Your Hub

Login

Forgot password?

Register for ANZ Biz Hub

You'll get easy registration for workshops offered in your area.

Find out more

Six ways to help save your business from cybercrime print Print

  • 3 out of 5 stars
  • from 3 ratings

It's easy to think cybercrime and identity theft only happens to big business. It doesn't. Here are six ways to help save your business from cybercrime.

With the vast majority of businesses in New Zealand employing fewer than 5 staff, lifting awareness, improving education and taking real action to prevent these incidents is fundamental for the health of the small business sector.

Useful apps for business owners pic

While a start-up or SME will never be able to prevent theft 100 per cent of the time, it can make it as hard as possible for criminals to operate. This is important to ensure businesses don't lose their hard work and reputation.

There are many different types of cybercrime that directly affect small businesses, including but not limited to invoice duplication, email hijacking, malware and phishing.

Luckily, there are also some practical and helpful hints for small business owners to use to ensure they have these issues covered.

What you can do

Secure your documents

It can sound old school in the digital age, but mailboxes should have locks on them. In offices, make sure your documents are locked away when you are not around.

This includes things like cheque books (if you still have them) and extends beyond your banking documents to the not-so-obvious documents such as your tax information, employee personal information, passwords to your computers and payment terminals, suppliers' details, invoices and customer information.

When it's time to throw documents out, don't just chuck them in the bin. Shred all documents containing business and personal information.

Oversee staff and educate

Don't be an absent small business owner because you trust your staff totally. Trust is a great thing and fundamental to managing a great team - but you need to operate with an inquisitive nature. Get involved and understand what your staff are doing and, importantly, how they are going about it.

Regularly assess what your employees are accessing. Ask: what level of access they have to your bank accounts, both on and offline? Regularly reviewing invoices can help reduce the potential for issues.

Think like a big business

Think about the policies you have in place with your employees around internet security. What are the standards you are setting – and how do your staff know about them?

It's important to educate your staff as much as yourself about what the potential risks are. Ask how you are ensuring the segregation of critical duties in your business - for example, invoices should not be able to be raised and paid by the same staff member.
This also includes how you onboard staff, contractors and consultants. Mandating National Police checks are a good start but so are reference checks and asking professionals you deal with for their input.

Know who you are dealing with

It sounds so obvious but you need to know who you are getting into business with. This includes customers, suppliers, service providers, your bank and your employees.

A rhetorical question for small business owners: if you received an invoice that looked the same as the one the previous month except for the account number it was being paid to, would this be picked up in your business?

At ANZ, we see examples of fraud where a simple detail is missed - like an email address that has changed. How do you know the simple details are not being missed in your business?

Before dealing with a new supplier, customer or setting up a service arrangement, do some checks and ask questions. You can check the business entity you are planning to deal with is registered and the NZ Business Number is valid (you can check this at business.govt.nz ). You can ask for references from your accountant, your banker, your legal adviser or an industry association. Seek out opinions.

You can do an online search. It's amazing what you can find on social media these days, and don’t forget to review the news section of search results too. Importantly, ask lots of questions. If something doesn't seem right, it probably isn't.

Undertake regular checks and balances

Firstly, passwords on post-it notes stuck to your computer does not equal security. Keep your systems safe by having up-to-date security software, check you are only using trusted sites for purchasing items and never open emails you're not sure about.

Scan all the files on your computer periodically including incoming and outgoing emails. If the technology side is too complex for you get the experts in for real advice.

On business accounts, don't leave bank reconciling to the end of the tax year. Make it a regular part of your business. Be alert for any unusual bank transactions or missing mail. If you see a transaction you cannot explain, report it to your bank.

Have a think about running unannounced audits internally every now and then to make sure your business is being supported the way you expect it to be.

Bank security and software

Have you got simple banking security in place? Ask your bank as to what is available. You should think of your banking security no differently to what you do with your document security or their office software.

There are many complex security tools and systems banks use to protect customers, including encryption, voice biometrics, data matching, system lock outs and time outs and other measures.

But small businesses themselves play an important role in stopping identity crime. It is critical to make sure that regardless of what bank you are with you check that you have all available security they offer.

Summary

Cybercrime and identity theft is just as relevant for small business as it is anywhere in the market. The aim is to make sure your business is not the most attractive target.

If you think of a row of houses on a street, the ones with security doors, alarms and dogs are less attractive to homes where the keys are left in the front door.

Remember, it's important to trust but also important to verify. Know your staff, your customers, other businesses you rely on and ask lots of questions if you are still not sure.

 

Interested in learning more? Read our ‘tips for preventing fraud’ and ‘is your business at risk from viruses’ articles.

This story originally appeared on BlueNotes.com.au.

Rate this article:

  • 12345 Click on the stars to rate

Share this: