The cyber security of a company starts from its management

Cyber security is a business risk which is primarily the responsibility of the head of the company. The decisions and actions of the head of the company directly affect how well the organisation’s data, systems, and employees are protected.

Every year, dozens of Estonian companies fall victim to cyber attacks and fraud, resulting in work stoppages or financial losses. Most of these could have been avoided if basic security measures had been implemented.

According to the Information System Authority, Estonian companies suffer the greatest losses through invoice fraud, i.e. BEC schemes and ransomware attacks. Read more about fraud against businesses here: Fraud and attacks against businesses

Support tools and guides

• The Information System Authority has created the cyber security quick guide for companies, which helps companies improve their cyber security.
• Raise your employees’ awareness with the help of a free cyber test.
• The head of the company can begin by reading the cyber security recommendations for top managers.
• The Digiriigi Akadeemia platform offers a free online course entitled ‘Information Security for Managers’.

Cyber support for businesses

• The Estonian Association of Information Technology and Telecommunications provides a list of cyber security service providers who can assist with cyber security issues.
• The primary security measures of the Estonian Information Security Standard (E-ITS)  help to systematically assess and strengthen a company’s information security. The primary security measures are mandatory for all service providers listed in the Cybersecurity Act, unless otherwise specified in the regulation, but they are also suitable for for those who are not subject to the regulation.
• In addition, the E-ITS support tool ‘Võlur’ has been created.

Get started today

Strengthening a company’s cyber security starts with awareness and the implementation of basic measures. Every step, whether it is updating passwords, testing backups, or training employees, significantly reduces risk.