Small business security trends for 2021

Issue 1 2021 Information Security

A data breach could cripple your small business, costing you thousands or millions of Rands in lost sales and/or damages. High-profile cyberattacks on companies have raised awareness of the growing threat of cybercrime. Recent surveys conducted by the Small Business Authority, Symantec, Kaspersky Lab and the National Cybersecurity Alliance suggest that many small business owners are still operating under a false sense of cybersecurity.

The statistics of these studies are grim. The vast majority of small businesses lack a formal Internet security policy for employees and only about half have even rudimentary cybersecurity measures in place. Furthermore, only about a quarter of small business owners have had an outside party test their computer systems to ensure they are hacker proof and nearly 40% do not have their data backed up in more than one location.

Ransomware threats will increase

The sad reality of COVID-19 and its first, second and potential further waves is the continuously growing unemployment around the world. This has created concern over the distribution of wealth, and hackers are doing their utmost to harm corporate entities through cyberattacks. The sudden need to safely support scores of remote workers has raised concerns over the vulnerability of systems and data.

The financial industry is one of the most threatened by cybersecurity trends in 2020-2021, and for obvious reasons. Whether it is a disgruntled employee or a vigilante hacker, one individual is enough to harm the stability of a financial business.

How do you protect all your endpoints if they can be anywhere and perhaps on devices you don’t control? Is your organisation prepared for the increasing sophistication and professionalism of organised cybercriminals? Can your security infrastructure and staff pivot and adapt to rapid changes?

To cope with these permanent changes and enhanced threats, companies are looking at several technologies to pilot or implement in 2021:

• Trust no one (40%).

• Deception technology (32%).

• Authentication solutions (32%).

• Access controls (27%).

• Application monitoring (25%).

• Cloud-based security services (22%).

There will be huge security impacts in the coming year from the move to work from home (WFH) fuelled by COVID-19. More attacks will occur on home computers and networks, with bad actors even using home offices as criminal hubs by taking advantage of unpatched systems and architectural weaknesses. But this is not the only threat:

• The rush to cloud-everything will cause many security holes, challenges, misconfigurations and outages.

• More growth in the security industry. The number of new products and new-year mergers and acquisitions will cause network complexity issues and integration problems and overwhelm cyber teams.

• Privacy will be a mess, with user revolts, new laws, confusion and self-regulation failing.

• Identity and multi-factor authentication (MFA) will take centre stage as passwords (finally) start to go away in a tipping-point year.

• There will be many new high-profile Internet of Thing (IoT) hacks, some of which will make headline news.

• Ransomware will get worse and worse, with new twists, data stealing prior to encryption, malware packaging with other threats and very specific targeting of organisations.

• Lots of 5G vulnerabilities will become headline news as the technology grows.

• Advanced Persistent Threats (APT) attacks will be widely available from criminal networks. The dark web will allow criminals to buy access into more sensitive corporate networks.

• Mobile devices, including smartphones, will be attacked in new ways, including via app stores.

• Cryptocurrencies will play new roles, with criminals switching often for obscurity advantages.

• As digital transformation projects grow, many plans will implode as security challenges mount.

Worldwide 5G implementation

We live in an increasingly cloud-based world when it comes to data transfers, storage, and SaaS. Both the B2B and B2C sectors will soon have the opportunity, and later be mandated, to shift toward 5G data management technology. 5G is expected to cover almost 40% of the world by 2024, with data transfer speeds of up to 10 GBps or more. While the technology will certainly make life easier, it will also open the door for new cybersecurity threats to emerge.

With high-speed data transfers, hackers will have the ability to infect data packets and conduct corporate espionage unnoticed. That is until companies shift their focus to keep a close eye out for such malicious breach attempts. Much higher levels of security and monitoring will be required once 5G becomes the standard form of cloud-based data transfer and communication.

Some solutions

1.) The first and foremost solution to prevent cyberattacks is to have a secure and sophisticated hardware architecture which is password protected and backed up with multi-factor authentication.

2.) Safeguard your company’s hardware (like storing the data in the cloud).

3.) Encrypt data to give your company an upper hand when your data falls into the wrong hands.

4.) Backup your data. Sometimes, no matter how hard you try, hackers get into your network and try to encrypt your data with ransomware.

5.) Invest in cybersecurity insurance.

6.) Educate employees on the latest happenings in the cyber landscape.

7.) Use anti-malware solutions and protect enterprise networks with efficient firewalls.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Managed security solutions for organisations of all sizes
Information Security
Cyberattackers have become significantly more sophisticated and determined, targeting businesses of all sizes. PwC’s Global Digital Trust Insights Survey 2025 Africa and South Africa highlights the urgent need for organisations to implement robust cyber risk mitigation strategies.

Read more...
Multiple IoT devices targeted
Information Security Residential Estate (Industry)
Mirai remains one of the top threats to IoT in 2025 due to widespread exploitation of weak login credentials and unpatched vulnerabilities, enabling large-scale botnets for DDoS attacks, data theft and other malicious activities.

Read more...
Local-first data security is South Africa's new digital fortress
Infrastructure Information Security
With many global conversations taking place about data security and privacy, a distinct and powerful message is emerging from South Africa: the critical importance of a 'local first' approach to data security.

Read more...
Sophos launches advisory services to deliver proactive cybersecurity resilience
Information Security News & Events
Sophos has launched a suite of penetration testing and application security services, designed to identify gaps in organisations’ security programs, which is informed by Sophos X-Ops Threat Intelligence and delivered by world-class experts.

Read more...
Kaspersky highlights biometric and signature risks
Information Security News & Events
AI has elevated phishing into a highly personalised threat. Large language models enable attackers to craft convincing emails, messages and websites that mimic legitimate sources, eliminating grammatical errors that once exposed scams.

Read more...
Software security is a team sport
Information Security Infrastructure
Building and maintaining secure software is not a one-team effort; it requires the collective strength and collaboration of security, engineering, and operations teams.

Read more...
Stronger cloud protection
Kaspersky Information Security Products & Solutions
Kaspersky has announced the release of an enhanced version of its Kaspersky Cloud Workload Security, delivering advanced protection for hybrid and multi-cloud environments.

Read more...
AttackIQ enters South Africa with key appointment
Information Security News & Events
AttackIQ, a provider of continuous security validation and exposure management, has announced its entry into the South African market with the appointment of Luke Cifarelli as its country manager.

Read more...
Managed security solutions for organisations of all sizes
Information Security News & Events
Cyber attackers have become significantly more sophisticated and determined, targeting businesses of all sizes. PwC’s Global Digital Trust Insights Survey 2025 Africa and South Africa highlights the urgent need for organisations to implement robust cyber risk mitigation strategies.

Read more...
Data resilience at VeeamON
Technews Publishing SMART Security Solutions Infrastructure Information Security
SMART Security Solutions attended the VeeamON Tour in Johannesburg in August to learn more about data resilience and Veeam’s initiatives to enhance data protection, both on-site and in the cloud.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.