10 Cybersecurity Myths Debunked

1. My business is too small to be targeted by hackers. I have nothing of value or interest to them

Reality:

Businesses with 11 to 100 staff are 15x more likely to fall victim to cyberattacks. (Source: Verizon Data Breach Report)

2. Strong passwords are enough to keep my data safe and secure.

Reality:

Two-factor authentication on all critical accounts (email, VPN, SaaS) is an absolute must-do for protection.

3. All I need is a strong anti-virus product to protect my company, computers, and networks from a major security breach.

Reality:

People are the weak link; they click on anything. Help staff become more aware and more secure with awareness training.

4. If join an encrypted and password protected public Wi-Fi network, I have nothing to worry about.

Reality:

Any Wi-Fi can compromise you regardless of encryption or passwords. Avoid critical tasks like banking on public Wi-Fi.

5. All my cybersecurity threats come from outside my company (externally via the Internet).

Reality:

Inside threats account for 28% of breaches. Insider caused breaches can be accidental (67%) or malicious intent (33%).

6. All I need to protect my company from a major breach is strong anti-virus, a firewall, and SPAM email filtering.

Reality:

Monthly awareness training combined with phish testing yields the best improvements to your cybersecurity.

7. I will know right away if I have or my business has been hacked.

Reality: 

Hackers spend an average of 200-250 days inside SMB’s before discovery.

8. My IT department is responsible for protecting me and my company from all cyberattacks.

Reality:

Cybersecurity preparedness and awareness is everyone’s responsibility. Teach employees what they need to know.

9. I feel like password managers are risky and will lead to more harm than good.

Reality:

Password managers are the most effective way to improve password hygiene when paired with awareness training.

10. I cannot afford to spend money on cybersecurity; it costs way too much.

Reality:

Downtime, reputation damage, and data loss cost more than awareness training. “An ounce of prevention is worth a pound of cure.” B. Franklin