When we think about cyber security in business, it's easy to think first about systems, software and IT teams, but protecting a business also comes down to people and the everyday decisions they make.
An email that appears to come from a colleague, a supplier asking you to change their bank details, or an urgent request for a payment.
Cyber security isn't only an IT responsibility, everyone within a business has a role to play in protecting customers, colleagues and the organisation.
Be cautious when something changes
If a supplier you regularly work with suddenly asks you to send payments to different bank details, don't rely solely on the email you've received.
Check the request independently using contact details you already know, such as the supplier's official website.
The same principle applies to unusual requests that appear to come from colleagues, customers or senior members of the business. Always verify any changes independently before making a payment.
Don't let anyone rush you
Businesses move quickly, and there will always be genuinely urgent requests, but urgency shouldn't mean bypassing your normal processes.
If a request involves money, confidential information or a change to established arrangements, take the time to make the appropriate checks.
Make it easy for people to question something
Your people can be an important part of keeping your business secure.
Employees should feel comfortable asking questions if something doesn't look right, even if the request appears to have come from someone senior.
Creating that culture can be just as important as having a process written down.
Have clear financial processes
Simple procedures can add another layer of protection.
Who can authorise payments? How should a change of bank details be confirmed? When should another colleague check a transaction?
These don't necessarily need to be complicated processes, they simply need to be understood and followed consistently.
Pick up the phone
The world is a small place and many of us work closely with our customers, suppliers and professional advisers.
Use those relationships.
If something seems unusual, contact the person or business directly through a number you already know and check. Scammers can also fake voices and use convincing QR codes, so don't assume a request is genuine just because it looks or sounds familiar.
Sometimes a quick conversation is all it takes.
Make cyber security part of everyday business
Cyber security shouldn’t be something a business thinks about only when something goes wrong.
Regular reminders, straightforward processes and a culture where people are encouraged to stop and check can all help.
Take your time, follow your processes, and if something doesn't feel right, check.