What is the cyber security risk for your business?

A cyber security policy is essential

Like other policies, cyber security policies and processes should be documented and visible, with quick reference guides and clear advice on what you expect from staff. For example:

• Have you documented what to do if there is a problem?
• Have you provided written advice on the digital behaviours that you expect from staff?
• Do you want staff to access private emails and social media on work computers? Or to connect personal devices such as phones and tablets to your network? What about plugging in USBs?
• Do you allow members of the public to connect to your Wi-Fi?
• Have you got cyber security checklists in place for when people start or finish working with your pharmacy?
  This helps to ensure that emails, passwords and other important access information doesn’t accidentally leave your pharmacy.

Make sure that your systems and technology are as secure as possible.

Malicious or criminal attacks remain the leading source of breaches accounting for 70% of the total breaches, this is an increase from 55% in 2021

The following are important points to think about in preventing disruption to your business:

• Do your cyber security arrangements cover all devices that connect to the internet?
  Security cameras, smart TVs, fridges, multi-media and music services and other Internet of Thing devices (IoT) are often exposed directly to the internet (i.e. cyber criminals can easily see them using scanning tools) and don’t have the same level security of your PCs and Servers.  These devices are at a significantly higher risk and can potentially open up security vulnerabilities without you even knowing that these have occurred.  We strongly recommend you contact the device manufactures and ensure the devices are patched and up to date and if possible ports locked down.
• Do you have a firewall and antivirus software on every computer?
• Do you have a system to detect breaches in situations where a traditional solution such as antivirus software will not be sufficient?
• Is your operating system able to cope with contemporary cyber security needs?
  The most recent operating systems provide the most rigorous security protections, so making sure that your operating system is up to date is fundamental to protecting your cyber security
• Do you conduct regular backups?
• Do you act on software updates as soon as possible?
  Operating system updates and security updates are a vital part of staying as secure as possible. This means avoiding operating systems that have become out of date (such as Windows 7).
• Have you thought about whether staff dial in from off-site using unauthorised programs (such as Remote Desktop Protocols)? Make sure that you factor these in to your security plans.