Top 5 cyber security tips for businesses in 2025

The 2025 Hiscox Cyber Readiness Report – now in its ninth year – reveals just how much the risk has escalated, drawing on insights from nearly 6,000 small businesses across seven countries. This year’s findings expose the growing impact of cyber attacks, from financial penalties and operational disruption to rising levels of employee burnout.

With over half of respondents (59%) reporting an attack in the past year, the report highlights a troubling shift: cyber criminals are now targeting sensitive business data and demanding payment to prevent public exposure, often pricing threats based on potential reputational damage. These evolving tactics are revealing critical gaps in many businesses’ data loss prevention strategies.

Key data

Top 5 cyber security tips for businesses

1. Invest in continuous training: Human error is a leading cause of cyber breaches. Regular staff training helps identify phishing, scams, and suspicious activity early.
2. Use strong passwords and Multi-Factor Authentication (MFA): Enforce complex, unique passwords and regular updates. Adding MFA greatly reduces the risk of unauthorised access, even if passwords are compromised.
3. Keep your software and systems up-to-date: Outdated software often has security flaws. Set a routine to install updates and patches promptly across all devices and systems.
4. Back-up company data securely and test those processes regularly: Secure, frequent data backups – ideally stored offline or in the cloud – help recover quickly from data loss or ransomware. Regularly test your backup process to ensure it works effectively.
5. Be selective with access to data: Limit data access to only what employees need for their roles. Review permissions regularly, especially after role changes or staff departures, to reduce internal risks.

Staying ahead in the cyber security race

Whatever your company’s size and sector, it’s useful to think about contingency plans should the worst happen. What would you do in the event of a long-term blackout? How would your existing security systems cope with a significant hacking attempt?

Hiscox wants to help your small business thrive. Their blog articles will contain lots of useful information relevant to your growing business. But these articles do not constitute professional advice and must not be construed nor relied upon as such. To find out more on a subject we cover here, please seek professional assistance, specific to your circumstances.

*Any discount is only applicable to policies introduced via the Institute of Directors, whether existing or new, but could not be applied to policies that are being managed by an alternative third party such as an insurance broker.

Discount available for the lifetime of your policy applies on renewals while the Institute of Directors remains an Introducer Appointed Representative of Hiscox Underwriting Ltd.

Terms and conditions apply. For full terms and conditions see hiscox.co.uk/IoD/business-insurance.

The Institute of Directors is an Introducer Appointed Representative of Hiscox Underwriting Ltd. who is authorised and regulated by the Financial Conduct Authority. For UK businesses only.