The Australian Cyber Security Centre (ACSC) has steps you can take to protect your business and staff from cyber threats. This includes information on:

• turning on multi-factor authentication
• securing your accounts
• updating software
• backing up information 
• protecting your business data
• educating employees.

A cyber security policy helps your staff to understand their responsibilities and what is acceptable when they use or share:

• data
• computers and devices
• emails
• internet sites.

It’s vital that you keep your customers information safe. If you lose or compromise their information it will damage your business reputation, and you could face legal consequences.

Make sure your business:

• invests in and provides a secure online environment for transactions
• secures any personal customer information that it stores.

If you take payments online, find out what your payment gateway provider can do to prevent online payment fraud.

There are laws about what you can do with any personal information you collect from your customers. Be aware of the Australian Privacy Principles (APPs) and have a clear, up-to-date privacy policy. If your business is online, it’s a good idea to display your privacy policy on your website.

Consider cyber insurance to protect your business. The cost of dealing with a cyber-attack can be much more than just repairing databases, strengthening security or replacing laptops. Cyber liability insurance cover can help your business with the costs of recovering from an attack. Like all insurance policies, it is very important your business understands what it is covered for.

Keep up with the latest scams and security risks to your business. Sign up for the ACSC Partnership Program for access to up-to-date information on cyber security issues and how to deal with them.

Australian Cyber Security Hotline

If you want to talk to someone about cyber security, the ACSC has a 24/7 Cyber Security Hotline.

The hotline provides over the phone support to both prepare for and respond to cyber incidents. Learn more on the ACSC website or call 1300 CYBER1.