10 steps to help prevent cyber attacks on your business

Midland offers a wide variety of services, from personal and risk insurance, through to property and business and even travel insurances. Whatever you need to secure, Midland has the product for you. Simply click on anyone of the listings to the right to be taken to the appropriate page. Or you can contact us for a no obligation quote or excellent advice on whatever it is you require.

Request A QUOTE

The latest cybercrime statistics make for sobering reading, with a 75 per cent rise in ransomware attacks in the 2021/2022 financial year and up to 200,000 vulnerable routers in Australian homes and small businesses.

The Australian Cyber Security Centre’s (ACSC) most recent annual report states medium-sized businesses with between 20 and 199 employees are the most at risk of attack, with the average cost of an attack for a business of this size being $88,407.

While the risk of cyberattack remains high, there any many preventative measures businesses can put in place to reduce the risk of attack and, should one happen, reduce its severity.

 

1. Make a plan

Your approach to cyber security should have a clearly articulated strategy that’s regularly revisited. This should guide the actions taken by the business to ensure it adopts the latest cyber risk mitigation techniques. ACSC recommends adopting eight security controls to help prevent attacks. This framework is useful for directing a business's actions around cyber security.

The controls include taking away unnecessary network administration privileges from employees who don’t need them and putting in place multi-factor authentication for access the network. These are described in more detail below.

 

2. Secure the business’ internet connections

Make sure all the points at which the business connects to the public internet, such as remote desktop applications, file sharing software and webmail are secure and not vulnerable to penetration by hackers. It pays to work alongside an experienced IT professional through this step.

 

3. Safeguard all devices

All the common tools your team uses to connect back to the business such as their laptops, tablets and smart phones also need to be secured to ensure they are not a back door through which criminals can enter a business and exploit its weaknesses.

 

“Medium-sized businesses with between 20 and 199 employees are the most at risk of attack”

 

4. Configure automatic updates for software

The business should be fully protected for viruses and spam through the protections of a suite of leading anti-virus anti-spam (AVAS) software solutions and intrusion detection systems. Make sure any patches and updates are automatically installed so you’re protected from emerging threats.

 

5. Automate back ups

Like software updates, data should be automatically and regularly backed up offsite to a system of servers not connected to the business. That way, if criminals do infiltrate the system, they cannot access back-ups through it and delete them. This means in the event of an attack, the business can be up and running in no time, having accessed the most recent back-up. These systems should also be regularly tested, well before an attack occurs.

 

6. Implement multi-factor authentication

It should be nearly impossible for criminals to get into a system if it has the right protocols in place. These can include, but are not limited to, multi-factor authentication and mandatory regular password updates. As a minimum, passwords should include a mix of lettering, numbers, symbols and cases. Passphrases are even better than passwords, as they can be harder to crack yet easier to remember.

 

7. Audit third parties

Criminals can gain access to your system through external parties such as suppliers if they can access your systems remotely. Regularly audit their cyber security protocols to identify and fix and insecurities through which hackers and scammers could access your business.

 

8. Train staff quarterly

Cyber security training should be a routine aspect of staff professional development. At least each quarter, train staff about the latest threats and run simulations to identify staff who are at risk of opening phishing emails.

 

9. Respond immediately to threats

Make sure to put protocols in place, so in the event of an attack, you can lockdown the system and stop criminals misusing it further.

 

10. Put in place a cyber insurance policy

Cyber policies can help businesses recover from an attack by paying for associated costs and helping to mitigate the effects.
Your broker can help you identify and address the cyber risks in your business. Talk to us today for your peace of mind.

You may also read:

 

10 steps to help prevent cyber attacks on your business

10 steps to help prevent cyber attacks on your business 

The latest cybercrime statistics make for sobering reading, with a 75 per cent rise in ransomware attacks in the 2021/2022 financial year and up to 200,000 vulnerable routers in Australian homes and small businesses.

The Australian Cyber Security Centre’s (ACSC) most recent annual report states medium-sized businesses with between 20 and 199 employees are the most at risk of attack, with the average cost of an attack for a business of this size being $88,407.

While the risk of cyberattack remains high, there any many preventative measures businesses can put in place to reduce the risk of attack and, should one happen, reduce its severity.

 

1. Make a plan

Your approach to cyber security should have a clearly articulated strategy that’s regularly revisited. This should guide the actions taken by the business to ensure it adopts the latest cyber risk mitigation techniques. ACSC recommends adopting eight security controls to help prevent attacks. This framework is useful for directing a business's actions around cyber security.

The controls include taking away unnecessary network administration privileges from employees who don’t need them and putting in place multi-factor authentication for access the network. These are described in more detail below.

 

2. Secure the business’ internet connections

Make sure all the points at which the business connects to the public internet, such as remote desktop applications, file sharing software and webmail are secure and not vulnerable to penetration by hackers. It pays to work alongside an experienced IT professional through this step.

 

3. Safeguard all devices

All the common tools your team uses to connect back to the business such as their laptops, tablets and smart phones also need to be secured to ensure they are not a back door through which criminals can enter a business and exploit its weaknesses.

 

“Medium-sized businesses with between 20 and 199 employees are the most at risk of attack”

 

4. Configure automatic updates for software

The business should be fully protected for viruses and spam through the protections of a suite of leading anti-virus anti-spam (AVAS) software solutions and intrusion detection systems. Make sure any patches and updates are automatically installed so you’re protected from emerging threats.

 

5. Automate back ups

Like software updates, data should be automatically and regularly backed up offsite to a system of servers not connected to the business. That way, if criminals do infiltrate the system, they cannot access back-ups through it and delete them. This means in the event of an attack, the business can be up and running in no time, having accessed the most recent back-up. These systems should also be regularly tested, well before an attack occurs.

 

6. Implement multi-factor authentication

It should be nearly impossible for criminals to get into a system if it has the right protocols in place. These can include, but are not limited to, multi-factor authentication and mandatory regular password updates. As a minimum, passwords should include a mix of lettering, numbers, symbols and cases. Passphrases are even better than passwords, as they can be harder to crack yet easier to remember.

 

7. Audit third parties

Criminals can gain access to your system through external parties such as suppliers if they can access your systems remotely. Regularly audit their cyber security protocols to identify and fix and insecurities through which hackers and scammers could access your business.

 

8. Train staff quarterly

Cyber security training should be a routine aspect of staff professional development. At least each quarter, train staff about the latest threats and run simulations to identify staff who are at risk of opening phishing emails.

 

9. Respond immediately to threats

Make sure to put protocols in place, so in the event of an attack, you can lockdown the system and stop criminals misusing it further.

 

10. Put in place a cyber insurance policy

Cyber policies can help businesses recover from an attack by paying for associated costs and helping to mitigate the effects.
Your broker can help you identify and address the cyber risks in your business. Talk to us today for your peace of mind.

You may also read:

 

Request A Quote
Midland Insurance Brokers Australia Pty Ltd
ABN 81 006 528 329 AFSL 238963
- Important information about insurance contracts
- Midland FSG
- Terms of Engagement
- Privacy statement and compliance
- General Insurance Code of Practice
- Insurance Brokers Code of Practice
- Complaints and disputes

Gary Perera

Senior Insurance Broker

With 35 years’ experience in the insurance industry, Gary is a Senior Insurance Broker at Midland with extensive knowledge across a wide range of business sectors. He specialises in insurance for breweries, distilleries, cafés, restaurants, and manufacturing businesses, bringing a depth of practical insight to every client engagement.

Known for his thorough and considered approach, Gary takes the time to understand how each business operates before delivering clear, tailored insurance solutions. A committed professional, he has completed numerous industry qualifications and is a proud member of ANZIIF, maintaining his expertise through ongoing education and regular engagement with industry developments.

Outside of work, Gary is an avid sports enthusiast who enjoys running, football, and cricket. He remains driven by a simple principle: continuous improvement and delivering the highest standard of advice to his clients.

Angus Matheson

Angus Matheson

Senior Insurance Broker

With more than 21 years’ experience in the insurance industry, Angus is a Senior Insurance Broker specialising in Road Freight Transport insurance. He is recognised for his deep understanding of the transport sector and his ability to deliver tailored risk solutions that address the operational and commercial challenges faced by transport businesses.

Angus takes an empathetic, client-first approach, investing the time to understand each business, its priorities, and its risk profile before providing advice. A committed professional, he holds accreditations with NIBA, ANZIIF, CIP, and QPIB, and remains actively engaged with industry developments through ongoing education and professional involvement. His focus is on delivering reliable protection that supports business continuity and long-term confidence.

Sarah Grose

Sarah Grose

Senior Insurance Broker

With more than 17 years’ experience in the insurance industry -including 16 years with Midland - Sarah brings deep expertise and a genuine commitment to helping clients protect what matters most. Having held a range of roles across the business, including management positions, she has a well-rounded understanding of both client needs and the broader insurance landscape.

Sarah specialises in small to medium-sized business insurance, with particular expertise in the film and television sector, self-storage, and, more recently, breweries and distilleries. Her approach is focused on making insurance clear, practical, and tailored to each client’s circumstances. Known for her approachable and solution-focused style, Sarah builds long-term relationships grounded in trust, reliability, and understanding.

She holds a Diploma of Insurance Broking and remains actively engaged in ongoing professional development to ensure her advice stays current and relevant.

Andrew Woff

Andrew Woff

Senior Insurance Broker

With close to 20 years’ experience in the insurance industry, Andrew is a Senior Insurance Broker at Midland specialising in heavy vehicle and equipment insurance, as well as cover for breweries and distilleries. He is particularly well regarded for his ability to secure tailored, cost-effective solutions for assets involving motors, wheels, or tracks, alongside his strong understanding of the risks unique to alcohol production businesses.

Andrew works with a wide range of clients, from sole traders through to large-scale operations, and is known for his clear communication, flexible approach, and commitment to personalised service. A QPIB-accredited broker and member of NIBA, he maintains high professional standards and remains focused on delivering practical, well-considered advice.

Outside the office, Andrew is a proud father of three and an active community volunteer. His interests in music, electronics, mechanics, and brewing reflect the same curiosity and hands-on mindset he brings to his professional work.

Scott McMurtrie

Scott McMurtrie

Senior Insurance Broker

Scott is a Senior Insurance Broker with over 12 years’ experience supporting Australian small and medium-sized businesses. He specialises in tailored insurance solutions across the Film & Entertainment, Transport, and Manufacturing sectors, delivering advice that reflects each client’s specific risks and operations.

With a strong focus on understanding how businesses work in practice, Scott provides clear, relevant cover recommendations backed by ongoing professional development and industry engagement.

Outside the office, he enjoys AFL, soccer, and music, and values building long-term client relationships founded on trust and reliability.

Beau Runnalls

Beau Runnalls

Senior Insurance Broker

Beau is a senior insurance broker at Midland with seven years of industry experience supporting businesses across Australia. He works across a broad range of sectors, with particular expertise in earthmoving, heavy equipment, trades, and the winery industry.

Known for his attention to detail and measured approach, Beau focuses on delivering insurance solutions that are clear, practical, and free from unnecessary complexity. He remains actively engaged in professional development, ensuring his advice reflects current industry standards and best practice.

Beau places strong value on collaboration and long-term client relationships. Outside of work, he enjoys golf and football, reflecting his team-oriented mindset and active approach both professionally and personally.

Alex Petkovic

Alex Petkovic

Senior Insurance Broker  |  Development & Service

With 27 years of experience in the insurance industry, Alex is a senior broker at Midland, recognised for his depth of knowledge, attention to detail, and straightforward approach. While he works across a broad range of businesses, he has a particular focus on clients in the construction and building sectors.

Committed to keeping insurance clear and practical, Alex places a strong emphasis on honesty and client-first advice. He remains actively engaged with industry developments through ongoing professional development and research, and is also a natural mentor, regularly supporting and guiding emerging brokers within the team.

Joshua-Kerr

Joshua Kerr

National Sales Manager

Joshua is Midland’s National Sales Manager, with more than two decades of experience in the insurance industry. His expertise spans a wide range of insurance solutions, with particular depth in the winery and brewery sectors.

Taking a considered, people-focused approach, Joshua works closely with clients to understand how their businesses operate and the risks they face, allowing him to deliver insurance solutions that are both practical and relevant. He is known for his ability to make complex insurance concepts clear and approachable.

Outside of work, Joshua has a strong connection to community, having spent several years coaching junior basketball and serving as Vice President of a children’s basketball club. Staying closely attuned to industry developments, he is committed to helping clients make informed insurance decisions that support their long-term success.

Justin-Lane

Justin Lane

Director

Justin is a Director at Midland and has been part of the business since 2003. With more than two decades of experience, he works closely with small businesses across Australia, helping them secure insurance solutions that genuinely reflect the way they operate.

Known for his practical, solution-focused approach, Justin places strong emphasis on clarity, reliability, and long-term client relationships. His depth of industry knowledge and consistent, hands-on service have seen him become a trusted adviser to many business owners over time.

Damien Lane

Director

Since 2001, Damien has been central to Midland’s evolution, bringing more than two decades of industry experience and a strong commitment to client-focused service. His expertise spans a wide range of sectors, with recognised depth in the brewery and distillery space.

Working with independent brewers across Australia, Damien helps clients navigate complex operational risks with practical, grounded advice. He is known for his industry knowledge, clear communication, and ability to build enduring client relationships.

linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram