Cyber Security Resources

Cyber-Security Resources - Small and Medium Businesses

As more and more business operations become digitized, cybersecurity threats are becoming increasingly common. Threat actors are now renting out malicious software to those with less technical skills in what is known as Malware-as-a-Service, effectively lowering the barrier for more criminals to target victim networks. Small and medium businesses are particularly vulnerable to these threats due to their limited budgets and resources. However, with the right tools and information, SMBs can take effective steps to protect themselves from cyber attacks.

The Canadian Centre for Cyber Security

Whether a business is just learning about cyber security or already has a robust regime in place, the Canadian Centre for Cyber Security (CCCS) has resources to support them. In their own words, the CCCS is "the single unified source of expert advice, guidance, services and support on cyber security for Canadians."

From providing advice on baseline cyber security controls to issuing alerts on real-time threats and incidents affecting Canadian businesses, the CCCS has a multitude of ways to help Canadians.

For the small business just starting out with cyber security, the CCCS produced the GetCyberSafe Guide for Small and Medium Businesses (available here: https://www.getcybersafe.gc.ca/en/resources/get-cyber-safe-guide-small-and-medium-businesses), a 48 page guide covering security for everything from Web browsing, phishing, point-of-Sale systems to data backup and cloud security. As an added resource, the guide contains a Self-Assessment tool to help a business determine their strengths and potential security weaknesses.

CyberSecure Canada Certification

Launched in 2020, the Government of Canada introduced a cybersecurity certification program for small and medium businesses. The CyberSecure Canada program encourages businesses to improve their cyber security posture to limit their exposure to cyber incidents. The program website include free e-learning modules to help participants improve their knowledge base and prepare to obtain certification.

The program resources  and details are available through the Innovation, Science and Economic Development Canada website here: https://ised-isde.canada.ca/site/cybersecure-canada/en

Office of the Privacy Commissioner of Canada

In the midst of a ransomware attack or other cyber incident, a business could be forgiven for overlooking a requirement to report any data breach, but thankfully, the Office of the Privacy Commissioner of Canada (OPC) has you covered. Not only does the OPC provide you with resources to help prevent a privacy breach, they clearly define what a privacy breach is and lay out a business' responsibility to report. Find these resources here: https://www.priv.gc.ca/en/privacy-topics/business-privacy/safeguards-and-breaches/