Small business owners have a lot on their plate, including finding ways to protect their data and IT systems from hackers and scammers. Surprisingly, the most effective way to deal with malicious outsiders might well be to pay closer attention to what's happening on the inside of your business.
\r\nA recent ComputerWeekly survey that polled security experts reported that 55 percent said their organization had suffered a cyberattack. Of those who said their company was victim to a cyberattack, 84 percent could trace back the attack, at least in part, to internal human errors.
\r\nHence cybercriminals rarely succeed in executing fraud on their own and rely on deceitful tactics to dupe targets and push them to act irrationally. In other cases, the responsibility falls entirely on insiders' shoulders who inadvertently disclose confidential details in emails and other communications.
\r\nIn both cases, human errors may go unnoticed for weeks or months while the probability that disastrous consequences will occur – e.g., broken consumer trust, expensive lawsuits, and bankruptcy – is slowly and silently increasing.
\r\nSo what are the most common types of human errors taking place in small companies and how can business owners prevent them? Let's take a closer look.
\r\nWhat are the odds that sensitive attachments could fall into the wrong hands? Think about how many documents are repetitively sent, received, forwarded and stored by each department. Multiply this number by the average number of recipients in your contact list and annual work days.
\r\nOver, let's say, a week or a month, imagine that the file has been confusingly renamed, edited, duplicated or replaced by something else and transmitted mistakenly. If you're lucky, an incorrectly attached document doesn't contain anything to worry about; if you're not fortunate, it could be the beginning of a very bad data breach.
\r\nAutocomplete is a double-edged sword. The ability to select recipients after typing one or two characters saves time, but that functionality can also cause a user to include someone with a similar name and email address (e.g., jane.smith@abccompany.com, jim.smith@abccompany.com, and jane.smith@abdcompany.com) in an email with information they should not be privy to.
\r\nWhat happens next is hard to predict. Unintended recipients may let you know that they should not be included and ask to be removed from the email thread. Or they could decide to say nothing and gather information for their own profit.
\r\nHave you ever felt like it would be easier to use the same password everywhere? Likewise, your employees might do this for convenience.
\r\nIt represents a golden opportunity for cybercriminals who can take advantage of poor password-setting and resetting practices to break into IT systems, steal data and conduct fraud. And it works: 81 percent of hacking attacks performed are due to stolen and/or weak passwords according to Verizon's 2017 Data Breach Investigations Report.
\r\nLaptops, smartphones, and BYOD initiatives have empowered today's workforce to be increasingly mobile. That's great for small business owners who can then reduce office and administrative costs while providing employees with the flexibility to work offsite.
\r\nHowever, this creates potential risks for both data and hardware from a cybersecurity standpoint. A member of your staff may, for example, leave his or her devices unattended while quickly getting lunch or a coffee, offering a window of opportunity for cybercriminals to strike.
\r\nIs it still even possible to spot fraudulent emails nowadays? Forty-eight percent of small businesses report being the victim of phishing or social engineering scams in 2017, and hackers always seem to be one step ahead. As a result, employees are prone to make a cybersecurity faux pas – downloading and opening a malicious attachment, clicking on a suspicious URL or not checking for spoofed email addresses and inadvertently revealing data.
\r\nBefore addressing solutions, let's examine the circumstances in which human errors are most likely to happen. These include:
\r\nAll employees play a role in keeping small businesses safe, and they should be aware of it. Drafting security guidelines on acceptable and dangerous behaviors regarding, among other things, the use of passwords and what data can be stored on private devices is a good start.
\r\nYou may also find it useful to create an informal newsletter that contains some high-profile cases of human errors so your staff learns more about common mistakes.
\r\nIt has become much easier and cheaper to keep track of how devices are used outside the office and enforce best practices in security. For instance, you can require employees to go through an additional authentication step if they want to access emails on their phone. Additionally, you may install a mobile device management software application that allows you to wipe hardware that was lost or stolen.
\r\nEveryone in your business might be fully aware of the dangers of human error, but staff members may still let their guard down when the pressure is high.
\r\nYou can use technology to flag situations where potential errors are likely to occur, e.g., large recipient lists, attachments containing credit card or Social Security numbers, senders using spoofed email addresses and weak or inexistent passwords.
\r\nWhile many cyberattacks originate from the outside, there is often one or more human errors at play that result in a data breach or financial loss. Business owners can combine awareness, device management, and technology to safeguard customers, employees, and other stakeholders.
\n","docType":"article","guid":"articles_98215ca0fa1c62f122141aee8920f7c7","lastModified":"2018-05-21T07:00:00.000Z","published":"2018-05-21T07:00:00.000Z","structuredData":null,"subtitle":"Most cyberattacks stem from internal human error, but companies can protect themselves.","template":"legacy","title":"5 Preventable Human Errors That Leave Your Company Vulnerable to a Cyberattack","type":"article","author":{"avatar":null,"bio":"I am head of marketing at SafeSend Software and a content strategy professional. I have a mix of experience in IT security, marketing, and entrepreneurship and enjoy sharing best practices that both individuals and businesses can follow to mitigate the risk of cyber threats and tackle data breaches.","name":"Alexandre François","image":null,"slug":null,"social":{"facebook":"","linkedin":"https://www.linkedin.com/in/alexandrefrancois1411/","twitter":null,"website":"https://www.safesendsoftware.com/"},"status":"enabled","title":null,"type":"New BDC Member","user":null},"breadcrumbs":null,"channels":{"primary":{"name":"Marketing","slug":"marketing"},"sub":{"name":"Business Intelligence","slug":"business-intelligence"}},"meta":{"robots":"index, follow","description":"Human errors are often the source of accidental data breaches and successful cyberattacks. Here are five common errors SMBs make and how to prevent them.","title":"Preventable Human Errors That Compromise Your Business - business.com"},"parsedContent":{"toc":[{"id":"1-sending-wrong-attachments","title":"1. Sending wrong attachments"},{"id":"2-adding-the-wrong-recipients-to-an-email","title":"2. Adding the wrong recipients to an email"},{"id":"3-creating-weak-passwords","title":"3. Creating weak passwords"},{"id":"4-lost-or-stolen-devices","title":"4. Lost or stolen devices"},{"id":"5-falling-into-a-phishing-trap","title":"5. Falling into a phishing trap"},{"id":"how-can-small-business-prevent-human-errors","title":"How can small business prevent human errors?"},{"id":"bottom-line","title":"Bottom line"}],"json":[{"component":"p","children":["Small business owners have a lot on their plate, including finding ways to protect their data and IT systems from hackers and scammers. Surprisingly, the most effective way to deal with malicious outsiders might well be to pay closer attention to what's happening on the inside of your business."]},{"component":"p","children":["A recent ComputerWeekly survey that polled security experts reported that 55 percent said their organization had suffered a cyberattack. Of those who said their company was victim to a cyberattack, ",{"component":"a","props":{"href":"https://www.computerweekly.com/news/450425184/Security-professionals-name-top-causes-of-breaches","rel":"nofollow"},"children":["84 percent "]},"could trace back the attack, at least in part, to internal human errors."]},{"component":"p","children":["Hence cybercriminals rarely succeed in executing fraud on their own and rely on deceitful tactics to dupe targets and push them to act irrationally. In other cases, the responsibility falls entirely on insiders' shoulders who inadvertently disclose confidential details in emails and other communications."]},{"component":"p","children":["In both cases, human errors may go unnoticed for weeks or months while the probability that disastrous consequences will occur – e.g., broken consumer trust, expensive lawsuits, and bankruptcy – is slowly and silently increasing."]},{"component":"p","children":["So what are the most common types of human errors taking place in small companies and how can business owners prevent them? Let's take a closer look."]},{"component":"h2","props":{"id":"1-sending-wrong-attachments"},"children":["1. Sending wrong attachments"]},{"component":"p","children":["What are the odds that sensitive attachments could fall into the wrong hands? Think about how many documents are repetitively sent, received, forwarded and stored by each department. Multiply this number by the average number of recipients in your contact list and annual work days."]},{"component":"p","children":["Over, let's say, a week or a month, imagine that the file has been confusingly renamed, edited, duplicated or replaced by something else and transmitted mistakenly. If you're lucky, an incorrectly attached document doesn't contain anything to worry about; if you're not fortunate, it could be the beginning of a very bad data breach. "]},{"component":"h2","props":{"id":"2-adding-the-wrong-recipients-to-an-email"},"children":["2. Adding the wrong recipients to an email"]},{"component":"p","children":["Autocomplete is a double-edged sword. The ability to select recipients after typing one or two characters saves time, but that functionality can also cause a user to include someone with a similar name and email address (e.g., jane.smith@abccompany.com, jim.smith@abccompany.com, and jane.smith@abdcompany.com) in an email with information they should not be privy to."]},{"component":"p","children":["What happens next is hard to predict. Unintended recipients may let you know that they should not be included and ask to be removed from the email thread. Or they could decide to say nothing and gather information for their own profit. "]},{"component":"h2","props":{"id":"3-creating-weak-passwords"},"children":["3. Creating weak passwords"]},{"component":"p","children":["Have you ever felt like it would be easier to use the same password everywhere? Likewise, your employees might do this for convenience."]},{"component":"p","children":["It represents a golden opportunity for cybercriminals who can take advantage of poor password-setting and resetting practices to break into IT systems, steal data and conduct fraud. And it works: 81 percent of hacking attacks performed are due to stolen and/or weak passwords according to Verizon's ",{"component":"a","props":{"href":"https://www.verizondigitalmedia.com/blog/2017/07/2017-verizon-data-breach-investigations-report/","rel":"nofollow"},"children":["2017 Data Breach Investigations Report"]},". "]},{"component":"h2","props":{"id":"4-lost-or-stolen-devices"},"children":["4. Lost or stolen devices"]},{"component":"p","children":["Laptops, smartphones, and BYOD initiatives have empowered today's workforce to be increasingly mobile. That's great for small business owners who can then reduce office and administrative costs while providing employees with the flexibility to work offsite."]},{"component":"p","children":["However, this creates potential risks for both data and hardware from a cybersecurity standpoint. A member of your staff may, for example, leave his or her devices unattended while quickly getting lunch or a coffee, offering a window of opportunity for cybercriminals to strike. "]},{"component":"h2","props":{"id":"5-falling-into-a-phishing-trap"},"children":["5. Falling into a phishing trap"]},{"component":"p","children":["Is it still even possible to spot fraudulent emails nowadays? ",{"component":"a","props":{"href":"https://www.prnewswire.com/news-releases/2017-ponemon-institute-study-finds-smbs-are-a-huge-target-for-hackers-300521423.html","rel":"nofollow"},"children":["Forty-eight percent of small businesses"]}," report being the victim of phishing or social engineering scams in 2017, and hackers always seem to be one step ahead. As a result, employees are prone to make a cybersecurity faux pas – downloading and opening a malicious attachment, clicking on a suspicious URL or not checking for spoofed email addresses and inadvertently revealing data."]},{"component":"h2","props":{"id":"how-can-small-business-prevent-human-errors"},"children":["How can small business prevent human errors?"]},{"component":"p","children":["Before addressing solutions, let's examine the circumstances in which human errors are most likely to happen. These include:"]},{"component":"ul","children":[{"component":"li","children":["Stressful situations, e.g., when a deadline is approaching or after prolonged periods of mental strain"]},{"component":"li","children":["Multitasking; employees with multiple job responsibilities may get overwhelmed faster"]},{"component":"li","children":["Lack of awareness about the dangers of cyberthreats and how to identify and stop them"]},{"component":"li","children":["A poor security tech stack, with IT security systems failing to detect abnormal activity "]}]},{"component":"h3","children":["Build a cybersecurity culture"]},{"component":"p","children":["All employees play a role in keeping small businesses safe, and they should be aware of it. Drafting security guidelines on acceptable and dangerous behaviors regarding, among other things, the use of passwords and what data can be stored on private devices is a good start."]},{"component":"p","children":["You may also find it useful to create an informal newsletter that contains some high-profile cases of human errors so your staff learns more about common mistakes."]},{"component":"h3","children":["Manage devices proactively"]},{"component":"p","children":["It has become much easier and cheaper to keep track of how devices are used outside the office and enforce best practices in security. For instance, you can require employees to go through an additional authentication step if they want to access emails on their phone. Additionally, you may install a mobile device management software application that allows you to wipe hardware that was lost or stolen."]},{"component":"h3","children":["Install error-prevention applications"]},{"component":"p","children":["Everyone in your business might be fully aware of the dangers of human error, but staff members may still let their guard down when the pressure is high."]},{"component":"p","children":["You can use technology to flag situations where potential errors are likely to occur, e.g., large recipient lists, attachments containing credit card or Social Security numbers, senders using spoofed email addresses and weak or inexistent passwords."]},{"component":"h2","props":{"id":"bottom-line"},"children":["Bottom line"]},{"component":"p","children":["While many cyberattacks originate from the outside, there is often one or more human errors at play that result in a data breach or financial loss. Business owners can combine awareness, device management, and technology to safeguard customers, employees, and other stakeholders."]}]},"resource":null,"sponsorship":null,"thumbnail":{"path":"https://staging.business.com/images/content/5b0/306f192a3a4090f8b4577/1500-0-","caption":"Mikhail Grachikov/Shutterstock","isBlurred":true},"bestPicks":null},"related":{"relatedArticles":[{"title":"Using Lean Strategies to Achieve Team Synergy and Efficiency","canonical":"https://www.business.com/articles/lean-strategies-team-efficiency/","slug":"lean-strategies-team-efficiency","thumbnail":"https://www.business.com/images/content/5be/480e49c658a51108b458c/1500-0-","dek":"Learn more about lean manufacturing strategies and how to implement them in your business.","lastModified":"2018-11-08T08:00:00Z","published":"2018-11-08T08:00:00Z","sponsored":false},{"title":"The Employer's GPS Tracking Solution Guide: Everything Your Business Needs to Know","canonical":"https://www.business.com/articles/gps-tracking-solution-checklist/","slug":"gps-tracking-solution-checklist","thumbnail":"https://www.business.com/images/content/5af/dbe5a51ee47e2538b4579/1500-0-","dek":"There are dozens of employee GPS tracking systems. Here's how to the choose the right one.","lastModified":"2018-05-17T07:00:00Z","published":"2018-05-17T07:00:00Z","sponsored":false},{"title":"From COVID-19 to Hurricane Season: Disaster Preparedness for Small Business","canonical":"https://www.business.com/articles/business-disaster-prep/","slug":"business-disaster-prep","thumbnail":"https://www.business.com/images/content/5e7/a495e5a215eb11d8b4569/1500-0-","dek":"Natural disasters – whether a hurricane, tornado or outbreak like COVID-19 – can have a disastrous effect on small businesses, but they don't have to. Here's how to weather a disaster successfully.","lastModified":"2020-03-25T15:19:00Z","published":"2018-09-26T07:00:00Z","sponsored":false},{"title":"What to Do if ICE Serves Your Business With a Form I-9 Audit","canonical":"https://www.business.com/articles/ice-serves-i-9-audit/","slug":"ice-serves-i-9-audit","thumbnail":"https://www.business.com/images/content/5e6/64def7b43740a2a8b456e/1500-0-","dek":"Make sure you're prepared should Immigration and Customs Enforcement come knocking.","lastModified":"2020-03-10T15:00:00Z","published":"2018-09-17T18:00:00Z","sponsored":false},{"title":"The Ultimate Small Business Guide to Credit Card Processing Fees","canonical":"https://www.business.com/articles/credit-card-processing-fees/","slug":"credit-card-processing-fees","thumbnail":"https://www.business.com/images/content/5d2/346547b437454698b4577/1500-0-","dek":"Learn about credit card processing fees and how to negotiate for lower costs.","lastModified":"2020-06-16T10:08:00Z","published":"2017-12-07T08:00:00Z","sponsored":false},{"title":"How to Hire for Your Business","canonical":"https://www.business.com/articles/how-to-staff-business/","slug":"how-to-staff-business","thumbnail":"https://www.business.com/images/content/5ea/9c8bb9c658aee018b456c/1500-0-","dek":"Sterling Staffing Solutions CEO Stephen Carter shares his tips on staffing your business.","lastModified":"2020-07-31T15:00:00Z","published":"2018-08-16T12:00:00Z","sponsored":false},{"title":"Prevent Your Employees From Falling Prey to These Common Holiday Online Scams","canonical":"https://www.business.com/articles/common-holiday-cybersecurity-scams/","slug":"common-holiday-cybersecurity-scams","thumbnail":"https://www.business.com/images/content/5c0/fecbd7b4374a3748b456b/1500-0-","dek":"'Tis the season, unfortunately, for online scams that pose a threat to your cybersecurity.","lastModified":"2018-12-11T22:00:00Z","published":"2018-12-11T22:00:00Z","sponsored":false},{"title":"PowerShell: Everything You Need to Know","canonical":"https://www.business.com/articles/powershell-everything-you-need-to-know/","slug":"powershell-everything-you-need-to-know","thumbnail":"https://www.business.com/images/content/5b8/998581039eb8f738b457b/1500-0-","dek":"What you need to know to unlock Microsoft PowerShell's full capabilities.","lastModified":"2018-09-05T17:00:00Z","published":"2018-09-05T17:00:00Z","sponsored":false},{"title":"Has Your Company Secured These Overlooked Attack Vectors?","canonical":"https://www.business.com/articles/3-overlooked-attack-vectors/","slug":"3-overlooked-attack-vectors","thumbnail":"https://www.business.com/images/content/5ac/649ee92a3a4d15e8b4582/1500-0-","dek":"Many don't consider these three common security weaknesses.","lastModified":"2018-04-05T07:00:00Z","published":"2018-04-05T07:00:00Z","sponsored":false},{"title":"Mobile Wallet Guide: Google Pay vs. Apple Pay vs. Samsung Pay - 08-05","canonical":"https://staging.business.com/articles/google-pay-vs-apple-pay-vs-samsung-pay/","slug":"google-pay-vs-apple-pay-vs-samsung-pay","thumbnail":"https://staging.business.com/images/content/5c5/afd7f54d26d67178b458d/1500-0-","dek":"Edit 07-24 - subtitle","lastModified":"2019-08-05T20:58:00Z","published":"2018-06-21T16:05:00Z","sponsored":null},{"title":"Is Internet Faxing Safe? How to Send and Receive Faxes Online Safely","canonical":"https://www.business.com/articles/is-internet-faxing-safe-how-to-send-and-receive-faxes-online-safely/","slug":"is-internet-faxing-safe-how-to-send-and-receive-faxes-online-safely","thumbnail":"https://www.business.com/images/content/5ed/50e995a215ed4778b456d/1500-0-","dek":"There's no need to fear a lack of security if your company decides to receive faxes online","lastModified":"2020-06-08T14:41:00Z","published":"2017-12-07T08:00:00Z","sponsored":false},{"title":"Drinking on the Job: Small Business Guide to Creating an Office Policy","canonical":"https://www.business.com/articles/set-office-alcohol-policy/","slug":"set-office-alcohol-policy","thumbnail":"https://www.business.com/images/content/5b6/a27bf92a3a414438b457f/1500-0-","dek":"Serving alcohol in the office can be a nice perk, but there's a lot to consider first.","lastModified":"2018-08-27T15:23:00Z","published":"2018-08-27T15:23:00Z","sponsored":false}],"relatedReviews":[{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5b99633151ee47a8528b4582/Call_center_bbernard.jpg","canonical":"https://staging.business.com/categories/call-center-services/","title":"The Best Call Center Services for 2021","dek":"Our team has compared the best call center services for 2021. See up-to-date reviews for the top-rated answering services.","slug":"call-center-services","lastModified":"2021-02-26T14:22:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df7b1b69c658a61728b4567/Answering_Service_scyther5_Getty.jpg","canonical":"https://staging.business.com/categories/best-answering-services/","title":"The Best Answering Services of 2021","dek":"Our teams have compared the best answering services for 2020. See up-to-date reviews and prices for these top-rated services.","slug":"best-answering-services","lastModified":"2021-02-26T14:18:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5d4c65367b43741a258b4572/Laptop_Sfio_Cracho.png","canonical":"https://staging.business.com/categories/crm-software/","title":"The Best CRM Software of 2021","dek":"Looking for the best CRM software? We have easy-to-read, expert unbiased reviews and feature comparisons of the best and cheapest programs.","slug":"crm-software","lastModified":"2021-02-24T14:09:00Z"}],"relatedSponsoredArticles":null}},"pageContext":{"displayModified":"2018-05-21T07:00:00.000Z","template":"legacy","title":"5 Preventable Human Errors That Leave Your Company Vulnerable to a Cyberattack","meta":{"robots":"index, follow"},"docType":"articles","slug":"preventable-human-errors","canonical":"https://staging.business.com/articles/preventable-human-errors/","skipTOC":false}},"staticQueryHashes":[]}