Get All Access for $5/mo

4 Cybersecurity Best Practices for Your Organization Protect your company from the growing concern of data breaches.

By Eric Basu Edited by Dan Bova

Opinions expressed by Entrepreneur contributors are their own.

Shutterstock | Enhanced by Entrepreneur

A data breach can happen to any organization, and it's a growing concern among companies both large and small. According to this cyberattack infographic, an IBM study revealed that the average consolidated cost of a data breach is approximately $3.8 million, a 23 percent increase from 2013. According to that same graphic, the Identity Theft Resource Center found that approximately 22 percent of breaches are due to insider theft, and 12 percent are simply a matter of accidental exposure.

You can keep your company and your employees safe from these dangerous data breaches by ensuring that employees are aware of a few tried-and-true data security best practices. Here are some of the most important ones:

Related: 8 mostly free best practices for Tightening Internal Data Security

1. Practice good access control.

Without good access control protocols, company information remains at risk. Each organization should have a firm policy on password strength and password update policies. Convey the importance of keeping those passwords private, and make sure your employees adhere to minimum password requirements.

Employees should also lock their computers when they are away from their desks. If you have employees accessing your network remotely, make sure that you know exactly when they are doing so, and why.

2. Avoid scams.

A good email filter may be the first defense against phishing scams, but it should not be the last. Educate employees on what phishy emails look like, and make sure they know which ones to avoid opening. Remind employees to never open attachments from unknown senders and to never provide sensitive business data to unfamiliar individuals outside the company. Spell out what information is and is not acceptable to divulge over the phone, in an email, or in-person to those of unfamiliar status within the organization and outside the company.

Related: Protecting Your Business From the Phishing Scam

3. Implement hardware and software restrictions.

It's important to place limitations on the types of installations and downloads that employees are allowed to perform on company computers. Employees should not be allowed to install or download any software on company technology that is not previously reviewed and authorized. Explain to your employees the importance of avoiding freeware and shareware and how this type of software can become a threat. What may appear to be an innocuous download for work purposes can easily introduce a virus to your network and expose sensitive business data.

Related: How to Create Security Awareness at Your Company

4. Manage mobile devices.

Mobile devices pose additional risks, as data can be easily exposed outside of the office. Off-site devices can be subject to mobile malware, eavesdropping, unauthorized access, theft and loss. Set expectations with employees as to their mobile conduct when accessing company data while on the road. If you allow employees to connect personal mobile devices to company Wi-Fi connections, make sure those connections are separate from the general organization network.

Almost half of American companies experienced some sort of data breach of in 2013. It doesn't take an expert hacker to view, take possession of, or exploit personal, intellectual or financial data. In fact, according to a Forrester Research report, most mobile data breaches are caused by employee negligence.

Security training can be a challenge without explaining the importance of security measures and adequately communicating how these measures effect the company and the employee. By implementing a few best practices and making sure that data security is of principal concern to everyone within your organization, you can keep your employees educated and your sensitive company data safe from prying eyes.

Eric Basu

CEO of Sentek Global

Eric Basu is the CEO of Sentek Global, a provider of government and commercial cybersecurity and information technology solutions. 

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Leadership

Build These 10 Habits to Become a True Leader (and Not Just a Boss)

This article explores the distinction between being a boss and being a leader, outlining ten key habits that transform mere management into true leadership.

Business News

Tesla Now Has Nearly 800 New Jobs Open — Up From Only 3 Roles in May

The job openings could indicate where Elon Musk wants to steer Tesla next.

Growing a Business

5 Insights I Learned While Growing My Business from a Startup to a 500-person Company

Scaling a startup from 10 people to 5 hundred is thrilling, but navigating the growth can be tricky. Here are 5 hard-won insights to help you transform your startup into a structured business with a clear roadmap and the right team behind you.

Growing a Business

How AI Startups Can Increase Their Chances of Success in Today's Landscape

The AI B2C sector is set to take off for startups that identify their market and address the tech challenges.