Running a business today means having a visible web presence. But, although your website exists in the digital realm, there are still real-world consequences of not implementing basic online security strategies. Courtesy of Nebulas Website Design, here are a few of the most common mistakes that turn your website from an asset to a liability.
Unsecured Hosting
Web hosting is essentially the physical real estate your website occupies on a server before being routed to people’s computers and devices on the web. There are three main types of hosting: shared, private, and virtual private. A shared server contains information and files from the hosts’ other clients. This is the least secure. A private server is a single unit owned or leased by your business alone. A more affordable solution that puts the best of both worlds is a virtual private server. This gives you dedicated digital assets, and your secure site can be scaled when you’re ready.
Weak Passwords
Passwords should contain a combination of letters, numbers, and characters. Ensure that your staff and customers can’t use single words or a string of consecutive numbers, both of which are easy to crack using a brute force attack. It’s wise to stay up-to-date on current best practices for password security.
Not Using Password-Protected Files
Speaking of passwords, it’s not just your site’s users that need passwords. If you routinely share documents online, make sure that the sensitive information contained within them is password-protected. One of the best tools for this is using a password-protected PDF. These are often difficult to edit without a PDF editor. An editor enables you to update text, as well as add highlights and notes so you can keep your password information current.
Failure to Implement a Recovery Plan
You know the saying, “failure to plan is planning to fail.” Never is this more true than when it comes to your digital world. Protect your business from cyberattacks now by having a recovery plan in place so that you are not scrambling to protect or regain your assets once a breach is discovered. Having a strategy in place to recover your digital assets, such as data, means first identifying which apps and processes are your top priority. Make sure that key individuals are aware of their roles in this process and the timeline by which recovery is expected. A good rule of thumb is to maintain a 3-2-1 backup plan, which means three copies of your data on two different mediums, one copy of which is at a protected off-site location.
Outdated Software
While you might think you’re saving money by using five-year-old software, there’s a good chance that this is anything but a bargain. Most major software providers do offer fixes and patches that eliminate known vulnerabilities. However, the older software gets, the less likely it is to be supported. Evaluate your software programs annually to decide when it’s time for an upgrade. Remember, cybercrime is on the rise, and it’s up to you to protect your business, both in the digital realm and in the real world.
Let All of Your Employees Have Free Access
Just as not all employees need access to every area and a building, your website should be cordoned off so that only your most trusted staff has access to every front and backend page. Ninja Forms offers a wealth of information on WordPress plug-ins that restrict user access.
Your Employees are Unaware of Cybersecurity Threats
Perhaps the most glaring mistake that many businesses make is not implementing organisation-wide cybersecurity education. This should be not only a part of your onboarding process but also periodically mandatory. There are plenty of online training programs available, or you could partner with a local IT firm to offer in-house classes to teach about everything from creating a strong password to spotting phishing schemes.
Your website is an important part of your business. Protect it just as you do your front doors. While no single action can guarantee your website will always be safe, sidestepping common mistakes, such as not using strong passwords and using outdated software, will strengthen your online security and put you in a better position to react when an incident occurs.
Established in July 2003, Nebulas Website Design has gone from strength to strength completing many projects for a wide range of customers. Set up and managed by James Isles BSc our client base has grown steadily since its inception. Please see our web design portfolio for a comprehensive list of our previous work.
