The public is fixated on high-profile corporate and government database breaches, hackers and identity thieves are increasingly targeting millions of small businesses. This spring, the National Cyber Security Alliance (NCSA) challenges small businesses to make cyber security a top priority. A 2005 FBI Cyber Crime Study shows that 90 percent of small businesses had at least one cyber security incident within the past year. Not taking the correct cyber security precautions and approach makes small businesses’ computer networks easy targets. Hackers can easily steal from and use these networks as launching pads to attack others, send phishing emails, and even steal from home users.

    Ron Teixeira, executive director of the NCSA, stated: “Consumers are starting to hold businesses accountable for how they protect sensitive information and will punish or reward a company based on how it approaches cyber security. According to a recent survey, only 20 percent of consumers said they would continue shopping at a store that had a data breach, whereas 85 percent surveyed said they would increase their shopping at a store known for its good cyber security practices.”

    Only 28 percent of businesses surveyed considered cyber security a top priority, according to a 2006 AT&T report. “Cyber security apathy” continues to put small businesses’ customers’ financial information at risk and also gives hackers a mean to attack others on the Internet. Unfortunately, “cyber security apathy” is a reason why many small businesses and their customers become cyber crime victims. According to Symantec’s recent Internet Threat Report, 82 percent of data breaches, data theft and data loss could have been avoided if only the businesses had a cyber security plan in place.    

    The NCSA is working to insure small businesses have access to data on security practices that will help protect them from cyber threats in a cost effective manner. Small business can begin to develop a cyber security plan by using the NCSA’s tips. Implementing a security plan not only makes good business sense but is necessary for maintaining a loyal customer base.

The steps include:

 - Ensure that all employees use effective passwords, and when possible, stronger authentication technology.
 - Protect your systems. Install and use anti-virus programs, anti-spyware programs and firewalls on all computers in your  -  - business.
 - Keep all software up-to-date.
 - Create backups.
 - Be prepared for emergencies.
 - Encrypt your customers’ data.
 - Report Internet Crime.
Check your state laws to see if this rule applies to your incident. To find out more information on how to report a cyber security incident, go to https://forms.us-cert.gov/report/ or http://www.ic3.gov/complaint/