Joined January 2019
Convenience stores run on speed, but the POS, inventory system and lottery terminal often share the same network without anyone checking who has access. We see this regularly with SME clients. Fast checkout matters. Unmanaged access to payment systems matters more. 🛡️
5
Your business phone system is probably an access point nobody reviews. We ask SME owners one question: who has admin login to your phone portal, and is that access removed when someone leaves? Most can't answer on the spot. 🛡️
7
We've seen SME boards hire a full time security lead before the basic controls are in place. Senior judgment on a fixed schedule, with clear priorities for the board, often delivers more risk reduction for less money. 🛡️
Only 15.4% of small businesses with 10 to 49 employees had a written cyber security policy in 2023, per Statistics Canada. In our engagements, the first gap we check is who can approve a wire change, and it's rarely written down. 🛡️ Link in the reply.
1
7
The Critical Cyber Systems Protection Act is law, but not yet in force. Once it is, designated operators must report incidents within 72 hours. We expect SMEs to feel it first through supplier questions from regulated clients. 🛡️
1
6
Cyber risk assessments among UK small firms dropped from 48% to 41% in the latest government survey. Start with a short list of where your client data lives and who can reach it. 🛡️ Details in link.
1
2
Would a buyer trust your security posture if they reviewed it tomorrow? For SMEs thinking about a sale, cyber due diligence is showing up earlier in the process. An up to date asset list, regular access reviews, and a written incident response plan protect value before the dea...
9
Phishing simulations are one of the most effective tools for building genuine employee defenses against social engineering attacks. 🎣
9
CPCSC Level 1 shows up in select DND contracts this summer, with 13 requirements suppliers have to prove. Suppliers who haven't checked their status are the ones who get caught mid, bid. Map it now. 🛡️ More info in link.
1
5
RiskAware's experience spans a wide range of sectors, each with unique security requirements. Here are 5 industries we serve:
2
Only 15.4% of Canadian small businesses had a written cyber policy in 2023, per StatCan. We see that gap in client engagements. A single page covering access approvals and who calls whom during an incident is a real start. 🛡️ Link in reply.
1
3
Insurance premiums aren't standardized, so two businesses with identical coverage can pay very different amounts. Compare quotes before you sign. Then check whether the policy covers cyber incidents at all. 🛡️ @PursuitsWealth Link in reply.
1
3