Cybersecurity isn’t just a concern for big corporates. In New Zealand, small and medium-sized businesses (SMBs) are increasingly targeted by cyber threats - from phishing scams to ransomware attacks. The good news? You don’t need a massive budget to protect your business.

At CNX, we work with SMBs across Aotearoa to help them stay secure without breaking the bank. Here are five practical, cost-effective ways to boost your cybersecurity today.

1. Enable Multi-Factor Authentication (MFA)

If you do one thing this month, make it this. MFA adds an extra layer of protection by requiring users to verify their identity with something they know (password) and something they have (e.g. a code sent to their phone). Most cloud services, including Microsoft 365, Xero, your Banking app and Google Workspace offer MFA.

;

Why it matters:

Over 90% of account breaches could be prevented with MFA. It’s simple, free, and highly effective.

CNX Tip:

Enable MFA for all staff accounts, especially email, file storage, and finance systems.  

2. Keep Software and Systems Updated

Updates aren’t just about new features, they often fix security holes.

Make sure:

• Operating systems (Windows, macOS) are set to auto-update.
• Anti-Virus and firewall software are current.
• Cloud apps (like Microsoft Teams or SharePoint) are running the latest version.
• Microsoft Office and other common applications updates are on and completed frequently.

CNX Tip:

Set reminders to check for updates monthly. Or better yet, automate them where possible.

3. Train Your Team to Spot Scams

Your people are your first line of defence, and your biggest vulnerability. Phishing emails are getting smarter. A well-crafted scam can trick even tech-savvy staff into clicking a malicious link or sharing sensitive info.

What you can do:

Run short, regular training sessions (even 15 minutes a month helps). Share examples of real phishing emails. Encourage a “pause and check” culture - if in doubt, ask.

CNX Tip:

Utilise free resources from NCSC, Own Your Online and the government’s Keep It Real Online campaign to help educate your team.

4. Clean Up Your Digital House

Old accounts, unused software, and forgotten files can be a hacker’s playground.

Take time to:

• Remove unused user accounts.
• Uninstall software you no longer use.
• Review who has access to what - especially sensitive data.

Why it matters:

Minimising your digital footprint reduces risk and improves performance.

CNX Tip:

Schedule a quarterly “digital clean-up” day. It’s like spring cleaning for your systems.    

5. Have a Cyber Response Plan

Even with the best defences, things can go wrong. A simple plan helps you respond quickly and minimise damage.

Your plan should include:

• Who to contact (IT support, insurance, legal).
• What steps to take (e.g. isolate affected devices, notify clients).
• How to communicate internally and externally.

CNX Tip:

Use Own Your Online’s free incident response template as a starting point. And make sure your team knows where to find it.

Final Thoughts

Cybersecurity doesn’t have to be expensive. With a few smart steps, you can protect your data, reputation, and future on a budget. At CNX, we’re here to help. Whether you’re in Christchurch, Nelson, or anywhere in Aotearoa, we offer affordable IT support and cybersecurity solutions tailored to Kiwi businesses.