4 Cybersecurity Best Practices for Your Organization Protect your company from the growing concern of data breaches.

By Eric Basu

Opinions expressed by Entrepreneur contributors are their own.

Shutterstock | Enhanced by Entrepreneur

A data breach can happen to any organization, and it's a growing concern among companies both large and small. According to this cyberattack infographic, an IBM study revealed that the average consolidated cost of a data breach is approximately $3.8 million, a 23 percent increase from 2013. According to that same graphic, the Identity Theft Resource Center found that approximately 22 percent of breaches are due to insider theft, and 12 percent are simply a matter of accidental exposure.

You can keep your company and your employees safe from these dangerous data breaches by ensuring that employees are aware of a few tried-and-true data security best practices. Here are some of the most important ones:

Related: 8 mostly free best practices for Tightening Internal Data Security

1. Practice good access control.

Without good access control protocols, company information remains at risk. Each organization should have a firm policy on password strength and password update policies. Convey the importance of keeping those passwords private, and make sure your employees adhere to minimum password requirements.

Employees should also lock their computers when they are away from their desks. If you have employees accessing your network remotely, make sure that you know exactly when they are doing so, and why.

2. Avoid scams.

A good email filter may be the first defense against phishing scams, but it should not be the last. Educate employees on what phishy emails look like, and make sure they know which ones to avoid opening. Remind employees to never open attachments from unknown senders and to never provide sensitive business data to unfamiliar individuals outside the company. Spell out what information is and is not acceptable to divulge over the phone, in an email, or in-person to those of unfamiliar status within the organization and outside the company.

Related: Protecting Your Business From the Phishing Scam

3. Implement hardware and software restrictions.

It's important to place limitations on the types of installations and downloads that employees are allowed to perform on company computers. Employees should not be allowed to install or download any software on company technology that is not previously reviewed and authorized. Explain to your employees the importance of avoiding freeware and shareware and how this type of software can become a threat. What may appear to be an innocuous download for work purposes can easily introduce a virus to your network and expose sensitive business data.

Related: How to Create Security Awareness at Your Company

4. Manage mobile devices.

Mobile devices pose additional risks, as data can be easily exposed outside of the office. Off-site devices can be subject to mobile malware, eavesdropping, unauthorized access, theft and loss. Set expectations with employees as to their mobile conduct when accessing company data while on the road. If you allow employees to connect personal mobile devices to company Wi-Fi connections, make sure those connections are separate from the general organization network.

Almost half of American companies experienced some sort of data breach of in 2013. It doesn't take an expert hacker to view, take possession of, or exploit personal, intellectual or financial data. In fact, according to a Forrester Research report, most mobile data breaches are caused by employee negligence.

Security training can be a challenge without explaining the importance of security measures and adequately communicating how these measures effect the company and the employee. By implementing a few best practices and making sure that data security is of principal concern to everyone within your organization, you can keep your employees educated and your sensitive company data safe from prying eyes.

Eric Basu

CEO of Sentek Global

Eric Basu is the CEO of Sentek Global, a provider of government and commercial cybersecurity and information technology solutions. 

Editor's Pick

Related Topics

Business News

'Please Fix This': Elon Musk Frantically Emails Employees During Livestream Glitch

Musk attempted to livestream his visit to the U.S.-Mexico border.

Business News

Costco Isn't Facing Devastating Surges in Theft Like Target and Walmart — and the Reason Is Very Simple

The retailer's CFO revealed its strategy during a fourth-quarter-earnings call.

Business News

These NYC Roommates Created a Fake Restaurant and Accidentally Garnered a 2,000-Person Waitlist — So They Opened a Pop-up for Real.

The Gen Z'ers dubbed their apartment "Mehran's Steak House" on Google Maps during the pandemic.

Business News

Video: Mass Flooding Takes Over NYC Streets, Subways and Parks

All of New York City is under a state of emergency.

Branding

Want to Improve Your Brand's Storytelling? Shift Your POV to Tell a Better Narrative. Here's How.

In a crowded digital media environment of voluntary engagement, brand storytelling isn't enough to grab attention. You must approach the story from the right perspective — your customer's.

Business News

Netflix Is Mailing Out Its Last DVD Today. I Got the Very First One 25 Years Ago.

Netflix co-founder and founding CEO Marc Randolph tells the story of the first Netflix DVD that got sent in the mail — and one he wished never went out the door.