New Standard Brings Clarity On Cybersecurity To SMEs

With 2021 expected to be the worst year on record for cyberattacks, the CIO Strategy Council has published a new standard that will help smaller businesses protect their systems from intruders. The standard, supported by the Standards Council of Canada (SCC), will form part of the requirements for CyberSecure Canada, a voluntary certification program established by Innovation, Science, and Economic Development (ISED) and the Communications Security Establishment (CSE) to help small- to medium-sized enterprises (SMEs) achieve a reasonable level of cybersecurity. Written with non-expert users in mind, the standard includes how-to guidance and ready-made templates to help SMEs improve their cybersecurity controls. “A successful cyberattack can have major impacts on smaller companies, including stress and financial loss, compromised banking information, and negative effects on business relationships,” says Dan Kelly, president and CEO, Canadian Federation of Independent Business. SMEs have invested on average $6,700 in upgrading their IT infrastructure, but last year 61,000 of them still became victims of cyberfraud. The standard is available is available here