Two facts about Halloween: 1) Children are more than twice as likely to be hit by a car and killed on Halloween than any other day of the year according to Safe Kids Worldwide.  2) The National Highway Traffic Safety Administration reports that Halloween is one of the top three days of the year for pedestrian injuries and fatalities. So, drivers and parents need to pay extra attention.

Related Links: Umbrella Liability

1. Phishing. Phishing attacks are the means by which most malware finds its way into any business. When someone within your organization clicks on a link or attachment in a phishing email the malicious code gets downloaded.

• Wombat Security has said that 76% of businesses have been a victim of a phishing attack within the last year.
• SANS Institute reported that 95% of all attacks on enterprise networks are the result of successful spear phishing.

2. Ransomware. This is malicious software (malware) that infects your machine and begins by quietly encrypting files. Once completed, it presents you with a "ransom note" stating something to the effect, 'if you want to see your files again, you’re going to have to pay.' If you decide to pay, you're only encouraging criminals, almost guaranteeing you will pay again in the future.

The best defense against ransomware is offense with a well-defined disaster recovery/backup and restore program. Best practices include backing up your assets regularly and testing the restoration process. If you can restore your organization from backup, why pay a ransom?

3. Insider threats. These come in two categories – unintentional and intentional.
Physical security of employee devices can help reduce losses. An asset management solution can help prevent lost or stolen devices, preventing attackers access to valuable information. Connection to insecure networks, especially unsecured wireless networks, has the potential to give anyone in the world access to your business! Secure connections and firewall software is another preventative measure that can help loss from unintentional insider threats.

What reasons would employees have to become an intentional threat? Many do it to steal property or information for personal gain or to benefit another organization. Over 80% of the reported cases of insider threat to date have been done during working hours, with the activity planned beforehand, and for financial gain.

Remember, half the battle against cyber security risks in knowledge and taking proactive measures.

Related links: Commercial Insurance