{"id":4893,"date":"2025-12-18T19:10:39","date_gmt":"2025-12-18T19:10:39","guid":{"rendered":"https:\/\/microvibenews.com\/?p=4893"},"modified":"2025-12-18T19:10:39","modified_gmt":"2025-12-18T19:10:39","slug":"what-smes-need-to-know-daily-business-magazine","status":"publish","type":"post","link":"https:\/\/microvibenews.com\/?p=4893","title":{"rendered":"What SMEs need to know \u2013 Daily Business Magazine"},"content":{"rendered":"

<\/p>\n

\n
\n
\"Scott<\/figure>\n<\/div>\n

There are some key steps that smaller firms can take to reduce their exposure to cybercrime, writes SCOTT MONCUR<\/strong><\/h4>\n
\n

Cyber risk is one of the most\u00a0significant threats\u00a0facing UK organisations, affecting nearly every sector and type of organisation. \u00a0According to data from the National Cyber Security Centre, (NCSC), part of GCHQ, the UK experienced 204 \u201cnationally significant\u201d cyber incidents in the 12 months to August this year, of which 18 were classed as \u201chighly significant\u201d. This was a 50% year-on-year increase.<\/p>\n

In response to a series of\u00a0high-profile cyberattacks this year, the UK Government last month introduced the\u00a0Cyber Security and Resilience (Network and Information Systems) Bill, aimed at strengthening cyber defences across the UK\u2019s critical sectors.<\/p>\n

The Bill singles out those service providers which are so essential that their disruption affects business and personal lives.\u00a0 Regulatory focus will be expanded beyond transport, energy and the NHS, to include data centres, managed service providers, large load controllers (the ones that look after our smart devices), and designated critical suppliers.<\/p>\n

This legislation is welcome, but for SMEs there is a more immediate need to reduce risk and financial exposure, protect customers, and to win work by demonstrating compliance and security across systems. \u201cResilience by design\u201d becomes both a key watchword and a call to action for these businesses.<\/p>\n

SMEs should look to embed resilience by design across the organisation, in product and service development, operating models, back-office functions, people, infrastructure, IT networks, and training programmes. And to implement practical controls to reduce cyber risk such as:<\/p>\n

    \n
  • Immutable backups that cannot be modified, deleted, or overwritten.<\/li>\n
  • Defined retention and protection so backups remain secure for the required period.<\/li>\n
  • Data integrity measures to detect and prevent corruption or tampering.<\/li>\n
  • Operational and training alignment so staff, processes, and technology work together to prevent, detect, and recover from incidents.<\/li>\n<\/ul>\n

    Up to date information is vital for the effective and efficient running of a business, from the perspective of the business itself and its customers, and if the business\u2019s operational cycle is measured in seconds, so too must be the back-up and recovery plans.<\/p>\n

    Any business which is on top of these issues will test disaster recovery plans, strengthen technical controls, and prepare for AI threats.\u00a0<\/p>\n

    If your business is looking for a summary action plan, the following discussion and action points should be on the agenda for your next board meeting (and if your business is not looking for a summary action plan \u2013 it really should be):<\/p>\n

      \n
    • Assess your risk: when did you last look at your cyber assessment framework to identify your specific risks and implement appropriate cybersecurity measures?<\/li>\n
    • Assess management information:\u00a0 is it sufficient to demonstrate how monitoring activity prevents cybersecurity events, and to evidence the range of any near misses and the speed at which those are brought to the management teams\u2019 attention? The ideal time frame being within 24 hours of first becoming aware that an incident has occurred\/is occurring, with a full report required within 72 hours.<\/li>\n
    • Create an incident response action plan: define roles, reporting timelines, and communication protocols.<\/li>\n
    • Train your team: include regular phishing simulations and awareness sessions.<\/li>\n
    • Engage with your supply chain: ensure partners meet minimum security standards.<\/li>\n<\/ul>\n

      As the NCSC has noted, cybersecurity must be embedded in governance; senior individuals within a business should be assigned responsibility for specific issues and risks, and they should report regularly to the board.<\/p>\n

      The NCSC\u2019s message is clear, cyber threats are escalating in scale, sophistication and impact. For SMEs, cybersecurity can no longer be a technical afterthought; it is now a board-level priority that directly affects business continuity, reputation, and financial stability.<\/p>\n

      Put simply, resilience is not optional, but essential for survival and growth. So, take all appropriate steps now, including professional advice, and look forward into a more cyber-secure business future.<\/p>\n

      Scott Moncur is head of financial services & sustainable development at Vialex<\/em><\/p>\n

      \n

      Like this:<\/h3>\n

      Like<\/span><\/span> Loading…<\/span><\/p>\n

      <\/div>\n

      Related<\/em><\/h3>\n<\/p>\n

      \n<\/div>\n