BDC Releases IT Security Checklist for Small Businesses

The Business Development Bank of Canada (BDC) has published a new IT security checklist aimed at assisting small and medium-sized enterprises (SMEs) in preventing information technology security breaches. The guidance highlights that a significant majority of security incidents originate from unintentional employee mistakes, rather than malicious external attacks.

Industry research indicates that approximately four out of five Canadian SMEs report experiencing an information and communications technology (ICT) related security problem caused by an employee in the past year. Common errors include accidentally downloading malware, emailing confidential client information externally, or leaving sensitive customer data accessible on public computers.

The BDC checklist addresses key areas such as strategy and HR policies, data backup procedures, desktop security, internet and network security, and privacy of sensitive information. It advises businesses to implement clear ICT security policies, ensure regular off-site backups of critical data, maintain updated antivirus software and system patches, and encrypt sensitive customer financial information.

BDC emphasizes that IT security should be a regular part of a company's overall system review, not a sporadic effort. The bank recommends periodic audits to align technology with business strategy and offers resources for businesses seeking cybersecurity certification to enhance client trust.