Nearly one in four small and medium-sized enterprises (SMEs) are concerned about how they can secure remote working environments for employees working away from the office.

This is according to a new study by Markel Direct, a small business insurer, which surveyed 500 SME owners to share their cybersecurity challenges.

Securing remote environments was a key concern for 23% of SMEs, ranking second place in the list of cybersecurity concerns for the future of SMEs, with the increased sophistication of cyber-threats firmly in the top spot with an overwhelming 62% of respondents reporting it as a concern.

When asked how those with remote workers ensure the security of company data when accessed by employees working from home, the majority (52%) said they use virtual private network (VPN) access, 48% train their employees on secure remote work practices and 46% have remote access policies and controls in place.

The study also found that nearly half (49%) of SMEs wouldn’t know what to do in the event of their business suffering a cyber-attack, and 69% didn’t have a cybersecurity policy in place.

Despite this, most UK SMEs are taking some proactive measures to prevent cyber-attacks, with 72% having invested in antivirus/anti-malware software. Nearly seven in ten make sure they regularly update their system software (69%) and 52% are making use of multi-factor authentication.

Recommended reading

• Report: Vulnerability Exploitation Surge Endangers Cybersecurity
• Half of SMEs Struggle to Keep Up With Security Threats
• IT Leaders Split on Generative AI’s Role in Cybersecurity
• Three Quarters of UK Firms Impacted by AI Cyber Threats

However, there is more that could be done, as 43% said that their employees are not trained on best practices and potential threats, and over half (53%) do not have cyber insurance in place in case of a breach, leaving their business vulnerable.

“Staying ahead of cyber threats is crucial for small business owners, especially as AI-driven attacks continue to evolve,” Rob Rees, divisional director of Markel Direct, said.

“Having a robust cyber security policy in place can help create a framework to safeguard against ongoing threats, whilst cyber insurance can help to protect your business in the event of a targeted attack.

“Almost half of SMEs reported not knowing what to do in the event of a cyber-attack – something that can be key to mitigating its impact.”