Tips on handling communications in the event of a cyber hack, and a weather warning for farmers in the South West
Today’s blog post covers a variety of topics, from how to handle communication with staff and stakeholders in the event of a cyber incident, to a stark weather warning for farmers based in the South West of England.
How to handle communications in a cyber incident
If a cyber incident affects your business, the way you communicate with your staff, stakeholders, customers and perhaps the media, can make a huge difference in the way your business is perceived.
In an incident, attention tends to focus on the technical aspects of putting things right and communication may be left as a secondary concern. With this in mind, the National Cyber Security Centre has published some guidance on how to manage your communication strategy.
Core principles
The guidance outlines three core principles to follow:
- Prepare your communications strategy in advance.
- Communicate clearly with different parties, and tailor your messaging where necessary.
- Manage the aftermath in the medium and long term.
The guidance breaks down these core principles and provides ideas for procedures you could put in place in your business.
To review the guidance, see: https://www.ncsc.gov.uk/guidance/effective-communications-in-a-cyber-incident
Construction firm director disqualified for eight years
Samantha Fairweather, the director of Essex-based Fairweather Construction Ltd, has been disqualified from serving as a company director for eight years, after it was discovered that the firm took in excess of £300,000 in deposits for home improvement projects it failed to deliver.
Fairweather, 53, had been the sole director of the company since its incorporation in 2014. Her firm, which marketed itself as a specialist in residential building projects such as window installations and conservatories, ceased operations in September 2022, owing creditors more than £700,000, including over £100,000 in unpaid taxes to HMRC.
Financial mismanagement and unfinished projects
Despite seeking advice from an insolvency practitioner in April 2022, when the company’s financial difficulties first became apparent, Fairweather Construction continued to accept payments from customers for new work it was unable to complete.
At the time of seeking advice, the company had already received more than £150,000 in deposits for incomplete projects. Nevertheless, a further £177,900 was collected from homeowners between April and the company’s liquidation later that year.
Insolvency Service investigation
The case was brought to light following an investigation by the Insolvency Service.
Neil North, Chief Investigator, said: “Samantha Fairweather knew, or ought to have known, that the company she was a director of had unpaid debts to HMRC and had been unable to fulfil its obligations to existing customers.”
The investigation also revealed Fairweather’s misuse of a £50,000 loan under the government’s Bounce Back Loan Scheme, which was introduced to support small businesses during the Covid-19 pandemic. Of the sum received, £11,000 was used to repay a director’s loan, a clear breach of the scheme’s guidelines, which required funds to be applied solely for the economic benefit of the business.
Disqualification
Fairweather’s disqualification, effective from 21 October 2023, prevents her from forming, promoting, or managing any company without the permission of the court until October 2032.
The case provides a reminder to thoroughly vet suppliers before paying over deposits. It also emphasises that directors are responsible for knowing the up-to-date financial position of their company, and must particularly take care about the actions they take when the company looks to be becoming insolvent.
If you are concerned about the financial health of your business, or you need help obtaining up-to-date financial information on your business, please feel free to get in touch with us. We would be happy to help you.
Cyber security for the legal profession
Law practices hold sensitive information and can often be the target of cyber attacks. The National Cyber Security Centre (NCSC) has published some specific cyber security tips to help barristers, solicitors and legal professionals in firms of all sizes protect themselves.
The tips they provide are good practice for businesses of all types. Here’s a summary of what NCSC suggests.
Backups are important
Regularly taking backups, and testing that you can restore them, allows you to be able to recover and access your client or customer data even if you are the victim of a computer virus or ransomware attack.
Update software
Software and operating system updates are important because they contain protection from viruses and other malware. Turning on ‘automatic updates’ on devices also removes the chance that you will forget to apply an update.
Encryption
Windows, Apple and Android devices all include free encryption that will stop a thief being able to access your sensitive data. Windows’ BitLocker, MacOS’s FileVault, and iOS’s advanced data protection for iCloud should all be switched on.
Use strong passwords and 2-step verification
Strong passwords are a must, and it’s particularly important to protect your email, banking and social media accounts. The three random words method or a password manager can help you create strong passwords. 2-step verification, also known as multi-factor authentication is also strongly recommended.
Use screen locks
Mobile devices should have their screen lock facility turned on, and you should use a passcode or fingerprint/face recognition to be able to access the device. Laptops and computers should also be locked when you’re not at your desk.
Firewall
When you use the internet or public networks, your device can be seen by others who are connected to the network. You should use a firewall to prevent any unwanted connections. Windows and macOS both include free firewalls.
Limit administration accounts
Administrator accounts will carry full access rights to make changes and access files. If a user doesn’t need these rights, then it is often better not to give them administrator access. Limiting the number of administrator accounts reduces the opportunity a cyber criminal has to access a user account and gain full access.
Antivirus
Make sure your antivirus software is turned on.
Track lost or stolen devices
Most devices come with the ability to remotely delete the data on the device if it is stolen or lost. Make sure this is set up properly.
Privacy permissions
Some apps will ask for permissions to access other apps, data, or system features. This may be a necessary part of the app’s function, however it could be exploited by a criminal. Therefore, make sure that staff only have access to the apps they need to carry out their work and avoid having redundant apps to minimise a potential problem.
To review the guidance in full, see: https://www.ncsc.gov.uk/guidance/cyber-security-tips-for-barristers-solicitors-and-legal-professionals
Devon and Cornwall farmers warned about heavier rainfall
During the Environment Agency’s Flood Action Week, which ran from 14 to 20 October, they issued a press release urging farmers in Devon and Cornwall not to take chances and gamble high-risk crops against a changing climate.
The Environment Agency is concerned about the effect heavy and prolonged rainfall is having on the farmland in Devon and Cornwall, especially in areas with steep slopes.
The wet year has delayed harvest time for some farmers. This has left less time available for planting cover crops that will act to bind the soil and reduce runoff during the winter’s wet weather.
When bare, compacted land is left after the harvest, heavy rain can mean runoff that will erode soil, pollute watercourses and flood roads and neighbouring properties.
Farmers are being asked to consider rethinking when planning their cropping for next year because of the changing weather climate, for instance, avoiding growing high-risk crops on fields that tend to be naturally wet and where compaction is inevitable and difficult to remove late in the year.
The Environment Agency have also encouraged using cover crops to avoid leaving compacted and bare soils over winter.
For full details on the recommendations made, see: https://www.gov.uk/government/news/devon-and-cornwall-farmers-urged-to-plan-for-heavier-rainfall