--- title: A Cybersecurity Checklist For The New Norm description: Unauthorized software and devices and stressed and distracted workers have expanded the attack surface and left businesses exposed to a number of cyber-risks. Small and medium-sized businesses in part --- [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/head-logo-2.svg "TowerWall")](https://towerwall.com/) [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/towerwall-logo-white-test.svg "TowerWall")](https://towerwall.com/) - [Our Partners](https://towerwall.com/how-we-protect-you/our-technology-partners/) - Our Solutions - - Our Cybersecurity Solutions - We operationalize infosec, building security solutions that safeguard your most critical assets. - - [Solutions Overview](https://towerwall.com/cybersecurity-solutions/) - [Risk Assessments & Security Reviews](https://towerwall.com/cybersecurity-solutions/risk-assessments-security-reviews/) - [Program & Policy Development](https://towerwall.com/cybersecurity-solutions/program-policy-development/) - [Incident Response & Remediation](https://towerwall.com/cybersecurity-solutions/incident-response-remediation/) - [Managed Detection & Response](https://towerwall.com/cybersecurity-solutions/managed-detection-response/) - - [Compliance & Privacy](https://towerwall.com/cybersecurity-solutions/compliance-privacy/) - [Comprehensive Security Training](https://towerwall.com/cybersecurity-solutions/comprehensive-security-training/) - [Vulnerability Protection](https://towerwall.com/cybersecurity-solutions/vulnerability-protection/) - [Penetration Testing](https://towerwall.com/cybersecurity-solutions/penetration-testing/) - Virtual Security Officers - - Virtual Security Officer - Leverage the experience and security acumen of Towerwall’s on-demand security experts. - - [Virtual Chief Information Security Officer (VCISO)](https://towerwall.com/virtual-security-officers/virtual-chief-information-security-officer-vciso/) - [Virtual Data Protection Officer (vDPO)](https://towerwall.com/virtual-security-officers/virtual-data-protection-officer-vdpo/) - [Virtual Chief Privacy Officer (vCPO)](https://towerwall.com/virtual-security-officers/virtual-chief-privacy-officer-vcpo/) - We Advise - - We Advise - One-size security solutions only lead to failure. - Industries - [Higher Education](https://towerwall.com/industries/higher-education/) - [Financial Services & Banking](https://towerwall.com/industries/financial-services-banking/) - [Healthcare](https://towerwall.com/industries/healthcare/) - [BioPharma & Bio-Therapeutics](https://towerwall.com/industries/biopharma-bio-therapeutics/) - [Retail](https://towerwall.com/industries/retail/) - [Government](https://towerwall.com/industries/government/) - [Catholic Diocese](https://towerwall.com/industries/catholic-diocese-cybersecurity/) - [Cannabis](https://towerwall.com/industries/cannabis/) - [Small Business](https://towerwall.com/industries/small-business/) - [Enterprise](https://towerwall.com/industries/enterprise/) - Trends & Threats - [Remote Workforce](https://towerwall.com/trends-threats/remote-workforce/) - [Vendor Questionnaire](https://towerwall.com/trends-threats/vendor-questionnaire/) - [HIPAA](https://towerwall.com/trends-threats/hipaa/) - [Ransomware](https://towerwall.com/trends-threats/ransomware/) - [GDPR](https://towerwall.com/trends-threats/gdpr/) - [Cloud Security](https://towerwall.com/trends-threats/cloud-security/) - [Phishing](https://towerwall.com/trends-threats/phishing/) - [Cybersecurity Insurance](https://towerwall.com/trends-threats/cybersecurity-insurance/) - [Resources](https://towerwall.com/resources/) - - Resources - Our latest insights, events, and tools to keep you safe. - - [Insights](https://towerwall.com/resources/?resources_category=MTU%3D&focusarea=0&industries=0&search=) - [Webinars](https://towerwall.com/resources/?resources_category=MTg%3D&focusarea=0&industries=0&search=) - [Whitepapers](https://towerwall.com/resources/?resources_category=MTY%3D&focusarea=0&industries=0&search=) - [View All](https://towerwall.com/resources/) - [Company](https://towerwall.com/company/) - - Our Company - We are the industry’s leading cybersecurity preparedness partner. - - [Who We Are](https://towerwall.com/company/) - [Our Team](https://towerwall.com/company/our-team/) - [Our Approach](https://towerwall.com/our-approach/) - [Our Values](https://towerwall.com/company/our-values/) - - [Awards & Recognition](https://towerwall.com/company/awards-recognition/) - [Certifications & Affiliations](https://towerwall.com/company/certifications-affiliations/) - [Community Involvement](https://towerwall.com/company/community-involvement/) - [Careers](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) Topics Phishing, ransomware, COVID-19, cannabis, Enterprise # A Cybersecurity Checklist For The New Norm [By Michelle Drolet](https://blog.towerwall.com/author/towerwall2020) [Read More](https://blog.towerwall.com/author/towerwall2020) 2 Minute Read October 08, 2020 Unauthorized software and devices and stressed and distracted workers have expanded the attack surface and left businesses exposed to a number of cyber-risks. Small and medium-sized businesses in particular are most vulnerable since [a majority](https://techhq.com/2019/07/two-thirds-of-smes-run-old-or-expired-microsoft-os/) of them run legacy or outdated systems. In such challenging times, management teams need to have strong oversight on the cyber-threat landscape. ### Tactics To Reduce Cybersecurity Risks An ounce of prevention is worth a pound of cure. This Benjamin Franklin axiom is not only glaringly true in pandemic times but also in the world of cybersecurity. Similar to mask wearing and hand washing, it’s important that businesses follow cyber-hygiene best practices to ensure attackers are thwarted from gaining access to your network in the first place. Organizations can use this cybersecurity checklist as a guide to reduce their overall exposure to cyber-risks: **Patch systems on a priority.** Research has shown that for small and medium-sized enterprises, [three-fourths](https://techhq.com/2019/07/two-thirds-of-smes-run-old-or-expired-microsoft-os/) of unpatched vulnerabilities are over a year old. It is estimated that unpatched vulnerabilities cause [one in three breaches](https://www.zdnet.com/article/cybersecurity-one-in-three-breaches-are-caused-by-unpatched-vulnerabilities/). Having a system in place to discover, test and deploy patches is a vital first step in defending against cyber-attacks. Don’t forget to isolate systems you cannot patch by restricting access to those systems. **Eliminate exposed ports and services.** There has been a surge in the use of Remote Desktop Protocol (RDP) recently owing to the pandemic. RDP ports are often exposed to the internet, which led to remote desktop accounts reportedly being [hit by millions of automated attacks](https://threatpost.com/millions-brute-force-attacks-rdp/155324/) recently. As a security best practice, regular port scans and penetration testing must be conducted to ensure there are no unchecked vulnerabilities. Ports that are not in use must be closed, and businesses must install a firewall and monitor and filter port traffic. Research found that [almost two-thirds](https://blog.alertlogic.com/65-of-port-vulnerabilities-target-just-three-ports/) of port attacks target only three ports. It might also be a good idea to disable [SMBv1 protocol](https://www.forbes.com/sites/lconstantin/2017/07/21/decades-old-network-protocol-puts-companies-at-risk-and-refuses-to-die/#5f65e978928e) as this is widely used as a means to carry out ransomware attacks. **Protect against phishing and other email-borne attacks.** To keep the enterprise secure, employees need regular training on phishing scams and deception techniques to avoid putting the business at risk while working from home. It is also important to block potentially malicious file attachments (such as .exe, .bat, .js, .vbs, etc.) and also disable macros and Object Linking and Embedding (OLE) packages as these could launch malicious scripts. **Secure your web browser.** Even the most legitimate websites can serve up a malware-laden advertisement. This technique is known as [malvertising](https://www.forbes.com/sites/forbestechcouncil/2020/02/03/protect-yourself-from-ad-threats-and-malvertising/#68f251d743d8). Use of ad blockers and end-point security can help block such unwanted ads. **Deploy a system to proactively monitor and protect endpoints. ** Patching, isolation and limiting risky behavior can greatly reduce the chances of cyber-attack. But it’s also no secret that many attacks happen from [zero-day threats](https://www.techopedia.com/definition/27451/zero-day-threat#:~:text=A%20zero%2Dday%20threat%20is,of%20the%20exploit%20or%20bug.). Hence, it’s important to monitor systems, servers and endpoints for unusual behavior. Next-generation endpoint security can help detect unauthorized behavior of users, applications, and network services and also block suspicious actions before execution. Although nothing can guarantee absolute defense against threats, it’s important to keep a close eye on evolving cybersecurity trends and best practices to avoid unnecessary costs or business disruptions. [This article was original posted on Forbes Technology Council >](https://www.forbes.com/sites/forbestechcouncil/2020/10/08/a-cybersecurity-checklist-for-the-new-norm/#5bbbdcfa155a) #### A Cybersecurity Checklist For The New Norm Back to Top ## Related Insights ### [Debunking 5 Reasons Businesses Use to Not Invest In Computer Security](https://blog.towerwall.com/debunking-5-reasons-businesses-invest-computer-security) Phishing, ransomware, COVID-19, cannabis, Enterprise ### [Four Important Things Cannabis Businesses Can Learn from the Recent Equifax Data Breach](https://blog.towerwall.com/four-important-things-cannabis-businesses-can-learn-from-the-recent-equifax-data-breach) Phishing, ransomware, COVID-19, cannabis, Enterprise [View All Insights](https://blog.towerwall.com) × ## Talk with us now about: #### Your security needs. - ![Phone](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/phone-icon.svg "Phone") [Call 774.204.0700](tel:774.204.0700) - ![Mail](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/mail-icon.svg "Mail") [Email Us](mailto:info@towerwall.com) ### The front line of cybersecurity.™ For over 23 years, Towerwall, a woman-owned business, has helped scores of companies safeguard their data and leverage their investment in IT with advanced information security technology solutions and services. Our experience in all facets of information security coupled with serving in the CIO/CISO/ISO roles provides a unique first-hand understanding of the security challenges organizations face daily. ### Connect - - - - - [Career Opportunities](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) © Towerwall, Inc. and its licensees. All rights reserved [Privacy Policy](http://towerwall.com/privacy-policy/) Sitemap [Created by Howbridge](https://meethowbridge.com/) [![Towerwall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/footer-logo.svg "Towerwall")](https://towerwall.com/)