University of East Anglia

Date: 04/11/09

SME IT security risks highlighted

Recent press reports have highlighted security vulnerabilities with Wi-fi hot-spots but these are likely to be the tip of the iceberg when considering security failings within a large number of small and medium size enterprises.

Recent research undertaken by leading IT security specialists at the University of East Anglia has highlighted vulnerabilities in many SME IT systems with accounting, banking and data storage all vulnerable to attack.

A lack of awareness by SMEs combined with the absence of qualified IT staff often results in smaller organisations being the weakest target for the attacker. It has been found employees at small and medium-sized companies are more likely to engage in behaviour that puts their employers at risk (Trend Micro Survey 2008) resulting in SMEs needing a more comprehensive and effective approach to battling multiple threats. Research concluded that even a basic awareness of the threats and straightforward security techniques can significantly reduce both the likelihood and impact of a security breach.

Whilst big companies implement preventative measures and provide security awareness training for staff, SMEs are the prime target with “VISA saying more than 80 per cent of all the ‘hacks’ involving card data theft are against merchants that carry out fewer than 20,000 card transactions a year.”

Data collection and management, online trading and email are all a necessary part of business but security failings of even the most simple business system can result in significant loss in time, client confidence, breaches of legislation and loss of income. Whilst SMEs focus on the development and delivery of their core product or service - IT security can fall well down the list of priorities particularly as a lot of businesses wrongly believe that exiting security contracts and software packages adequately protect their business.

These issues will be highlighted in an “Introduction to Computer Security for SMEs” to be held on the 30th November 2009. Attendees will be shown real life examples illustrating how simple it is for criminals to access supposedly confidential data and systems - and will be provided with an opportunity to consider and address security issues that may exist within their organisation.

Please email business@uea.ac.uk, call 01603 591578 or visit www.uea.ac.uk/professionaldevelopment for further information.

See also:
Organisation: University of East Anglia

About this section

Cambridge Network keeps you informed of all the latest news from Cambridge and beyond.
News articles posted on our site by our members are picked up by Search engines and News Services such as GoogleNews and can drive traffic back to you.
If you have a special interest, use one of the news filters in the left hand panel or try out the site search engine which can also source articles from our archive dating back to 2000.
Wherever your interest lies, you will find this site a plentiful source of the most up-to-date news.
Sign up on the front page of our site to receive our weekly e-newsletter with a digest of the latest news from Cambridge