Many resource-strapped startups see security as important, but costly. Decisions are often made by assessing financial expenses, which results in a modest layer of security. However, entrepreneurs are encouraged to consider the company’s vulnerabilities and think about risks instead of just costs. Security shouldn’t be modest. It should be sturdy, bold, and reassuring.
Security isn’t about reducing risk to zero. Rather, it’s about rebalancing risk as context shifts. So, the goal for small companies concerned about security is to find a balance between too expensive and too risky. This position should be re-evaluated as fast and frequently as the business evolves.
Entrepreneurs must consider both cybersecurity and physical security, and make choices based on their unique qualities and risks.
Physical security options
Uniformed officers
Uniformed officers are hired to deter burglary, theft, vandalism or any other criminal activity that your property is susceptible to. Having someone on the premises creates a sense of safety; you know there’s someone available to help if something goes wrong. Guards are expensive though, so you may only want to bring a uniformed officer on at night.
Concierge staff
Concierge staff offer customer and security services, making them an attractive option. They may assist with directing guests, managing packages, and patrolling the property. Some concierge teams even use a guard tour system like Patrol Points to improve the flow of information and effectiveness of security patrols. Like uniformed guards, concierge staff are expensive. Startups may want to consider other options if funds are limited or if physical threats are low.
Security patrol vehicles
Depending on the type of company you own, a patrol vehicle may be a valuable asset to you. Certified guards drive around an area to ensure there are no intruders on the premises and things are operating well. The vehicles usually have fire extinguishers, emergency treatment kits, spotlights, jumper cables, two-way radios, and other security equipment.
Temporary security
Temporary security is a good option if you are hosting a short-term event, doing renovation work, or are just in need of an extra pair of eyes.
If your building has recently experienced a criminal threat, you can hire a temporary guard to keep watch for the next week or so, but this would not be a sufficient long-term solution. Use that time to implement more permanent security solutions.
Security cameras
A good security camera system offers numerous benefits. Having cameras in public places makes people feel safer. This equipment is durable, versatile, and can be installed anywhere. It’s also more affordable now that cameras have become ubiquitous. But cameras cannot chase down a culprit; they can only observe. As an entrepreneur, you must also decide how footage will be stored and who will monitor it.
Access control
Access control systems, such as alarm systems, provide an additional layer of protection for a reasonable cost. Only those with the correct passcode or key card will be granted access to the office or building.
Unarmed versus armed security
If you are in need of a person to help keep your business safe, you must consider whether you want an armed or unarmed guard.
Unarmed security guards do not carry firearms. However, they may carry other types of non-lethal weapons like a baton or pepper spray. Unarmed guards are usually preferred because they are less expensive and present a lower level of liability.
Armed guards carry firearms, and have undergone rigorous training in order to gain the proper certifications. Armed guards are usually hired for high-risk businesses like banks, big tech firms, or courthouses. Most companies will be more than safe hiring an unarmed guard.
Don’t forget about cyber security
Cyber security has quickly become a must-have for all businesses. That’s because cyber crimes are on the rise. The FBI reports that since the start of the coronavirus, cyberattacks have increased by 300%!
This trend was also highlighted by Google. It blocked over 18 million coronavirus phishing attempts each day at the start of the pandemic.
Small businesses are not spared, either. The main reason attackers will target entrepreneurs or startups is because they don’t have proper safety measures in place. One report found that 43% of small businesses had no cybersecurity defense plan in place. Even more concerning, 60% of small business owners didn’t think their business was a target for cyber criminals.
Engineering and telecommunication companies struggled the most with phishing attacks. Legal firms and hospitals were able to avoid phishing tests more than other industries.
Two-factor authentication
Two-factor authentication is the easiest and cheapest (it’s free) cyber security tactic available, and entrepreneurs should use it for every account that they can. Two-factor authentication is an extra layer of security that prevents hackers from gaining access to your account, even if they figure out your password. First, the user enters their username and password. Then, instead of immediately gaining access, they will be required to provide another piece of information. Often, it is a one-time code that is sent to their phone or accessed through an authenticator app. Yes, it takes a little more time to log in to your email, but you will be happy that you have it if your password is ever compromised.
Store data in a secure location
Don’t put your servers on the internet with all of your services exposed. Instead, put them on a separate cloud. Make it hard for opportunists to get a hold of your assets. Something like Amazon Web Services works for most entrepreneurs who don’t have a lot of money or time to spare. The company provides on-demand cloud computing platforms and APIs to individuals and companies on a metered, pay-as-you-go basis.
Keep your website secure
An SSL (or TLS) certificate is a digital certificate that authenticates a website’s identity and provides an encrypted connection. SSL stands for Secure Sockets Layer, a security protocol that encrypts internet traffic and verifies server identity. Every website needs an SSL certificate in order to keep user data secure, verify ownership of the website, and prevent cyber criminals from creating fake versions of your site.
Use a VPN for remote work
A virtual private network (VPN) extends a private network across a public network and enables users to work as if they were using their office computer. VPNs allow entrepreneurs to work safely from anywhere. Even before the pandemic hit, many companies were allowing employees to work from home for at least one day each week. But when the pandemic hit, almost all white-collar employees were asked to work from home. Having a secure network available to you, and any staff you have, is essential. Too many companies still share and access confidential business information over an unsecured network, which is a huge risk. Establish good, secure practices now. It’s much easier to get a team of three onto a VPN and gradually add more people as you grow than switch a team of 25 onto a VPN.
Conclusion
Entrepreneurs are strongly encouraged to take time to assess security risks as soon as possible. If this isn’t your strong point, don’t hesitate to hire someone to assess risks for you. While it’s another cost, it’s far more costly to leave your company vulnerable to attacks. When creating security strategies, it’s helpful to use a layered approach. Use this approach so that physical and cyber threats are covered.