CYBERSECURITY CHECKLIST FOR BUSINESS OWNERS

A thorough introduction to commercial cybersecurity.

Clements, the founder of the Chicago Technology Group, a cybersecurity firm, notes that both threats to businesses’ technology assets and the costs of prevention are on the rise. Per the author, most small businesses don’t have a comprehensive cybersecurity program, or even a full-time IT staff, and as a result are likely vulnerable to attack. While Clements ultimately recommends the application of professional expertise, before this stage a business can still conduct a wide-reaching (if preliminary) review of its cybersecurity, including an inventory of vulnerable assets, sensitive data, and various “attack surfaces,” entry points open to illicit incursions. The core mechanism of such a self-assessment is a cybersecurity checklist that provides a panoramic survey of business risks paired with “action plans,” strategies to increase a business’ ability to minimize and respond to those risks. In this impressive synopsis of a complex subject, Clements covers a broad spectrum of topics, including expected subjects like firewalls and wireless networking, in addition to more esoteric considerations, such as the dangers of outsourced labor. The highlight of the book—and there are many useful aspects to this exceedingly practical volume—is the discussion of cybersecurity insurance and its central importance to a general security strategy. This treatment is helpfully paired with an exploration of compliance regulations and industry safeguards—and the steep costs associated with their neglect. The author includes many concrete examples that lucidly illustrate his points. The book’s language is largely free of hypertechnical jargon and is accessible to readers with minimal knowledge about the subject. There are now many such introductions to cybersecurity available, but Clements’ contribution to the literature is an attractive option for the business owner looking for a brief but detail-rich primer.

A valuable resource for business owners—especially those whose businesses are “heavily digitized.”