Need to know website security for business leaders

There is no disputing that a company website is among the most valuable assets a business owns. With the average user forming an opinion about a website in 0.05 seconds, businesses are (rightly) investing heavily in website build and design. But all that amazing capability and ecommerce is completely pointless if it's easy to hack.  

If you run or work for an SME, the chances are there will be someone in your team that is closely involved with your website and by extension, its cyber security. Below we break down the top five security protocols that should be enforced at a bare minimum.  

SSL  

SSL is a security protocol that provides privacy, authentication, and integrity to Internet communications. It works by ensuring that any data transferred between users and websites, or between two systems, remains impossible to read. It is possible, that even with a newly developed website this may not be enabled.  

2 FACTOR AUTHENTICATION

Ideally, this should be enabled for anyone who has a login to your website, no matter their level of access. Editors should be non-negotiable. Some of the most secure ways to implement 2FA are via an authentication App or hardware based 2FA. In the IT WORKHOUSE office, we use Yuikeys that are authorised via fingerprint recognition.  

reCAPTCHA

reCAPTCHA is a fraud detection service that stops bots and other automated attacks while approving valid users. The technology works by providing a login test that is easy for humans to pass but bots cannot. We would recommend adding reCAPTCHA on logins to block bot access to the main site and adding it to your website contact forms to decrease the number of spam submissions.    

UPDATES

Ensure your website is updated regularly. Reputable website providers will be constantly working on security patches for the most recently discovered vulnerabilities on your site, so it is essential that you keep on to of this to receive the most effective protection.  

SECURITY PLUGIN

We would recommend Sucuri as the best product that will work effectively with a large amount of website providers. There's even a free malware checker on their website where you can scan your URL and check for any malicious code, viruses, website errors or out-of-date software. There is a range of products that would work well with specific providers too eg Wordfence for Wordpress etc.  

WHATEVER you use your website for, it is essential you protect it properly. If you are stuck on where to go next CALL US.