Keep systems and cyber-defences up-to-date.

1. Check Your System Patching

System patching is essential to correct errors in software that could lead to vulnerabilities if not fixed. Make sure you patch the following

:• Users’ desktops, laptops and mobile devices (If possible, turn on automatic updates.)

• Firmware on your organisation’s devices• Internet-facing services

Additionally, review any unpatched systems. Ideally, all key business systems should be patched. If this isn’t practical, put mitigations for any remaining unpatched systems in place.

2. Check Your Defences

Bolster your defences by ensuring antivirus software is installed correctly and active on all systems.

Review all firewall rules regularly. These determine the network traffic allowed to enter and exit your network. Often temporary firewall rules are set up to enable a contractor or similar to perform a task for a particular timeframe. If such rules are left in place for longer than required, security risk increases.

Additionally, check the security defences of all other devices such as laptops and mobile phones. Consider the National Cyber Security Centre’s device security guidance.