Protect your business online

Cyber attacks threaten all businesses. A recent government survey found that many organisations, including small businesses and charities, have experienced cyber incidents. Larger businesses face more frequent attacks, but any business without proper defences can be vulnerable.

How to protect your business online

The National Cyber Security Centre (NCSC) recommends these actions:

• Back up data regularly. Keep copies of your data off-site and test that backups work.
• Update software promptly. Apply security patches on all devices used in your businesses. Enable auto-updates where possible.
• Use anti-virus and anti-malware software. Keep it up to date.
• Choose strong, unique passwords. Change them regularly and use two-factor authentication.
• Encrypt sensitive data. Never send passwords or sensitive details via unencrypted email.
• Be cautious of phishing and ransomware. Avoid clicking on suspicious links in emails or social media.
• Use firewalls and keep router firmware updated.
• Secure Wi-Fi with encryption (e.g. WPA2). Change Wi-Fi passwords regularly.
• Use a VPN when connecting over public or external networks.

For detailed guidance, check the NCSC's cyber security advice for small and medium-sized businesses.

Useful NCSC tools and services for businesses

You can access a range of free resources from the NCSC to help protect your business. These include:

• Check your cyber security service: Quickly find vulnerabilities in your online systems.
• Cyber Action Plan: Get a personalised plan with practical steps to improve your security.
• Small Business Guide: Simple, low-cost advice for small organisations.
• Free Cyber Security Training: Short, easy-to-use online training modules for staff on recognising cyber threats and protecting your business.

You can also stay informed of any emerging threats by registering for the NCSC's Early Warning Service.

If you experience a cyber attack, report it immediately to the NCSC's 24/7 Incident Management team at report.ncsc.gov.uk.