What to do in a cyberattack? A step-by-step plan for SMEs
Hit by a cyberattack? Follow this practical step-by-step plan for SMEs: isolate, call for help, recover and prevent it from happening again.
By Max HoltropA cyberattack does not only happen to large companies. SMEs in particular are a favourite target, because security is often less strict. The question is not only how to prevent an attack, but also: what do you do if it does happen? In this article you read a practical step-by-step plan.
1. Stay calm and isolate the problem
Notice something suspicious, such as encrypted files or a strange login? Disconnect the affected device from the network, but do not simply turn it off. That prevents an attack from spreading, while evidence is preserved.
2. Call for help immediately
Call your IT partner. Speed counts: the sooner someone takes a look, the smaller the damage. Do not try to solve everything yourself, because wrong steps can break more.
3. Change passwords and check access
Change the passwords of affected accounts and check whether unwanted access has been granted. Multi-factor authentication helps to keep attackers out after all.
4. Recover from a backup
With a good, separate backup you restore your files without paying ransom. That is why a reliable backup is not a luxury.
5. Learn from it and prevent a repeat
After an incident you look at what went wrong and close the gap. Often the gain is in the basics: multi-factor authentication, updates and awareness among staff.
Prevention is better than cure
You prevent most attacks with good security and monitoring, so threats are stopped before they cause damage. Schedule a no-obligation consultation and we will look at how well your organisation is prepared.
Good to know
What should I do first in a cyberattack?
Isolate the affected device from the network, but do not turn it off, and call your IT partner immediately. Speed limits the damage and preserves evidence.
Should I pay ransom for ransomware?
Preferably not. With a good, separate backup you restore your files without paying. Paying also gives no guarantee and sustains the attackers’ business model.
How do I prevent a cyberattack?
With the basics in order: multi-factor authentication, updates, a reliable backup, monitoring and awareness among staff. Together these keep out most attacks.
Related services
ICT Security & NIS2
Control over your business information and demonstrable compliance, for the law and for your clients.
Read more →Keeper Password Security
Secure password management for your entire organisation: strong passwords, shared and under control.
Read more →Microsoft 365 security licenses
The right Microsoft security licenses for your organization: advice, setup and management.
Read more →Related articles
IT security check: is your business secure?
How do you know if your IT security is really in order? An IT security check scans your environment and delivers a clear report with concrete improvement points. Read what it involves.
Read more →MFA: why secure sign-in is the most important measure
What is MFA, and why is it the most important security measure for SMEs? In this article you read how multi-factor authentication works and why you want to enable it everywhere.
Read more →Microsoft Secure Score: what does your security score say?
The Microsoft Secure Score shows in a single number how secure your Microsoft 365 environment is. Read what the score means and how to improve it.
Read more →Want to spar with a specialist?
Curious what this means for your organisation? Book a no-obligation consult — we’re happy to think along.