Cyber Security In Small Businesses

[Serket-Securit]

We have tried to create a product that we believe is a cost effective way for small businesses to upgrade their cyber security. Instead of providing the implementation for a high price, we give a detailed document explaining to the business owner how to upgrade their current security posture, based off details they provide us with.

We're currently having difficulties selling to small businesses, it seems they believe they are not targeted by cyber security attacks or that if it does happen then it won't be that expensive, we've tried various different impactful stats such as:

• 43% of cyber attacks target small businesses
• The average cost of a data breach is £4,200 for SMEs
• 60% of small companies go bankrupt within 6 months of a significant cyber incident

But it appears that this is one of those things where currently people don't want to believe it happens or don't think it will do anything, until it happens to them. At which point they are wildly unprepared.

Does anyone have any tips or advice as to how we can get through to these small business owners? To convince them that a small investment of time and money is actually very likely to protect their revenue and also their time dealing with an incident down the line.

*happy to provide links to the statistics.

 

[ctrlbrk]

Does anyone have any tips or advice as to how we can get through to these small business owners?

I would say "employ the services of a good marketing professional".

 

[Nico Albrecht]

Don’t bother trying to market this to consumers or small businesses—it would require massive education efforts, and you’d need deep pockets to fund such initiatives.

If you had conducted a thorough marketing plan and considered all angles, you would have realized that your biggest challenge will come from AI.

With modern advancements, security solutions enhanced by AI will soon be integrated directly into routers, switches, firewalls, and operating systems, operating on autopilot within the next two years.

In my opinion, cybersecurity is one of the first fields that will be heavily disrupted by AI-driven automation. I feel for those currently pursuing cybersecurity degrees, unaware that AI could become their biggest competitor, while universities continue promoting these programs despite the likelihood of them becoming obsolete within five years.

 

[fisicx]

Sending me a detailed document will just send me to sleep if I even open the email.

I get offers for cyber security daily. They all get junked.

Your stats mean nothing @Serket-Securit as they mean nothing to me. You don’t know my business so how can you possibly know if a data breach will affect me.

As @Nico Albrecht said: you are targeting the wrong people.

 

[Paul Kelly ICHYB]

43% of cyber attacks target small businesses

You have highlighted a good point, assuming they are UK based stats. On the basis that +99% of all businesses are small and <37k are medium/large, that is actually a small number of businesses hit!

However, if you are one of them, it is not good.

As mentioned, you need a good marketing company to sell the service in a blunt, realistic, non techy way, that makes business owners realise the importance of CS.

 

[Serket-Securit]

Sending me a detailed document will just send me to sleep if I even open the email.

I get offers for cyber security daily. They all get junked.

Your stats mean nothing @Serket-Securit as they mean nothing to me. You don’t know my business so how can you possibly know if a data breach will affect me.

As @Nico Albrecht said: you are targeting the wrong people.

Appreciate the response, do you have a better target audience in mind?

 

[fisicx]

Appreciate the response, do you have a better target audience in mind?

No idea. Pay a market research company to find out. And then pay a marketing company to sell the product.

It’s quite likely your target business doesn’t want your product, they want someone to look after their security for them.

 

[NickZ]

Many small businesses don't care much about cyber security. They use Wordpress due to being cheaply done. The owners invest more detail on the business cards than on their website. All that till their site is infected, about 6 month later they forget about the embarrassment and go back to Wordpress.

Some people believe that WordPress is synonymous for a website, and that they would add content on their own. And then won't go into the admin area once ever.

 

[numbersrule]

I'm not at all knowledgeable about Cyber Security nor AI, but one point to consider is that some types of small businesses are more likely to respond to offerings of Cyber Security type services than others. For example, businesses working on government contracts, or should I say businesses attempting to expand into government contracts areas may need more CS help because government contracts demand it. DYOR and identify business sectors where there is more demand. I do not dispute what NickZ says that some businesses don't care much about CS, but then again, others may care. Another example would be businesses in financial related sectors where their Clients expect high cyber standards due to sensitive financial or accounting information being held by the small business. But, if Nico Albrecht is right it sounds like your window of opportunity may be narrowing unless you can move into areas where businesses may need to be educated about the advantages that AI can offer in the fullness of time.

 

[NickZ]

I do not dispute what NickZ says that some businesses don't care much about CS, but then again, others may care. Another example would be businesses in financial related sectors where their Clients expect high cyber standards due to sensitive financial or accounting information being held by the small business.

The EU is setting new standards for websites.
digital-strategy.ec.europa.eu/en/policies/web-accessibility-directive-standards-and-harmonisation
Still most people don't see Digital as being demanding. That is due to not collecting data.
Many don't even have people for their social media. What are kids good for anyway?

Shops people would benefit greatly running 4 or 15 shops, still try to convince an E-commerce owner to open a 2nd shop is hard work.

 

[fisicx]

The EU is setting new standards for websites.

Good job we aren't in the EU then.

 

[NickZ]

Good job we aren't in the EU then.

Companies relying on lorry drivers, harvest helpers and other imported workforce most likely beg to differ.
The EU is made for companies, multinationals, those benefit greatly.

 

[fisicx]

Companies relying on lorry drivers, harvest helpers and other imported workforce most likely beg to differ….

Why would they care about website standards?

 

[NickZ]

Why would they care about website standards?

I did not say that I'd care for website standards.
You are aware that your polemic is backfiring?

 

[fisicx]

I did not say that I'd care for website standards.
You are aware that your polemic is backfiring?

Nope. Because I have no idea what point you are trying to make.

 

[Deleted member 360015]

We have tried to create a product that we believe is a cost effective way for small businesses to upgrade their cyber security. Instead of providing the implementation for a high price, we give a detailed document explaining to the business owner how to upgrade their current security posture, based off details they provide us with.

We're currently having difficulties selling to small businesses, it seems they believe they are not targeted by cyber security attacks or that if it does happen then it won't be that expensive, we've tried various different impactful stats such as:

• 43% of cyber attacks target small businesses
• The average cost of a data breach is £4,200 for SMEs
• 60% of small companies go bankrupt within 6 months of a significant cyber incident

But it appears that this is one of those things where currently people don't want to believe it happens or don't think it will do anything, until it happens to them. At which point they are wildly unprepared.

Does anyone have any tips or advice as to how we can get through to these small business owners? To convince them that a small investment of time and money is actually very likely to protect their revenue and also their time dealing with an incident down the line.

*happy to provide links to the statistics.

Just few days ago, a LinkedIn post came up in my feed about a frustrated cybersecurity consultant who reported repeatedly trying to get her audience (US doctors) to care about cybersecurity and getting the cold shoulder.

I feel for her. It's frustrating to see people ignore something so important.
It's like watching someone casually stroll across a busy street, eyes glued to their phone, oblivious to the oncoming traffic. You want to shout, "Watch out!" but they can't hear you.

In the cybersecurity world, we see the "oncoming traffic" all the time—the threats, vulnerabilities, and potential for disaster. But sometimes, it feels like we're the only ones who notice.

The truth is that cybersecurity isn't just about technology. It's about people, and people are often more motivated by emotion than logic.

Sometimes, real-life examples are used to make people realize the importance of cybersecurity. But it's sad when this happens.

Benjamin Franklin once said, "An ounce of prevention is worth a pound of cure." But how do you convince people to invest in prevention when they don't see the danger?

That's the challenge we security consultants face every single day in cybersecurity.

 

[fisicx]

Just few days ago, a LinkedIn post came up in my feed about a frustrated cybersecurity consultant who reported repeatedly trying to get her audience (US doctors) to care about cybersecurity and getting the cold shoulder.

Maybe if they developed their marketing skills or paid for marketing help they wouldn't be frustrated. I'd put money on them trying to sell cybersecurity instead of properly investigating the needs of their target client.