you would like to get to when there is time–but there never seems to be time available.
Unless, of course, a back-burner item “blows up” and becomes a front-burner item, now requiring your immediate attention.
For small and mid-sized businesses, cybersecurity routinely is one such back-burner item, not getting the attention it deserves unless something does “blow up,” for example there is a hack, a data breach or some release of employee or customer personal information that now requires immediate attention. This is due to several common misconceptions about cybersecurity, such as:
• I’m small. I won’t be hacked or compromised. False.
Larger organizations have spent the past several years improving their cyber defenses to make it more difficult to access their data. As a result, hackers look to smaller organizations with less resources available to buttress their defenses as a jumping-off point to access larger organizations. Remember the national-news data breach at Target that occurred two years ago? Hackers didn’t directly “target” Target. They first hacked into an HVAC subcontractor’s network, and after compromising the subcontractor’s system they were then able to hack into Target utilizing the subcontractor’s access to Target’s network.
