Cyber Security

Cyber security is the practice of protecting computer systems, networks and data from threats such as hacking, malware, ransomware and phishing. Effective cyber security combines technology (firewalls, antivirus, encryption), sensible processes (access controls, backups, timely updates) and good everyday habits, so your business information stays confidential, accurate and available whenever your team needs it.

Cyber security matters because a single successful attack can mean financial loss, days of downtime, reputational damage and legal consequences under New Zealand's Privacy Act. Good security protects your sensitive information, keeps your systems and networks running, and preserves the trust of your customers — and sensible protection almost always costs less than recovering from a breach.

The cyber threats New Zealand businesses face most often are phishing emails, ransomware, malware, social engineering, business email compromise, denial-of-service attacks and insider threats. Most successful attacks start with a simple phishing email rather than sophisticated hacking, which is why staff awareness training matters just as much as the technology you put in place.

Phishing is an attack where someone impersonates a legitimate organisation — by email, phone or text — to trick you into revealing passwords, card numbers or other sensitive details. Avoid phishing by treating unsolicited messages with caution, checking the sender's real address before clicking links or replying, and never sharing credentials unless you are certain who you are dealing with.

Protect your computers from malware by keeping antivirus and endpoint protection up to date, installing operating system and application updates promptly, and avoiding suspicious links and attachments from unknown senders. For business fleets, endpoint detection and response (EDR) adds a stronger layer of defence, catching the threats that traditional antivirus software misses.

Disconnect the infected computer from your network and the internet straight away to stop the malware spreading, then run a full scan with your antivirus or EDR software to find and remove the infection. Change any passwords used on that machine, and if the infection persists, get professional help rather than risking further damage or data loss.

Protecting an organisation from cyber attacks takes layered defences rather than a single tool: regular security assessments, staff awareness training, network monitoring, strong access controls, encryption, tested data backups and a written incident response plan. No single product covers everything, so start with the controls that close your biggest gaps, then build up from there.

Contain the data breach first to prevent further damage, then assess what information was affected. In New Zealand, privacy breaches that cause or risk serious harm must be reported to the Office of the Privacy Commissioner, and affected people must be informed as the law requires. Once contained, fix the vulnerabilities that allowed the breach so the same attack cannot succeed twice.