Skip to main content
SolarWinds MSP
  • Login
  • Support
  • Partnerships
    • Solution Provider Program
    • Technology Alliance Program
SolarWinds MSP
  • Products
    • Remote Monitoring & Management Protect your customers with a platform from the global leader in monitoring and management.
    • Backup & Recovery Manage backup for servers, workstations, applications, and business documents from one cloud-based dashboard.
    • Mail Protection & Archiving Protect users from email threats and downtime.
    • Password Management Easily adopt and demonstrate best practice password and documentation management workflows.
      • Passportal Demo
    • PSA & Ticketing Manage ticketing, reporting, and billing to increase helpdesk efficiency.
    • Threat Monitoring Detect, respond to, and report on threats across your managed networks.
    • Remote Support Help support customers and their devices with remote support tools designed to be fast and powerful.
  • Solutions

    I'm looking to...

    I'm looking for...

    • Drive Efficiency with Automation
    • Manage my MSP Business More Efficiently
    • Manage my IT Department More Efficiently
    • Layered Security
    • Data-Driven Insights
    • Cross-Platform Support
  • Resources

    Webcasts & Events

    Resource Center

    • Ask the N-Central Experts
    • Daily Live Demos
    • Backup Foundations Training
    • RMM Foundations Training
    • Upcoming Events
    • Upcoming Webcasts
    • Resource Library
      • Case Studies
      • Product Information
      • eBooks
      • White Papers
      • Infographics
    • SolarWinds MSP Free Tools
    • GDPR Resource Center
    • Security Resource Center
    • MSP Institute Webinar Series
    • MSP Advice Project
  • About
    • Contact
    • Worldwide sales and support
    • Careers
    • Awards and Recognition
    • Get A Quote
    • Newsroom
      • Press Releases
      • In The News
      • Media Contacts
    • Leadership Team
    • Legal
      • Cookie Policy
      • Privacy Notice
      • Software Services Agreement
      • Terms of Use
      • Backup Fair Use Policy
    • Security
      • SolarWinds Security Statement
      • Vendor Data Protection Requirements
    • Support
  • Blog
  • Contact Sales
    • Get A Quote
    • General Inquiry
  • TRY NOW
    • SolarWinds RMM
    • SolarWinds Backup
    • MSP Manager
    • SolarWinds Passportal
    • SolarWinds Mail Assure
    • SolarWinds Risk Intelligence
    • SolarWinds Take Control
Filter Blogs
  • Filter by:
  • MSP Business
    • Automation
    • Backup & Disaster Recovery
    • Security-series
    • Best Practices
    • Business
    • Business Growth
    • Business Risk
    • Cloud Computing
    • Customer Service
    • Cybersecurity
    • Cybersecurity Awareness Month
    • Data
    • GDPR
    • Internet of Things
    • IT Support
    • ITSM
    • LOGICcards
    • Machine Learning
    • Mail
    • Managed Services
    • Marketing
    • Mobile
    • Networking
    • Operations
    • Podcast
    • Product
    • PSA
    • Remote Management
    • Research & Trends
    • Risk Intelligence
    • Security
    • Security Vlog
    • Service Desk
    • Services & Support
    • Tips & Advice
    • Training
Home Blog MSP Business Tips & Advice What Do Small Businesses Need to Be Thinking about in 2018?
Tips & Advice

What Do Small Businesses Need to Be Thinking about in 2018?

By Rick Miller
2 January, 2018

2018 Is the Year SMBs Become the Primary Target of Cyberattacks

primary target.jpgCybercriminals only have a few reasons to ply their trade: financial and political gain, disruption, destruction, revenge, and notoriety in their community. According to the Small Business Association, there are 28.8 million SMBs in the US, and they employee 56.8 million employees. SMBs defined as less than 1,000 employees comprise 99.7% of all US businesses.

It is important to remember cybercrime and cybercriminals have been learning and perfecting their craft over the years. They have been organizing and discovering that cybercriminal enterprise is profitable and low-risk. They have been building full-scale organizational infrastructure, including HR departments, call centers, C-suite, finance departments, and the like. They have goals, quotas, P&L statements, business plans, and management structure to ensure success. They are recruiting to expand their reach, they are setting up secure financial payment systems, and they are reselling malicious code and ransomware kits to anyone that would seek to use technology to extort money and data for profit.

Follow the Money

Who is the target? Is it more profitable and less risky to attack a Fortune 500® company or to attack 1,000 SMBs? To answer this, you need to weigh the risk against the reward. First, the Fortune 500 company is likely to have advanced security, the latest in security information and event management (SIEM) tools, a security operations center (SOC), highly trained engineers, and a top-10 cybersecurity company to back them up. Attacking a Fortune 500 or government installation is far more difficult, holds increased risk and less profit. 

On the other hand, the SMB market is a somewhat risk-free cash cow. A fairly inexperienced hacker can attack a large number of SMBs with little risk, higher payment return, less law enforcement interference, and almost no chance of retaliation. Why? Because SMBs are not prepared and in many cases apathetic. It will never happen to me—that’s something that happens to the other guy. Even with the best-known statistic in cybersecurity staring them in the face—60% of all SMBs that suffer a breach are out of business within six months—they still have not included cybersecurity protection in their budgets. 

SMBs are low-hanging fruit to cybercriminals. Expect to see a dramatic increase in SMB attacks of all types in 2018. 

 

2018 Is the Year of Cybersecurity Awareness Training

SecurityAwareness.jpgSmall- to medium-sized businesses can reduce their risk significantly by participating in cybersecurity awareness training. Statistics show that 90% of all breaches are caused by human error. Investing in a security awareness training program is one of the most affordable and effective ways to reduce risk.

The days of gathering groups of employees for bi-annual trainings are over. New cybersecurity training platforms include online, module-based courses specifically designed for various industries. The training is continuous, using a train/phish/analyze cycle that significantly reduces careless clicks that can lead to breaches. 

 

2018 Is the Year SMBs Review and Implement Backup Strategies

backup.jpgAs SMBs become the primary target for cybercriminals, they must begin to utilize backups for protection. According to Smallbiztrends.com, 58% of SMBs are not prepared for data loss, and 60% that lose data will be out of business within six months. 

The good news is that those preparing for data loss are doing it correctly. Again from Smallbiztrends.com, 84% of those currently using cloud backup use both online and onsite cloud backups and 68% of those are testing their backup systems weekly or monthly. 

2018 is the year SMBs will begin to recognize the value of a strategic backup plan. Backing up your data has become very affordable and will offer peace of mind unlike any other strategy you can implement. 

Here are a few thoughts to get you started on your way to developing a solid backup plan.

There are a number of ways you can create backups: you can make copies on your desktop, upload to the cloud, save to an external hard drive, or any combination of these. The details of backing up data is where the complexity arises.  

You have to make some decisions about your business with regard to backups, such as: cost, how long data is unavailable, how much data you are willing to tolerate losing in the case of a disaster, what data is necessary to backup, etc. 

Here are some basic decisions you have to make about backups:

  • Do you want onsite or offsite backups?

    If you have onsite backups, recovery can be faster, and backups can be very inexpensive. If you are relying on offsite backups, the cost of backups will rise, but you will have more security in the case of threats like fires and natural disasters. 

  • Do you want physical, cloud, or a hybrid?

    In other words, do you wish to have external hard drives or servers, do you want to automatically back your data up to the cloud, or a combination of both? Check out the backup rule of 3.

  • How fast do you want to be able to access your data?
  • How long do you want to store your data?

Some industries require you to store data anywhere from three to 18 (or more) years. If you are storing data for many years, you will need to have a plan in place to store that data. And you’ll want to make sure that it is protected and stored in a climate-controlled environment.

Most businesses need a plan for unexpected situations because, unfortunately, those situations are likely to arise. By being diligent about backing up your data and keeping proper copies, you will help ensure you are covered in almost any event. And you’ll help keep yourself in business while remaining profitable.  

 

2018 Is the Year SMBs Review Their Antivirus Protection

Antivirus (AV) solutions have evolved through the years. As the threat landscape has grown and changed, so have the ways we use AV to protect us. If you are an SMB in 2018, it is time for you to review your AV solution. AV technology has changed dramatically to meet the needs of today’s threats. 

According to Securelist.com, today’s threats are more complex than ever before. Much of today’s malicious code—and this includes a wide array of Trojans, exploits, rootkits, phishing scams, spam, and spyware as well as classic viruses and worms—is purpose-built to hijack users’ machines to make money illegally. “The connectivity provided by the internet means attacks can be launched on victim machines very quickly, as widely or selectively as malware authors, and the criminal underground that sponsors them, require.” Malicious code may be embedded in email, injected into fake software packs, or placed on web pages for download by a Trojan installed on an infected machine. 

For an SMB trying to do business and stay safe from both inside and outside threats, today’s AV tools can be complicated.

Here are a few questions to contemplate when considering your AV for 2018:

  • Determine your priorities. Look for all-inclusive protection. AV is also about firewall protection, ransomware protection, and web protection.
  • Digitalcitizen.life suggests that SMBs think in terms of layers of protection. You should consider all of the following threats: viruses, Trojans, worms, spyware, rootkits, adware, ransomware, network attacks, and web threats.
  • Consider how reliable the protection is—check various testing labs for reviews.
  • Make sure the protection you choose doesn’t cause performance issues.
  • Make sure your AV has high-performance malware scanning.
  • Make sure your AV and malware protection is easy to navigate and is user-friendly.
  • Be cost-aware—watch out for free protection. It is not as robust as you will need.
  • When considering protection, consider reputation and customer reviews.

 

2018 Is the Year SMBs Start to Build a Culture of Security

2018.jpg2018 is the year to begin building a culture of security in your business. As users of technology in the 21st century, we must arm ourselves against those that would do us harm. Arming ourselves means taking responsibility for our digital lives. It means using our collective intelligence as a weapon to defeat those that would take our freedom by stealing the integrity of our information and the lifeblood of our businesses.  

Building a culture of security is a top-down process that includes everyone—from your board of directors to your shipping department. It requires security conversations, training, knowledge, teamwork, and understanding. It is a “stop and think instinctively” challenge. Building a culture of security in 2018 will pay untold dividends for the future. 

[Check out the blog that we just wrote about this—Cybersecurity is a Community Responsibility]

Finally, here is your catch phrase for 2018: “If you’re connected, you must be protected!” Remember it; it could save your business.

 

Additional reading 

Five Tips for Creating a Meaningful Security Awareness Training Program

SMBS Are At Higher Risk of Cybercrime

Choosing the Right Backup Solution Amidst the Noise

Antivirus vs Antivirus

 

Rick Miller is COO and Partner of The Tek, an MSSP specializing in risk assessment, risk mitigation, protection, and education to SMBs. Rick is a long-term veteran in the IT industry. His success has been founded in propelling start-ups and turnarounds to success and profitability. His experience has helped to grow multiple companies from start-up to profitability.

  

© 2017 SolarWinds MSP UK Ltd. All rights reserved.

 

You might also like...

Tips & Advice

SharePoint Document Best Practices

Backup & Disaster Recovery

How to Sell Backup in 3 Easy Steps

Tips & Advice

File Versioning Best Practices for Windows

MSP Business

A guide to cold calling for MSPs

MSP Business

Mac Terms to Know When Providing Mac Support

MSP Business

The CEO loves his iPad - this is why you should love it too!

Want to stay up to date?

Get the latest MSP tips, tricks, and ideas sent to your inbox each week.

Loading form....

If the form does not load in a few seconds, it is probably because your browser is using Tracking Protection. This is either an Ad Blocker plug-in or your browser is in private mode. Please allow tracking on this page to request a subscription.

Note: Firefox users may see a shield icon to the left of the URL in the address bar. Click on this to disable tracking protection for this session/site

Recent Posts

  • Why Properly Documenting Non-Technical Conversations and Decisions is Essential
  • Password Stealing 101: Common Methods and Defenses
  • Imaging vs. Cloning: Key Differences
  • Should You Give Your Clients Gifts Over the Holiday Season?
  • DDoS—What You Need to Know

Categories:

  • Business Growth (420)
  • Security (345)
  • Tips & Advice (334)
  • Managed Services (303)
  • Best Practices (247)
  • Business (214)
  • Cybersecurity (194)
  • Backup & Disaster Recovery (116)
  • IT Support (109)
  • ITSM (78)
  • Data (64)
  • Product (63)
  • Cloud Computing (61)
  • Marketing (57)
  • Mail (53)
  • Networking (34)
  • Risk Intelligence (31)
  • Customer Service (29)
  • Remote Management (27)
  • Automation (19)
  • GDPR (17)
  • Services & Support (16)
  • Operations (16)
  • Service Desk (15)
  • Research & Trends (14)
  • PSA (12)
  • Business Risk (12)
  • Internet of Things (11)
  • Mobile (11)
  • Training (11)
  • Security-series (8)
  • Cybersecurity Awareness Month (6)
  • LOGICcards (4)
  • Machine Learning (3)
Show moreless
SolarWinds MSP

© SolarWinds MSP Canada ULC and SolarWinds MSP UK Ltd.
All Rights Reserved.

Products

  • SolarWinds RMM
  • SolarWinds N-central
  • SolarWinds Backup
  • SolarWinds MSP Manager
  • SolarWinds Mail Assure
  • SolarWinds Risk Intelligence
  • SolarWinds Take Control
  • SolarWinds Threat Monitor
  • SolarWinds Passportal

Solutions

  • How We Help MSPs
  • Layered Security
  • Cross-Platform Support
  • Data-Driven Insights

About

  • About Us
  • Careers
  • Newsroom
  • Leadership Team
  • Upcoming Events
  • Privacy
  • Legal
  • Security
  • Subscription Preferences
  • SolarWinds

Support

  • SolarWinds RMM
  • Solarwinds N-central
  • SolarWinds Backup
  • SolarWinds Mail Assure
  • SolarWinds Take Control
  • SolarWinds MSP Manager
  • Solarwinds Risk Intelligence
  • Solarwinds Threat Monitor
  • SolarWinds Passportal
  • SolarWinds Take Control Downloads
  • Backup & Recovery Downloads
  • Sitemap
  • Service Status