Fast facts to protect your business from fraud and cybercrime

Three common cyber attacks that target businesses

1. Phishing/spear phishing: tricking people into revealing personal information, such as passwords and credit card numbers through emails or fake websites
2. Business email compromise: sending emails to a business that appear to come from a known business source, requesting financial information or asking to process a payment
3. Malware: installing malicious software on a device, usually to collect personal information and credentials which can be used to commit fraud

Find out more about the three common cyber attacks (PDF, 300 KB).

Three industry best practices to protect your technology, people and processes

1. Technology: implementing technologies such as scaled multi-factor authentication, efficient patching for critical systems and robust identity management programs
2. People: ensuring that employees are aware of the common social engineering tactics used in cyber and fraud attacks, and implementing practices that mitigate risk, such as clear separation of duties and assignment rotations
3. Processes: integrating analytics to detect fraudulent transactions, testing cyber and fraud incident response, and collaborating with partners across the supply chain

Find out more about best practices to protect your business (PDF, 300 KB).

The bottom line

Arming yourself and your team with knowledge is a vital step in protecting your business. Sharing these fact sheets with your colleagues and employees will help foster a culture of security to avoid fraud and cybercrime.