Every company has a plan in case of a fire, but what do you do if you get hacked?
For many business owners, cybersecurity still seems like something that has nothing to do with them—until it’s too late. According to Johan Peereboom, CMO of information and security specialist OneXillium and a partner at “Echt niet vandaag,” cybersecurity should be just as much a given as fire prevention.
“Many organizations have their physical security well under control, but they forget that digital risks can cause much more damage. Everyone knows what to do in case of a fire. But what about a hack? That’s when panic and uncertainty set in—among both staff and management.”
OneXillium helps organizations work securely in the digital realm. Many organizations don’t know where to start when it comes to cybersecurity. They either lack in-house staff with the right expertise or don’t have the budget to hire such personnel. For a fixed monthly fee, OneXillium provides a CISO (Chief Information Security Officer) and a team of cybersecurity specialists. They identify vulnerabilities and ensure that companies’ digital security is consistently up to standard.
80% of small and medium-sized businesses
The situation is urgent. According to ABN AMRO, 80% of Dutch small and medium-sized businesses have already been victims of a cyberattack. A single password file stored without due care can be enough to result in a loss of millions. “We come across situations where usernames and passwords are simply stored in a folder on the desktop,” says Johan.
Ethical hackers
OneXillium works with ethical hackers and conducts risk assessments to identify vulnerabilities. “The question is never whether someone can get in, but how far a malicious actor can go and whether the damage can be limited. In practice, organizations sometimes receive a thousand reports a day. Only a handful of those reports are truly urgent. We help companies invest in security only where it’s really needed.”
Get the basics in order
Johan often sees that companies can make significant gains with just a few simple changes. “Make sure your basics are in order: think two-factor authentication, proper password management, and restricted access to sensitive information. Don’t put off updates, and train your staff to recognize phishing attempts. That sounds simple, but this is where things often go wrong. An initial risk assessment quickly provides direction. And of course, if you want to do it right, it’s smart to bring in a specialist. Digital security must become just as second nature as fire prevention.”
Free assessments and security programs
As a core partner of “Echt niet vandaag,” OneXillium offers free assessments and conducts penetration tests during the regional awareness days. They also make a CISO and a team of cybersecurity specialists available to one company for a period of 6 months. In addition, they give presentations to raise awareness. “A hack can destroy a lifetime’s work in a single weekend. That’s why we’re happy to contribute to prevention, so that organizations can take action in a timely manner.”
Source: Echt niet vandaag
Put digital security on your agenda
The message is clear: cybersecurity doesn’t belong on the IT department’s (or a partner’s) to-do list, but on the executive board’s agenda. Only then can there be clear leadership and a plan in place for when things go wrong. After all, if you’re prepared for a fire, you should be just as prepared for a digital fire.