March 2018

Cyber breaches that affect big businesses make the news, but over 60 percent of all cyber breaches target small and medium-sized businesses. Because you must protect your business, no matter what its size, purchase adequate cyber liability insurance.

What is Cyber Liability Insurance?

When your business suffers a data breach, you can file a cyber liability insurance claim. The policy won’t prevent a hack, but it will cover your financial losses and assist your company during recovery.

Common Cyber Breach Risks

Any company, from international mega corporations to small family-owned businesses, that operates online or handles customer data faces cyber breach risks such as:

• Human error – using the same password for all websites, losing unlocked devices or downloading malware.
• Mobile devices – gateway for thieves when used over unsecured Wi-Fi connections or left unlocked.
• Disgruntled former employees – use old login information to hack into your system.
• Ransomware – hackers introduce malware onto your computer, encrypt data and require a ransom before they release and decrypt your system.
• Coordinated attacks – international hacker groups target the sensitive information your company stores.

How Much Does a Cyber Breach Cost?

After a cyber breach, your company will owe first-party expenses, such as damages to your systems and data, and third-party expenses related to your liability to customers. Examples of these two expenses include:

• Customer losses – direct financial loss, credit monitoring and other related expenses.
• Business disruption expenses – account for up to 39 percent of a breach’s total cost.
• Direct financial loss – resources the hackers steal from your company bank accounts.
• Legal costs – handling lawsuits customers may file against your business.
• Regulatory fines – imposed by the FCC, FTC, HHS and your state.
• Public relations expenses – required to rebuild your company’s reputation.

These and other expenses contribute to the $3.62 million global average cost of a cyber breach. Each breach affects an average of 24,000 records, reports the Ponemon Institute, and costs $141 per individual lost or stolen record. Multiply this figure by the number of confidential or sensitive records your company stores, and you get an idea of how expensive a breach would be for your business.

Purchase Adequate Cyber Liability Insurance

Many experts suggest that businesses purchase at least $1 million in cyber liability insurance. Without this valuable coverage, your company could face insurmountable financial challenges and possible bankruptcy after a cyber breach.

On average, small businesses pay from $750-8,000 per year for this valuable coverage. Because your needs vary, schedule a consultation with your insurance agent and get a detailed quote.

Protect your customers and your business with cyber liability insurance. It’s essential coverage for every company.

Your company’s website shares information about your business and promotes sales. Hackers can access your website and wreak havoc on your business, though, as they steal customer data, post negative messages to customers or destroy records. As you lock your company’s doors every day, implement several tips as you protect your website, your reputation and business.

Stay Informed About Security Threats

Hackers change tactics often in an effort to access data, so stay informed. Follow tech sites, including The Hacker News, as you secure your website.

Boost Admin Portal Security

Because the admin portal serves as the brain of your website, you need to secure it.

• Utilize a username and password that are hard to guess.
• Never share login information with unauthorized users or via email.
• Limit login attempts.
• Require a multi-factor authentication for logins.
• Reduce access to the portal.
• Scan devices that connect to the network, and ensure they’re not affected by viruses or malware.

Install Security Software

A web application firewall (WAF) scans all the information that passes between your data connection and web server. It catches hacking attempts, malicious bots and spam, so choose one to install.

Update Software

Software updates or patches may close security vulnerabilities and fix bugs. Because hackers can scan thousands of websites each hour, set your devices, web servers and all aspects of your website to update software automatically as you protect your business.

Add an Encrypted SSL

You may use your company’s website to gather customer email addresses or credit card information. In this case, use an encrypted SSL to hide personal information that’s transmitted from your website to your database.

Minimize File Upload Access

You may carefully scan uploaded files for security threats, but smart hackers can easily hide bugs in those files and gain access to your website. Counteract hackers when you store uploaded files outside of the root directory, then use a specific script when you’re ready to access the stored information.

Backup Your Website Frequently

Several times a day, schedule website backups. Choose a local and off-site backup location so you can get to your data if a hacker does manage to access your website, the hardware fails or you suffer a power outage.

Prioritize Security

Everyone in your company should prioritize security and take steps to deter hackers. Train employees to secure their devices that connect to your server, follow password security protocols and set logins to expire quickly after inactivity.

With these tips, you can protect your website from hackers. Additionally, talk to your cyber liability insurance agent and ask about other strategies and steps you can take to protect your website, customers and business.

Your customers entrust their personal data to you and your company. Your employees may easily share information, though, particularly if you operate an open office with little privacy. Protect your customers’ information and identities when you follow several tips.

Collect Only the Data you Need

Unless you need a customer’s driver’s license number or Social Security number for a specific purpose related to the transaction, don’t collect this data. Ask only for the data you need, and reduce access to information that could be compromised.

Use Data Only for Legitimate Purposes

The data you collect may be used to complete a sale or open a line of credit, but don’t use a customer’s data for any other purpose. Improper use of data can compromise a customer and place your company at risk.

Store Data Properly

Protect sensitive customer data when you store it electronically and never on paper. Then encrypt all data and lock it in a centralized location, not on a USB drive or other removable media. When you’re ready to erase the data, wipe it from your system and shred any paper files.

Use a Dedicated Server

While you could use a shared server to save money, a dedicated server reduces a hacker’s ability to access your data. It reduces vulnerability and improves security.

Protect Your Network

Secure the information on your network when you update your system’s anti-virus and firewall protection and scan often for malware. Perform regular updates on all computers and other connected devices, too.

Secure Your Devices

Use only updated computers, tablets, smartphones, printers, fax machines and all devices as you improve security. Then ensure all devices that connect to the internet are kept locked when not in use. When employees must connect remotely to your network, ensure they use a secure VPN (Virtual Private Network).

Backup Data Regularly

Schedule data backups at least daily. This step secures data as you collect it and reduces the risks of theft.

Restrict Access

Maintain a “need to know” attitude as you protect data. If employees don’t need access to the information stored on paper or electronically, they shouldn’t have access to it.

Train Employees

Educate your entire staff about how to protect customer information. They should know how to maintain confidentiality during every step of their customer interaction, including before the sale,  when they collect payment and during any follow-up.

Employees should also know how to:

• Update software.
• Lock computers when they’re not in use.
• Avoid downloading malware.
• Change passwords often.

Protect customer data in your open office when you take these steps. When you and your team secure data during every step of your customer interaction, you reduce the risk of an expensive cyber breach.

With a virtual payment terminal, you can take payments over the internet. Not only will you boost sales, but you’ll also offer convenience to your customers. Your virtual payment terminal may be vulnerable to security risks, though, so follow several tips as you reduce liability and protect your customers and business.

What is a Virtual Payment Terminal?

Your virtual payment terminal allows you to accept credit card payments without using a credit card terminal. Simply log into the virtual terminal website from your device, enter the sales amount and key in the credit card information. You’ll then receive authorization if the sale is approved and can print or email the receipt.

After each sale or when it’s convenient for you, check the transaction history to see details about your sales and processing activity. The terminal also includes performance data and financial reports, and you can adjust the admin settings.

With your virtual payment terminal, you can accept payments anywhere. You’ll also save money with lower processing fees and increased opportunities to make sales.

Security Tips for Your Virtual Payment Terminal

Your virtual payment terminal offers convenience and can boost sales, but you must secure it. You will be liable if your actions compromise a customer’s credit card number or if fraud occurs to your account.

• Never store customer payment information. Use credit card data to make the sale, but never make or store a copy of the card number or other details.
• Use a PCI-compliant virtual payment terminal provider.
• Utilize fraud filters that identify potential fraud and help you respond properly.
• Partner with a provider that uses Point-to-Point encryption.
• Implement tokenization. It replaces data with a token and inhibits hackers.
• Avoid public Wi-Fi connections that are often unsecure.
• Follow all the security protocols mandated by your virtual payment terminal provider. These protocols may include annual PCI compliance training or software updates as you protect your customers’ data and company.
• Limit login access. Only authorized employees should be able to log into your virtual payment terminal as you prevent unauthorized transactions or other information compromises.
• Log out after each transaction or when you need to walk away from your device. This step prevents someone from accessing the terminal and information between sales.
• Secure the computers, smartphones and tablets you use to access your virtual payment terminal. If possible, use devices that require a pin or use fingerprint or face recognition, and store these devices in a secure location.

Your business benefits from a virtual payment terminal. Secure it as you limit your liability and protect customers and your company.