MBA2567 Q&A Wednesday: How Can I Protect My Business from Cyber Threats?

Your online business is constantly under attack. You just don't know it. That's what Omar learned after 10 years of building and selling a 7-figure software company. In this Q&A Wednesday episode, Omar answers Josh's question about protecting your business from cyber threats. Here's the reality: 43% of cyberattacks target small businesses. And these attacks aren't just targeting tech companies – they're after everyone from course creators to pizzerias. The good news? You don't need to be a tech expert to protect yourself. Omar breaks down exactly what worked for WebinarNinja and The $100 MBA, including the sneaky attack that could have taken down the entire system (and the simple step that saved them). Plus, discover the one device switch that could instantly make your business more secure. Don't wait until you're scrambling to recover from an attack. Learn how to protect your business now, even if you're not a tech expert. Whether you're selling ebooks, running an online course, or managing a local business website, these seven steps will help keep your business safe. Submit your question for Omar here: https://100mba.net/q/Download the FREE checklist over at http://100mba.net/worksheets. Watch the episodes on YouTube: https://lm.fm/GgRPPHiSUBSCRIBEYouTube | Apple Podcast | Spotify | Podcast Feed

• 0:00Speaker 00

  Does it feel like it's getting really hard to figure out the best way to save for retirement? Fidelity can help you find clarity, so you can save the best way for you. With a free personalized plan, goal tracking, and timely insights, you'll be set to take on retirement your way. Get started at fidelity.com/future. Expenses charged by your investments and other costs and fees associated with trading or transacting in your account apply. Fidelity Brokerage Services, member NYSE, SIPC.

• 0:28Speaker 01

  Today's episode is supported by Cash App. When it comes to Bitcoin, you may be surprised to learn that it was invented way back in 2008. But you still haven't made the jump to Bitcoin yet? Cash App makes it easy. When you buy Bitcoin on Cash App, they hold real Bitcoin for you, one to one, and you can withdraw it anytime. It works more like real money and less like something locked in an account. No extra steps, no restrictions, just access and control when you need it. With Cash App, you can actually do that. For a limited time, new customers can get $10 added to their balance. Just use code BITCOIN10 when you sign up. And don't forget this part: send at least $5 to a friend in the first two weeks. Terms apply.

• 1:11Speaker 01

  Cash App is a financial services platform, not a bank. Banking services provided by Cash App's bank partners. Bitcoin services provided by Block Incorporated brand. For additional information, see the Bitcoin disclosures at cash.app/legal/podcast. Your online business is constantly under attack. You just don't know it. That's what I learned after 10 years of building and selling a seven-figure software company. On today's Q&A Wednesdays episode, we answer a question from Josh that asks, "How can I protect my business from cyber threats?" Welcome. I'm Omar Zenhome, and this is the $100 MBA Show, where I teach you how to start, grow, and scale a business three days a week.

• 1:55Speaker 01

  Josh's question is such an important one. Cyber threats are real, and they're not just targeting big companies. Small businesses are in the crosshairs constantly as well. And if you're not prepared, it can cost you more than just money. can cost you your reputation and even your whole business. To make today's lesson even easier, we've created a free checklist for you to download. Just go to 100mba.net/worksheets. You can grab it and follow along as we break down to protect your business. Did you know that 43% of cyber attacks target small businesses? That's according to Verizon's data breach investigations report. Many of these businesses, maybe even yours, are incredibly unprepared. But there's good news.

• 2:40Speaker 01

  There are some really simple strategies that you can implement to make sure your business is much harder to attack. So that they just keep moving on. So today, I'm going to show you how to safeguard your business. I'm going to show you what worked for me with my businesses, some of the things I learned the hard way. So if you're not a tech expert, don't worry, this is going to be easy. I want to start by saying, when I started to get my head around this, like, what's going on here? Why am I being attacked? What did I do? Did I hurt somebody? Am I threatening somebody? And what I didn't understand is that there's just bad actors out there that just want to see the world burn. They just want to see what they can do, that what they can get away with. Sometimes they're doing this and they're not going to get anything in return.

• 3:24Speaker 01

  Like, they're not going to make any money, or they're not going to scam anybody into anything. They're just doing this because they can. So if I go back in time, I would just tell myself, don't worry so much about why these people are doing what they're doing. Focus on protecting your business. So that's where it starts. Step one, understanding the risks. The first step is protecting your business and knowing what you're up against. Cyber threats include a lot of things, but the most common ones are like phishing attempts, ransomware, malware, brute force attacks targeting your website, email breaches, or even breaches of payment processors. Now, I'm going to give you a little secret. A lot of the reasons why this happens is because you're vulnerable. You're an easy target.

• 4:07Speaker 01

  You're not doing the simple, basic things to protect yourself. We're going to talk about more and more of what you can do to protect yourself. But I just want to say that whatever your business is, whether you're have an online business because you're selling eBooks or Courses or coaching, this applies to you even if you're not in tech, even if you're not selling a software. Obviously, if you're selling a software like I did at Webinar Ninja, which I did for 10 years, I was more vulnerable. There was more things I had to worry about because there was more things that could technically go wrong. For example, inside of our software, Webinar Ninja, it had the ability to send mass emails, like email marketing, to those who sign up for webinars. This is pretty cool for the user because when somebody signs up for their webinar, they can automatically send an email to remind them of the webinar and send in the replay and all that kind of stuff.

• 4:53Speaker 01

  But anytime you have any kind of functionality in your product, it can be abused. So we had people trying to go into our accounts, sign up for free accounts, and use that email service to send out like spam emails to get people like sign up for some crypto scam or, you know, some fake pills. Luckily, we were able to recognize the threat early and allow us to act before the damage was done. I'm sharing this because most likely your product doesn't have sophisticated functionality, which makes you vulnerable, which requires a lot of sophisticated solutions. Like our team had to create honeypots. A honeypot's like a security mechanism that creates a virtual trap to lure attackers. We do it intentionally so that we can learn more about why they're attacking us and how they're attacking us, our vulnerabilities,

• 5:38Speaker 01

  so that we can study that and build security systems around it. I'm saying all this to say that there's a good chance that if your product is not a software, it's consulting, it's coaching, it's online courses, it's e-commerce, it's even you have a pizzeria and you have a website that allows you to do bookings, most likely you're not going to do any kind of sophisticated, you know, cybersecurity that you're going to need to do like we had to do. What I'm going to share with you today is some simple things you can do that are going to lower your chances of being attacked because you're just not going to be an easy target. But there is an action step to step one, knowing your risks, that I would encourage you to do. And I did this especially because I have a software company, but it's really important, is to consult with a cyber threat expert, right?

• 6:23Speaker 01

  You can find one on Upwork or any freelance site, and you could just consult with them for an hour or two where they can take- Take a look at your website, take a look at your online presence and ask you a bunch of questions and give you sort of like an audit and say, hey, this is the things I would change, the things I would do. Here are your vulnerabilities. I did this early on. I spent a few hundred dollars to consult with somebody who was really an expert, worked for the CIA, and knows a lot about cybersecurity and it paid dividends because it allowed us to build our policies and build a secure system. As they say, an ounce of prevention is worth a pound of cure. Step two, use strong passwords and two-factor authentication.

• 7:04Speaker 01

  This is one of the simplest things you can do in your business that will really prevent a lot of problems. There are so many people that don't do this and it's very, very easy to implement. And I share that because if so many people don't do it and you do it, then you're not an easy target. A weak password are hackers' dreams, right? These are passwords that are easy to guess, or they're common words, or they're dates. You should always create passwords that are random and generated. I use LastPass and you could use LastPass even if you're not using the tool. You can create a random password with a random password generator on their website. It creates like a string of letters and numbers and symbols that is just totally random.

• 7:45Speaker 01

  It's not something that you're going to remember, but you're going to save that password in some sort of password security vault. LastPass, for example, is one of them. This is something that's also like built into the iPhone. I know Google has their own as well. So make sure your passwords are random and different across all your tools. Don't use the same password. The next thing is two-factor authentication, 2FA. This adds an extra layer of security, making it significantly harder for attackers to access some of your systems. So we're talking about, you know, that system where you put in a password and then you have to do something else if it doesn't recognize who you are, because you're a new computer or something like that.

• 8:22Speaker 01

  And use like an authenticator app or you're using like an SMS service where they send you an SMS and you have to have the number that they give you in your SMS into that authentication or email or whatever it might be. For example, when you have 2FA, you will get a message and this happened to be the 100MB. Get a message or somebody attempting to try to reset your password or go through your system because it's gonna prompt and be like, hey, someone's trying to get into my system. I never did that. I never tried to get into my system or reset my password. That means I need to go in and try to reset my password. At least I was alerted because I had that second guard. So as an action step, use a password manager like LastPass to generate and

• 9:02Speaker 01

  store strong passwords. Use 2FA wherever possible in all your tools. I'm talking about everything in your digital world, especially when it comes to your business. That means email, that means website, that means admin to your website, that means your payment processor where you're actually receiving money, that means your web host, if you have a web hosting company, where you register your domain like GoDaddy, have 2FA there because if they have control of your domain, they can control basically anything they want and create emails under that domain and it's pretty dangerous. 2FA everywhere. Step three, keep your software and systems updated. Outdated software, like say for example, you're using an outdated release of WordPress, they contain

• 9:47Speaker 01

  vulnerabilities that attackers have exploited. This is why they're updating the software. There was some leaks in there, some problems, the hackers figured it out and they're updating the software to protect you. So you've got to make sure that all your systems are updated regularly. Most of the software and tools we use have automated updates, but make sure you have that switched on. Sometimes it's not on by default. For example, we got scared with an old plugin on our website that wasn't updated, leaving us a little bit vulnerable. I was alerted via email because we have these checks and balances on our system, letting us know that our plugin is outdated or not compatible with the latest software. So now what we do is we have a monthly

• 10:28Speaker 01

  maintenance where we have scheduled updates for all our tools, no matter what. So make sure right now that all your tools are updated, websites, plugins, operating systems, any software that you run your business, make sure you're using the latest version and then automate your updates where possible. Today's episode is supported by Rosetta Stone. I absolutely love Rosetta Stone because it's helping me learn Italian faster than I can ever imagine. Why do I want to learn Italian? Well, who doesn't love Italy? But of course, Nicole's family is Italian and I'd love to have some quick Italian conversations with her mom. And Rosetta Stone just came out with Rosetta Stone Sapphire, their biggest launch in over a decade.

• 11:09Speaker 01

  One of the coolest features is chat missions, which turns conversation practice into a game. With chat missions, you're put in interactive scenarios and given three objectives. A mission to accomplish, like asking how much something costs, ordering a cold brew coffee, or getting a Wi-Fi password. Along the way, you get real-time corrections and feedback to help you sound more natural and confident. It's a supportive way to build confidence before putting your language skills to use in real life. I've been using Rosetta Stone for over two years and I actually can have some small Italian conversations with Nicole's mom now. Just the other day, she asked me, "When are you traveling?" And I said, "Dopo domani mattina," which means "after tomorrow morning." She was incredibly impressed I was able to answer in Italian. How could you put a price tag on a happy mother-in-law?

• 11:53Speaker 01

  If you want to take your language skills to the next level, don't wait to try Rosetta Stone Sapphire. The $100 ratio listeners can get 20% off the Rosetta Stone Sapphire subscription when they sign up today. This gets you access to Rosetta Stone Sapphire in 25 languages. Support for today's episode comes from Square. You probably know Square is the thing you tap your card on at your favorite coffee shop, restaurant, salon, or local store. But for the person running that business, Square is a whole lot more than a way to get paid. Square brings the tools you need to run and grow your business together in one system. From payments on appointments, to staff, inventory, sales, and customer relationships. Whether you're selling lattes, cutting hair, detailing cars, running a restaurant, or starting something new.

• 12:35Speaker 01

  Square keeps your business tools working together so you can focus less on managing the moving parts and more on what's next. And right now, listeners can get up to $200 off Square hardware when you sign up at square.com/go/mba. That's S-Q-U-A-R-E dot com slash go slash M-B-A. Visit Square to get started because running a business is complicated enough. Your tools don't have to be.

• 13:01Speaker 01

  Step four, back up everything. Ransomware and other attacks can lock you out of your own data on your own computer at home. Regular backups ensure that you can recover whatever gets corrupted very quickly. Sometimes it's not an attack. Sometimes, like what happened to me, my laptop just died. It just stopped working. It wouldn't boot up anymore and I took it to the Apple Store and it didn't work. And this happens with any manufacturer, right? But luckily I had several backups of my computer in the cloud. So that I had no problem getting a new computer and just restoring everything as if nothing happened. So as an action step, use some cloud-based backup solution for your computer to make sure

• 13:45Speaker 01

  that all your data is stored in the cloud and it's there as a backup. Set an automatic backup every single day. I have three backups, actually. One is iCloud. I use Apple iCloud to back up all my files. So I'm in the Apple ecosystem. The second one is Google Drive. I also have a backup of Google Drive of my computer, also on the backup in the cloud. And the third is I also have a backup of my computer through what's called a time capsule here on the Apple devices that I use. And that's actually a physical backup where I plug in a hard drive and once a month it kind of backs it up and makes sure everything is there. So I have a physical backup as well. One quick tip, if you're looking to buy a new computer, consider buying an Apple computer.

• 14:30Speaker 01

  Apple computers are factually safer, right? They are less open, so therefore they are less vulnerable to any kind of breach or privacy concerns that you might have. You just can't install any kind of software you want on Apple. It has to come from the App Store. There's a lot of checks and balances with Apple. I have to say, you know, a lot of people like the customability of Windows or a PC, but the security and the privacy of Apple really is, gives me peace of mind as a founder of an online business. I want to make sure that security is a priority. Step number five, everything I just talked about, train your team. Get everybody in your team to do the same thing. Strong passwords, two FA, right? Backups, all the things I mentioned today.

• 15:15Speaker 01

  Make sure your team is in this process, right? They're in the loop, they understand what the risks are and they understand that this is a priority. Human error is one of the leading causes of cyber breaches, right? You have to have policies in place to make sure that people know that they have to log off their computers. They don't leave their computers, you know, kind of on or unlocked when they're at cafes or when they go to the bathroom or something like that. Even if they have maybe a busy home with a lot of traffic and extended family, they gotta be super careful because they gotta make sure that your company and your information is protected. They also need to be trained to recognize phishing emails, suspicious links. We have a policy in our company where we just don't click on links that we don't

• 16:00Speaker 01

  recognize. When we were at Webinar Ninja, where we had our customer support team, we don't click on links, period, right? We just had a policy. If a customer sent us a link to a screenshot, we said, please attach a screenshot because we don't click any links to make sure that there's no vulnerabilities. These practices can prevent a lot of attacks from happening. So, train your team. One of the easiest ways to do this is to just simply get on a live call, like a Zoom meeting, and show your team what you did to implement some of these security measures, right? The 2FA, the, you know, strong passwords, making sure everything's backed up, showing them how you did all that, and training them live on a call. Get them to share a screen and go through that with you, okay? And then,

• 16:42Speaker 01

  you can save that recording and anybody who gets hired on your team has to watch that recording and implement it and send you a recording that they've done it. Step six, use secure hosting and payment platforms. Do not go cheap in these two areas. Make sure you get the highest quality hosting and payment processing you can find because these are the biggest vulnerabilities you can have where you host your website and how you process payment, how you handle your customers' credit cards, all that kind of stuff. These are prime targets for hackers. So, using secure hosting with CPI compliant payment processors reduces your risk. So, processors like Stripe are compliant, but

• 17:26Speaker 01

  if you're thinking about shopping around for a different problem payment processor, make sure they're PCI compliant and they have high security measures. When it comes to hosting, just as important, after evaluating a lot of our options when it Came to our hosting our website at the hundred RBA. We moved to a hosting provider with built in DDoS protection. DDoS stands for Distributed Denial of Service Protection. In short, hackers will do something where they'll flood your servers with traffic to create a lot of load so it can go down, so your website can go down. And you can have problems and then you'll be even more vulnerable. We use a host called WP Engine. We absolutely love them. We use them for years. They're expensive, but they're great.

• 18:09Speaker 01

  So as an action item, research your hosting and your payment providers. Make sure they both have really high security features like SSL encryption, like fraud monitoring, like DDoS protection. Guys, we're in step seven now, the last step. Very, very simple thing to do that's going to actually help you stay calm in an emergency. And that's have an incidental response plan. This is one of the first things we created as a document when we built Webinar Ninja, our software company. Even with the best defenses, breaches can happen. Even with all the software and all the things you've done to protect your business, you need a plan. You need to have a plan in place that ensures you can act quickly to minimize any damage.

• 18:53Speaker 01

  So as an action step, draft a one pager, an incident response plan for your business. Include the key contacts, who you're going to contact. Do you have like somebody you can contact that's like the web developer, the web person that you can reach out to so they can fix the problem? Or you know, stop the bleeding? If not, get one, right? Have a step by step plan to secure the systems to gain control, whatever it might be. How are you going to communicate with your customers? What's your communication plan? Draft it now before things get real and you're nervous and you don't know what to say. Josh, you asked a great question today. Protecting your business from cyber threats isn't just about technology. It's about being proactive, about being protective of your business. Understanding the risks, using strong passwords, two FA, right?

• 19:38Speaker 01

  Two factor authentication, keep your systems updated all the time. Train your team, make sure that you know that this is a priority and that this is a part of them doing a good job. Most importantly, have a plan when things go wrong because they could go wrong. Even after all of this, we hope nothing goes wrong, but we don't want to hope. We want to be prepared. And don't forget, if you want to do this properly and you want to make sure you don't miss anything, download our free checklist at 100mba.net/worksheets. Thanks for tuning into the $100 MBA Show. I'm Omar Zenhome. If you're watching on YouTube and you found this episode helpful and you want more lessons to help you build, grow and scale your business, hit subscribe.

• 20:22Speaker 01

  I promise you, it won't hurt. It's absolutely free and I'll continue to give you valuable lessons to help build your business three days a week. If you're listening to this podcast on any podcast player, make sure you hit follow or subscribe and continue in your learning journey to build, grow and scale your business. Thanks so much and I'll check you in the next episode.

• 20:53Speaker 02

  Mazda has been named Consumer Reports' safest new car brand. It starts with our approach. Every Mazda comes standard with proactive safety features, so you're more aware of what's around you, more focused on the road ahead and ready before problems ever start. Mazda, more of what matters most to you. Go to MazdaUSA.com to learn more. Consumer Reports does not endorse or promote any product.