Mark Farron: A Lifelong Tech Expert Helping Small Businesses Secure Their Future

Mark Farron is a seasoned technology and cybersecurity expert with decades of experience. He began his career as a programmer and has held various roles in software development, including executive positions. In 2001, Mark moved to Fort Myers, Florida, and founded his own network support company, focusing on operational technology, rather than software development. Today, he is semi-retired and works part-time as a consultant at the Small Business Development Center (SBDC) at Florida Gulf Coast University (FGCU), where he helps small and mid-sized businesses navigate the complexities of technology.

Mark holds a bachelor’s degree in computer science from NYU, an MBA from Columbia University, and numerous technology certifications. He brings a wealth of knowledge to the table, especially when it comes to cybersecurity and assisting businesses in protecting their data and systems.

What is Cybersecurity?

Cybersecurity can be complex, but it’s essential for anyone running a business. Even those without dedicated IT teams or security professionals can implement cybersecurity protocols to protect themselves and their business. At its core, cybersecurity can be broken down into some key components:

• Threats: This includes hackers or even internal users who may accidentally delete critical files or expose your system to risk.
• Assets: These are the items you’re trying to protect—your infrastructure (servers, phones, PCs), data, and personnel. Increasingly, businesses are concerned with safeguarding sensitive data, such as customer information, intellectual property, and employee records.
• Vulnerabilities: These are the weak points in your system—essentially, the back doors hackers look for to gain access. Even if your front door is secure, any overlooked weak spot could be an entry point.

What are the different types of Cybersecurity Controls?

Controls are the security measures and practices you implement to protect your assets. Examples include firewalls, antivirus software, and security protocols. When it comes to protecting your business, there are three broad categories of controls to focus on:

1. Policies and Procedures: Often overlooked, these are the rules and guidelines that govern how you and your employees interact with technology. This includes password requirements, multi-factor authentication, and safe email practices. Establishing clear policies around security is crucial, especially for small to mid-sized businesses.
2. Technology: This is the more obvious control, such as firewalls, antivirus software, and endpoint protection. These tools are essential in defending against malicious actors.
3. Security Awareness Training: A key defense is educating your team. Conduct regular training on how to recognize phishing emails, handle sensitive data, and avoid security threats. With the rise of AI and more sophisticated attacks, it’s critical that employees understand the risks and know how to stay safe.

What Are Practical Tips for Following Cybersecurity Procedures?

To ensure your business is truly protected, it’s vital to act on your cybersecurity procedures. Here are some key practices to implement:

1. Regular Patching: Keep your systems up-to-date by installing updates as soon as they’re available. Updates often contain security patches that close vulnerabilities, so delaying updates can leave your system open to attacks.
2. Backup Your Data: Ransomware is a growing threat. Protect your business by regularly backing up your data, ideally to a location that’s not connected to your network. This ensures you have access to critical information if your system is compromised.
3. Antivirus and Endpoint Protection: Ensure that all devices—computers, smartphones, tablets—are equipped with robust antivirus and malware protection. These tools help protect your endpoints from cyber threats.
4. Encrypt Sensitive Data: Encrypt important files, especially personal or financial data, so even if hackers access them, they cannot read or misuse the information.
5. Use Two-Factor Authentication (2FA): Enable 2FA wherever possible to add an extra layer of protection. This reduces the likelihood that an attacker can gain access, even if they have your password.
6. Be Mindful of Public Networks: When working remotely or using public Wi-Fi, always use a Virtual Private Network (VPN) to encrypt your connection. This protects your data from hackers who could be lurking on the same network.
7. Password Management: Consider using a password manager to securely store and generate strong passwords. Even though we are moving towards a passwordless future, utilizing these tools can streamline security and reduce the risk of password-related breaches now.
8. Training and Awareness: Ensure your staff is regularly trained on cybersecurity best practices, including how to identify phishing attempts and other social engineering tactics. People remain the weakest link in the security chain, so investing in ongoing training is essential.
9. Incident Planning: Finally, always have an incident response plan in place. Know who to contact if your business experiences a breach and how to respond quickly to mitigate damage.

What About Cybersecurity for Small Businesses and Home Offices?

Many small businesses or home offices lack the resources for a dedicated IT department. However, there are still cost-effective ways to protect your systems. For instance, Microsoft Defender, which comes with Windows, provides adequate protection for many small businesses. Additionally, a VPN and a password manager are affordable tools that can greatly enhance security for remote workers.

What is the Role of the Small Business Development Center (SBDC)?

Mark’s work with the SBDC at FGCU involves helping small businesses secure their technology and optimize their operations. The SBDC is a national organization that provides free consulting to businesses, from startups to those with up to 500 employees. Mark and his colleagues offer advice on technology, marketing, capital acquisition, and more, all at no cost to the business owners.

Through his involvement with the SBDC, Mark continues to help businesses navigate the ever-evolving world of technology and cybersecurity.

In conclusion, Mark emphasizes the importance of ongoing education, awareness, and planning in protecting a business from cyber threats. Whether you’re a small business owner, a remote worker, or part of a larger organization, adopting strong cybersecurity practices is crucial to safeguarding your assets and ensuring long-term success.