A string of recent cyberattacks on major UK retailers has emphasised the importance of robust cybersecurity practices. Strong cybersecurity and being vigilant about malware (software designed to cause harm) can reduce the risk of data being accessed and stolen by hackers.

Businesses of all kinds can be targeted by cybercriminals, who seek to infect digital devices with malware in order to steal information. The implications of a data breach can be significant, not just for the business’ ability to operate, but potentially also in terms of long term implications for its employees, suppliers and customers.

Cyber security tips

To combat these risks, employers should operate robust cybersecurity practices, including:

• Ensuring software is updated regularly. Apply the updates, do not ignore or delay them, and set automatic updates where possible. Avoid (and remove) software that is no longer receiving security updates.
• Shutting down devices overnight and at weekends. This can improve cybersecurity by reducing the risk of unauthorised access and potential malware execution, especially if a device is connected to an unsecured network. It also allows for proper application of security updates that may require a full restart.
• Contacting software providers if unexpected password reset notifications are received including on tax, accounting and payroll products. Such notifications can be indicative of a hacker trying to access data. A common tactic is to reset a password just before the weekend. If you cannot understand why a password reset notifications has been received, check immediately with the relevant software provider.
• Avoiding following links or downloading attachments in suspicious or unexpected emails.
• Keeping antivirus protection up to date and regularly running scans.
• Using strong passwords and changing your password if a device has been compromised.
• Discouraging employees from connecting to unsecured networks such as in café’s, on the train etc.

The National Cyber Security Centre has further information and tips on cyber security, including a Check Your Cyber Security tool, which can:

• Check computers and systems for ransomware vulnerability.
• Confirm whether web browsers are up to date.
• Advise on mitigating cyber security risks.
• Provide tailored feedback on specific weaknesses and how to fix them.

Employers might also consider taking the Government-backed Cyber Essentials certification scheme to help protect their systems against common threats.

This article reflects the position at the date of publication shown above. If you are reading this at a later date you are advised to check that that position has not changed in the time since.  

We regularly publish articles on a range of tax and wider topical issues which affect employers. If you wish to subscribe to our monthly Employer Focus e-newsletter, please contact us.