In response to the evolving events in the Middle East, NCSC is advising that UK organisations review their cyber security posture.

Are your staff fully aware of current and emerging cyber threats?

The NCSC has issued an alert advising businesses take action following the conflict in the Middle East. Clearly, organisations operating in or with Middle Eastern countries are at risk, but the conflict also poses additional threats to businesses of all sizes, regardless of whether they have links to the Middle East.

In the alert, NCSC recommends that businesses prepare to respond to the risk of collateral impacts in the UK from Iran-linked hacktivists by reading previously issued advisories on topics like DDoS attacks and phishing; you and your staff may not know what they are, but they are applicable to SMEs.

Employees are the first layer of cyber defence in any business, so it’s essential to ensure they can spot common cyber security issues or risks. The training is aimed at those with little or no technical knowledge and delivered in small, succinct modules supported by real-world examples relevant to the business’s context.

Based on the National Cyber Security Centre’s guidance, Security Awareness Training for Small Businesses provides employees with a basic yet effective understanding of their cyber environment and the confidence to recognise and report potential security issues.