2:17 AM on a Saturday morning: a cyber crook slips into a businesss network before anything even wakes up.
The office is closed, the bosses are at home, and business seems to be as quiet as a mouse. By Monday AM, however, staff cant get to their files, invoices wont get drawn up, customers cant be served and years of valuable business data is locked up with a ransom demand.
Most victims thought this sort of thing would never happen to them. Most businesses think the same. That is exactly why this sort of cyber crime is so good at getting away with it.
Cyber Crime Is Now A Thriving Industry
The image of a lone hacker in a bedroom is a whole lot further away from the real world of cyber crime than we ever thought. A lot of these gangs now operate like any other business. Theyve got software, processes, teams, negotiators and payment plans – the whole nine yards.
Their aim isnt just to mess with you for the sake of it – its to make money off your weaknesses. And thats not just about locking up your systems with ransomware. It can also mean stealing your data, taking over your email, siphoning off customer payments, or actually using your business to hack customers and suppliers.
“If you want a straightforward look at how cyber crime works these days, I reckon the BBCs Cyber Hacks podcast is worth a listen. Its all about online investigations, scams and how these gangs operate.” Steffan Dancy, Rydal Group
How Most Businesses Get Caught Off Guard
A cyber attack usually starts with something pretty ordinary.
Someone clicks on a dodgy email, or uses a password theyve used elsewhere. A laptop misses a software update. Someone can snoop on a mailbox without anyone even noticing.
The attacker then just waits for the perfect moment to act – and that can be overnight, or at the weekend.
The Real Cost Of A Cyber Attack
The damage from a cyber attack isnt just the ransom demand.
Its the week your team cant work, the customers cant be served, the contracts get held up, the bosses have to waste their time firefighting… and all the awkward conversations that follow.
Some businesses recover quickly because theyd prepared. Others take months… or they may never fully recover.
That’s why businesses should treat cybersecurity as a core business continuity issue, not just a technical concern.
Why Rydal Is Raising The Minimum Standard
As an IT partner, we see these risks all the time. We see phishing attempts, Microsoft 365 accounts getting compromised, suspicious sign-ons, ransomware getting out of hand and businesses relying on security measures that just aint enough anymore.
We reckon its time to bring the minimum standard into line with what any decent business needs to stay safe.
This isnt about making technology more complicated. Its about making it harder to get in, easier to recover from, and overall more robust.
What To Look For In Your IT Partner
Cyber security is not just about the tools a business uses. Its also about the partners you trust.
Your IT partner is in a pretty privileged position – theyre probably going to be supporting your systems, getting into your cloud services, managing your devices and looking after your data. Which means they should take it really seriously.
And that means they need good insurance, proper governance and a responsible attitude to risk.
When youre looking for an IT partner, you shouldnt be just looking for the cheapest option. You should be asking about their internal controls, their insurance, their governance… and their overall approach to risk.
At Rydal, we invest in the right insurance, the right controls and the right standards because our clients depend on us. We dont just tell our clients to take cyber security seriously while ignoring it ourselves. We apply the same principle to our own organisation and the clients we work with.
A Protected Business Isn’t Just About One Product Or Gadget
Its about a sensible set of layers working together – like a firewall, some regular backup and proper identity protection.
In simple terms, thats what we reckon a modern. business should now have in place.
Passkeys & YubiKeys – Explained in a Nutshell
A cyber attack can often start with identity theft.
In simple terms, a bad guy gets in by pretending to be a genuine user. Passwords are weak because they can be stolen, guessed, reused, or bought online after a breach.
Passkeys and YubiKeys are better because they make it much tougher for crooks to get in with stolen login details.
What is a Passkey?
A Passkey is a safer and easier way to replace passwords. Instead of typing a password, you prove its you using your phone, laptop or tablet – often with your face, fingerprint or device PIN.
What is a YubiKey?
A YubiKey is a small physical security key. Think of it like the key to your office. Even if someone knows a password, they still can’t get in without the physical key.
So why are they better?
A password is something that can be stolen. A Passkey is tied to your trusted device. A YubiKey requires you to have the physical key.
Together, they make it much harder for bad guys to get into your accounts and reduce our reliance on passwords – which are one of the main ways that cyber crooks get in.
Who’s Watching While You Sleep?
Our Security Operations Centre is like having a security team for your technology, 24/7.
While you’re sleeping, travelling, or just not at your desk, trained cyber security analysts are keeping an eye out for anything suspicious.
If they spot something odd, they investigate it. If they identify a genuine threat, they can take action before it gets out of hand.
Most businesses don’t leave their office building unattended overnight, and we apply the same thinking to your systems, accounts and data.
People Matter Just as Much as Tech
Technology is important, but so are people.
A cyber attack can start with a convincing email, a fake login page or a dodgy request that looks legitimate.
That’s why clients using our recommended security package get Security Awareness Training and phishing simulations thrown in for free.
Normally we’d charge extra for this, but we include it because a well-trained employee can stop an attack before it becomes a bigger problem.
Why Cyber Essentials Plus Matters
Cyber Essentials Plus is a UK cyber security certification that’s a bit like an independent health check for your cyber security.
It helps you prove that you’ve got the right protections in place and they’re working.
This matters because customers, insurers, procurement teams, and anyone looking to do business with you want to know that you take cyber security seriously.
For some businesses, Cyber Essentials Plus is the cyber security equivalent of having quality standards in place.
We’re offering a 15 percent discount on Cyber Essentials and Cyber Essentials Plus certification for all our clients using our recommended security framework.
Frequently Asked Questions
Why Are We Doing This now?
The threat level has changed.
What was acceptable a few years ago isn’t enough anymore.
The New Reality
Twenty years ago, a firewall was enough to keep you safe.
Ten years ago, multi-factor auth became essential.
Today, businesses need stronger identity protection, independent backup, continuous monitoring, trained people and evidence that controls are working.
Businesses that recover best from a cyber attack are the ones that prepare ahead, not those with the biggest budgets.
Here at Rydal, we think the minimum security standard has changed.
That’s why we’re introducing a more robust framework for our managed clients, built around Passkeys, YubiKeys, 24/7 monitoring, independent backup, Security Awareness Training and Cyber Essentials Plus.
Not to make technology more complicated – to make your business more secure.