Big Interview

GET CYBER SECURE AT CYBER QUARTER

Cybercrime affects everyone, so don’t think your business will fall under the radar. It won’t! However, simple steps can boost your defences, explains Professor Prashant Pillai, of University of Wolverhampton and Cyber Quarter – Midlands Centre for Cyber Security.

Cybercrime doesn’t just hit you in the pocket. It damages your customer base and reputation too. The past two years have been stormy to say the least, and cyber security has taken a back seat as companies focus on staying afloat. But it’s time to put the issue at the top of the agenda because criminal attacks are a very real and growing threat. Cyber Quarter helps companies in the region upgrade their cyber skills. The centre is a joint venture between the University of Wolverhampton and Herefordshire Council, and part-funded by the Government’s Local Growth Fund, via the Marches Local Enterprise Partnership (LEP) and the European Regional Development Fund (ERDF). The University’s Cyber Research Institute offers business support, skills training, and enhanced security testing and development on-site. The centre’s Research and Development hub aims to attract specialist local talent with its state-of-the-art facilities and offices, and form trailblazing partnerships with the region’s Cyber Valley, home to 15% of the UK’s top cyber companies. Prof. Pillai is the University’s Associate Dean for Research and Knowledge Exchange, and Director at Cyber Quarter. He says it’s crucial for companies to meet minimum cyber security requirements at least – and Cyber Quarter can help achieve that goal. He explains: “Obviously a very large organisation will have lots of points of attack, which can be protected by investing in the right resources, including training, to provide the necessary security. But an attack can have real and lasting damage on much smaller companies further down the supply chain. “Small businesses need to be aware they are being used as an entry point to attack bigger ones. We’re seeing a rise in supply chain attacks – for example, there’s a lot of smaller manufacturers feeding into large Tier 1 and 2 companies. If they don’t have proper cyber protocols in place, they could well be the weakest link. It’s an easy way to get at the bigger companies.” Cyber-attacks – both homegrown and overseas – have grown exponentially over the last three years, and there’s been a huge recent spike in criminal activity. This is fuelled in part by state-sanctioned attacks on critical national infrastructure by the likes of China and Russia, but opportunist hackers and criminal gangs in the US, Turkey and Taiwan also rank in the top five offenders. Prof. Pillai is keen to stress that all organisations – no matter how big or small – are in the criminals’ crosshairs. “Even if you’re a micro company, you are vulnerable. In fact, attackers are increasingly aiming for the ‘low hanging fruit’ because it’s easy money.” With new sophisticated threats popping up almost weekly, how can companies protect their interests? “Cyber Essentials is the absolute minimum level of protection you should consider,” Prof. Pillai says. This doesn’t mean buying lots of fancy software and kit. It means taking five basic steps to ensure: The right processes and security ---configurations are used on your devices ---and softwares.

Firewalls are used to secure Internet ---connection.

Patches and antivirus malware software ---are up to date. Regular backups are done to save ---precious data. Control access to important data and ---systems and regularly update passwords.

He adds: “It’s important to remember that cyber isn’t just an IT problem. All employees need to do their bit, whether it’s changing passwords regularly or thinking twice before clicking on a link.” We’re not all tech-savvy, of course, so local businesses are welcome to contact the centre at any time for general advice and help with certification. “Cyber Essentials is simple and straightforward, especially for SMEs. I would recommend that they read up about it and get in contact for support and training.” Bespoke expert help is also available at the centre, and over 40 local businesses have already taken advantage of its Cyber Security Health Check to beef up on security measures and best practise. Eligible businesses can receive over 12 hours of funded access to University expertise, and short courses are available for employees looking to upskill or reskill. Prof. Pillai points to a recent government survey which threw up some interesting results about SMEs and cyber security. Last year 39% of UK companies reported a cyber-attack – the most common was phishing (83%), while one in five identified a problem with service, malware or ransomware.

He adds: “The survey found that larger businesses had invested in training, were relatively well covered, and could identify and report attacks. However smaller businesses are still largely unprotected, so a lot of attacks may well be going unreported. “Criminal gangs will encrypt your data or steal it, and if it’s not backed up, they’ll demand a ransom. Even if you pay the ransom, they might still destroy your data. Hacking isn’t just for financial gains, it is designed to cause huge economic and personal disruption.” That’s why Cyber Quarter aims to become a national Research and Development hub, helping businesses stay those few crucial steps ahead of the criminals. Prof. Pillai concludes: “We want to engage with SMEs and create a flourishing cyber ecosystem. We’re keen to hear from anyone with a cyber-related product or service who would like to work alongside us at our centre on mutually beneficial activities.” Cyber Quarter - Midland Centre for Cyber Security is based at Skylon Park, Hereford.

More information at www.cyberquarter.co.uk.

It’s important to remember that cyber isn’t just an IT problem. All employees need to do their bit, whether it’s changing passwords regularly or thinking twice before

clicking on a link. – Professor Prashant Pillai, University of Wolverhampton and Cyber Quarter – Midlands Centre for Cyber Security.