Five Cyber Security Checks Every SME Should Make

The recent Fortinet breach has highlighted the importance of maintaining strong cyber security across all businesses, regardless of size. Like many high-profile cyber incidents, it serves as a reminder that cyber threats continue to evolve and that organisations should regularly review their security measures to stay protected.

If your business uses Fortinet equipment, it's worth confirming that your systems are fully up to date and configured in line with the latest security guidance. If you're unsure whether your business uses Fortinet devices, the team at AdaptiveComms can help you identify your equipment and assess whether any action is needed.

Even if you don't use Fortinet products, the incident reinforces an important lesson for every SME. Cybercriminals don't always rely on sophisticated hacking techniques. They often take advantage of stolen passwords, outdated software, weak security settings or forgotten systems that haven't been reviewed for months—or even years.

Whether your business has 10 employees or 250, these five cyber security checks can help strengthen your security and reduce your risk.

1. Check Whether Your Firewall or VPN Is Exposed

Many businesses rely on firewalls, VPNs and remote access systems to support hybrid and remote working.Because these systems are often connected directly to the internet, they can become attractive targets for attackers if they aren't properly secured.

Review your firewall andremote access systems to ensure they:

• Are fully patched with the latest security updates
• Use secure configurations
• Show no signs of suspicious login activity
• Restrict unnecessary internet exposure

Even if your IT provider manages your network, ask them to confirm that these checks have been completed following the recent Fortinet breach.

2. Change Passwords and Enable Multi-Factor Authentication (MFA)

One of the biggest lessons from the Fortinet breach is that attackers frequently use stolen or reused passwords to gain access. In many cases, the passwords had been compromised previously but were never changed.

Every business shouldensure that:

• Administrator passwords are unique and secure
• Former employee accounts have been removed
• Passwords are updated regularly
• Multi-Factor Authentication (MFA) is enabled wherever possible

MFA remains one of the simplest and most effective ways to prevent unauthorised access, even if a password has been compromised.

3. Review Administrator Access

Businesses often accumulate administrator accounts over time, creating unnecessary security risks.

Ask yourself:

• Does every administrator still need full access?
• Have you removed former employees from the system?
• Can external suppliers still log in unnecessarily?
• Are administrator accounts monitored and audited regularly?

Limiting privileged access significantly reduces the opportunities available to cyber criminals.

4. Check Your Monitoring and Backups

Many businesses assume they'll know immediately if they've suffered a cyber attack. Unfortunately, attackers can remain undetected for weeks or even months.

Ask your IT provider:

• Are our systems monitored around the clock?
• Would we receive an alert if someone logged in from an unusual location?
• Are our backups tested regularly?
• Could we recover quickly after a ransomware attack?

Remember, backups onlyprovide protection if you can successfully restore them when you need them.

5. Don't Wait for the Next Fortinet Breach

The Fortinet breach won't be the last major cyber security incident to make the headlines. Cyber criminals constantly search for businesses running outdated software, using weak passwords or overlooking vulnerable devices.

The organisations that recover fastest, and often avoid attacks altogether, review their cybersecurity regularly instead of waiting until something goes wrong. Taking a proactive approach today could save your business significant disruption, financial loss and reputational damage tomorrow.

A Simple Cyber Security Review Can Prevent Costly Problems. But cyber security doesn't have to be complicated. By reviewing your firewalls, remote access systems, user accounts, backups and monitoring, you can identify many of the weaknesses that cyber criminals commonly exploit.

At AdaptiveComms, we help businesses across the UK understand their cyber security risks in plain English. Whether you already have an IT provider or manage your own systems, we can carry out an independent security review and provide practical recommendations without unnecessary jargon or costly disruption.

Prevention is always moreaffordable than recovery.

If you're concerned about the recent Fortinet breach or simply want reassurance that your business is protected, we're here to help.

Book a cyber security review with AdaptiveComms today. We'll identify any vulnerabilities, explain the risks clearly and recommend practical solutions to strengthen your security before cyber criminals have the opportunity to exploit them.

Contact us today to arrange your cyber security review.

📞 0808 281 0808

✉️info@adaptivecomms.co.uk

‍