20 FAQs on security and anti-virus software.
- What is business security software?
- What online threats does security software protect my business from?
- Can security software protect my business from all online threats?
- Can we get away without security software?
- Do we need security software for our mobile devices?
- How do we protect staff's personal devices if they use them for work?
- Does security software ever miss viruses or other threats?
- Does our server need security software?
- Do our Apple computers need security software?
- What types of security software are there?
- What is cloud security software?
- How can we tell if a security package is any good?
- Is free security software any good?
- How much does security software cost?
- Where should we install security software?
- Is it easy to set up security software?
- How much maintenance does security software require?
- Will security software slow down my computer?
- Can we run two anti-virus packages together, for additional protection?
- What happens if our security software finds a virus?
1. What is business security software?
Security software runs on your company computers and servers to protect you from threats including viruses, malicious software (like malware and ransomware), Trojans and other software that runs on your computer without your knowledge.
Security and anti-virus software is a key line of defence against cybercriminals. Although no anti-virus software is infallible, a security package from a trusted brand (such as one listed on the ICSA website) will identify and eliminate most threats to your business and its data.
2. What online threats does security software protect my business from?
Most security packages offer several functions which you can turn on or off individually.
These include core functions, which it's important to have:
- Virus protection. Your security software should scan your computer and monitor files for viruses, which may delete data or cause damage to your computer if left unchecked.
- Spyware, malware, ransomware and Trojan protection. Security software will monitor for malicious software that could be spying on your computer (including monitoring your passwords) and sending the details to cybercriminals.
- A firewall. A firewall monitors your network connection for unusual activity that might indicate malicious software sending data out over the internet, or hackers trying to break in.
Many packages provide additional protection, which can be useful including:
- Email protection. This blocks emails containing malware and ransomware, as well as watching for spam that could clog up your inbox. It can be effective, but many email services already provide similar protection. Staff can sometimes ignore warnings which can cause problems.
- Web browsing protection. This scans the web pages you visit, watching for malicious sites and blocking them before they cause harm. Many web browsers (including Firefox and Google Chrome) include these features.
- Website filtering. Some packages allow you to manage the sites your employees visit, by filtering internet traffic. You can configure the browser to stop staff visiting certain types of sites and from accessing inappropriate material and certain websites while working.
In an attempt to stand out in a crowded market, many security packages have long feature lists. However, it's the strength of the core protection that's most important.
In some cases, additional features may slow your computer without adding to your security.
3. Can security software protect me from all online threats?
No. Security software is essential, but it can’t protect you from every existing or emerging threat your business faces.
It also won't protect you from natural disasters (like fire or flooding), malicious actions by your staff (like stealing your customer database), human error (like deleting crucial files), equipment failure or theft, for example.
Security software is not infallible. While it can reduce your likelihood of being attacked, it can’t stop it completely so you, and your staff, must remain vigilant and act conscientiously.
4. Can we get away without security software?
No! You're taking a significant risk operating a business computer system or network without security software. You have a legal duty to ensure all data you process and store is protected.
5. Do we need security software for our mobile devices?
It depends. While malware targeting mobile devices (such as smart phones and tablets) certainly exists, the risks are currently quite low. Only a small fraction of mobile devices in use have ever been affected, or need it (for example, Apple’s iOS operating system has strong security features built-in).
Several companies offer security software for mobile devices. There are three main factors to consider in determining whether you need it:
- Do your mobile devices run Android? Android devices have historically been more vulnerable to threats because the Android platform has fewer checks and restrictions on software developers than iOS. That doesn't mean Apple devices are 100% secure.
- How much control do you have? If staff only use mobile for work, you can - and should - lock them down. If you enable staff use their own devices, the more vulnerable you and your systems are.
- What data is accessible on your devices? If you're working with sensitive information like customer data and payment details, then security software adds an additional layer of protection. Remember, you also have legal obligations when it comes to data protection under GDPR. .
6. How do we protect staff's personal devices if they use them for work?
If your staff use their own computers, tablets, smartphones or other devices for work, you must take precautions to keep your data and network safe.
Bring your own device (BYOD) poses unique security issues, because it's hard to apply company security policies to staff-owned devices. They will have employees' software, data and apps on them and are used personally as well as for business.
Before giving staff access to your systems through their devices, it's important to analyse the risk these devices pose and take appropriate precautions.
Depending on your findings, this could include installing security software, using mobile device management software to create a barrier between personal and business data - and almost certainly helping staff to understand the risks they face.
7. Does security software ever miss viruses or other threats?
Yes. the reality is that no security package is foolproof and new threats are emerging every day.
Some viruses and malware take specific steps to make themselves hard to detect. If you are unlucky enough to encounter a new piece of malware you might find your software doesn't recognise it or provide protection.
Here are some things you can do to protect your systems:
- Select security software that's ranked highly by an independent testing organisation like AV-TEST, Virus Bulletin or ICSA Labs.
- Set your security software to update itself automatically. This means you'll receive information about new viruses regularly and protection is automoatic.
- Ensure your security software regularly performs a full scan of every computer you have.
- Be on your guard. If your computer starts doing strange things, such as running slowly or deleting files, it could be a sign of a problem.
8. Does our server need security software?
Yes. Your server is a key part of your business IT system and is likely to hold valuable business data. Make sure your server is protected with security software and a strong firewall.
It's worth working with a proessional IT expert who can ensure your server security is up to scratch.
9. Do our Apple computers need security software?
Macs are safer than Windows computers and while security software is not essential, it’s worth considering adding extra protection to any computer that holds valuable data or are vital to your business.
Even if your Mac is safe, it could carry viruses which could be shared with other staff and customers. Thankfully, Mac security software should protect against this threat.
10. What types of security software are there?
There are two main types of software:
- Standalone software licences: Standalone software must be installed and managed on each computer. It's simple to download, set up and install, but staff can easily disable the software if they feel it's getting in the way or slowing down their systems. This could increase your risk of being the victim of a digital attack.
- Centralised cloud-based software: Cloud-based security software can easily be installed and configured in one place for any number of users. You purchase a licence for the software and ensure it is installed on each device. Centralised, cloud security solutions will give users access to a control panel where you can monitor and manage security protection across your business. The simple dashboard provides peace of mind that everything is protected. You can remotely schedule updates, and ensure that all users are running the latest version of anti-virus software.
Before selecting a security package, it can be beneficial to speak to an independent IT supplier or support company. They can discuss your options and help you to choose a security software platform that’s built for your business.
11. What is cloud security software?
Cloud security software provides the same level of protection as standalone security software installed on your computer. Instead of using your computer's processing power to scan your system, cloud security software runs its scans on remote servers, accessed over the internet.
Cloud security software places less of a burden on the processing power of your computers, which means they can run faster.
Cloud security packages are available on a subscription basis, with most enabling you to spread monthly payments across a whole year which can be better for cashflow and control.
12. How can we tell if a security package is any good?
Ensure that any package you are considering has been independently tested and approved by a trustworthy organisation. AV-TEST, Virus Bulletin and ICSA Labs all publish lists of software they have tested, including information about important factors such as virus detection rates.
It's sensible to select security software from a recognised software company. This should give you confidence that the software will continue to be updated as new threats emerge.
Companies with a good track record of providing anti-virus and security software include Symantec, Webroot, F-Secure, Trend Micro, McAfee, Panda, Kaspersky, Norton, Avast!, AVG and Bitdefender.
13. Is free security software any good?
There are a few free security packages on the market that provide effective but basic protection. The most popular are AVG Free, Avast! and Avira.
These packages aren't designed for businesses. They may take longer to set up and manage than standalone, centralised or cloud software. You may also find the features are limited compared to paid-for software.
Ultimately, you need to evaluate free security software in the same way as any other package. If it doesn't fit your requirements, free software may be a false economy.
14. How much does security software cost?
Prices vary, but expect to pay around £20 - £50 per device per year, including updates.
Always check how much it costs to maintain your subscription as prices can rapidly rise after cheap introductory offer periods come to an end. The majority of packages are now cloud-based and can be paid for monthly.
15. Where should we install security software?
You should install security software on every computer and server in your business that runs Microsoft Windows.
You should also consider installing it on computers with other operating systems (like Macs) and perhaps on mobile devices, too if they can access sensitive or personally identifiable information.
16. Is it easy to set up security software?
Cloud-based security software is relatively simple to set up. Centralised, enterprise solutions can be more challenging and involved and are best left to professionals.
When installing your security package, keep in mind that it takes longer than installing most software, because it will perform a full scan of your system during the installation process.
Centralised packages take more work, because you need to roll the software out to each computer in your business and set your protection preferences centrally. This can be tricky without some IT knowledge, so speak to your IT supplier if you need help.
17. How much maintenance does security software require?
As long as it's set up correctly, your security software shouldn't require any attention to keep functioning smoothly. Cloud-based software should automatically update without you – or your staff – needing to push a button.
However, you should perform regular checks to ensure:
- The package is regularly performing a full scan of your computers. Do this at least once a week.
- The software is installed and fully enabled. Sometimes staff members can be tempted to disable scanning if it slows down the performance of their computer.
- The software is regularly checking for updates. It should be set to do so at least once a day. In most cases, it’ll do this automatically.
If you have to pay for updates, make sure you know if and when your subscription expires and ensure you have a plan in place to maintain your protection.
18. Will security software slow down my computer?
In the past, anti-virus software was a drain on computing power and a drag to maintain and update. Thankfully, cloud-based packages require little to no processing power, so shouldn’t impact the performance or speed of your devices.
In some cases, anti-virus software can cause systems to slow down. The severity of this depends on several factors, including the specification of your computer and how many files and programs you have open and are using.
19. Can we run two anti-virus packages together, for additional protection?
This is not usually a good idea, as the packages may interfere with each other. Stick with one. It’s cheaper to buy, easier to install, and manage.
20. What happens if our security software finds a virus?
Your security software should identify and alert you if it finds something nasty. It should clean or remove infected files or data. How it handles an infection will depend on which software you have, the nature of the infection and how widespread the damage is.
Most security packages have a safe quarantine area into which they will move infected files or data. You can then check the affected files before cleaning the infection or deleting the data.
Severe infections can be harder to deal with, especially if they have compromised key system files. Most packages will help you understand your options, but sometimes you may have to speak to an IT professional to determine the best course of action.
