--- title: Have you made these cyber mistakes? description: Common cyber security mistakes made by business. image: https://5954385.fs1.hubspotusercontent-ap1.net/hubfs/5954385/4-common-cyber-security-mistakes-to-avoid.jpg --- [Skip to the main content.](https://visits.com.au/insights/have-you-made-these-cyber-mistakes#main-content) [![VISITS\_LOGO\_WHITE](https://5954385.fs1.hubspotusercontent-ap1.net/hub/5954385/hubfs/VISITS_LOGO_WHITE.png?width=3941&height=825&name=VISITS_LOGO_WHITE.png "VISITS_LOGO_WHITE")](https://visits.com.au) [![visitslogoside\_400w](https://5954385.fs1.hubspotusercontent-ap1.net/hub/5954385/hubfs/visitslogoside_400w.png?width=400&height=103&name=visitslogoside_400w.png "visitslogoside_400w")](https://visits.com.au) - Products and Services - [Managed Services](https://visits.com.au) - [Onboarding](https://visits.com.au/onboarding) - [Optimised Technology](https://visits.com.au/optimised_technology) - [Hardware and Software](https://visits.com.au/hardware-software) - About Us - [Our Team](https://visits.com.au/our-team) - [Jobs](https://visits.com.au/work-at-visits) - Industries - [Financial and Capital Markets](https://visits.com.au/financial_and_capital_markets) - [Accounting, Legal and Insurance](https://visits.com.au/professional_service_firms) - [Architecture, Engineering and Construction](https://visits.com.au/aec_sector_it_services) - [Not for Profit](https://visits.com.au/nfp) - Resources - [News and Insights](https://visits.com.au/insights) - [Cyber Ebook](https://visits.com.au/executive-guide-to-cyber-security) - [Contact](https://visits.com.au/contact-visits) Search Book a Quick Chat Toggle Menu Search Toggle Menu **1300 300 979** Book a Quick Chat - Products and Services - [Managed Services](https://visits.com.au) - [Onboarding](https://visits.com.au/onboarding) - [Optimised Technology](https://visits.com.au/optimised_technology) - [Hardware and Software](https://visits.com.au/hardware-software) - About Us - [Our Team](https://visits.com.au/our-team) - [Jobs](https://visits.com.au/work-at-visits) - Industries - [Financial and Capital Markets](https://visits.com.au/financial_and_capital_markets) - [Accounting, Legal and Insurance](https://visits.com.au/professional_service_firms) - [Architecture, Engineering and Construction](https://visits.com.au/aec_sector_it_services) - [Not for Profit](https://visits.com.au/nfp) - Resources - [News and Insights](https://visits.com.au/insights) - [Cyber Ebook](https://visits.com.au/executive-guide-to-cyber-security) - [Contact](https://visits.com.au/contact-visits) - [Contact Us](https://visits.com.au/contact-visits) - [Online Store](https://store.visits.com.au) - [Customer Portal](https://visits.au.cloudradial.com) [Facebook](https://www.facebook.com/visitsit/?eid=ARD6OELkshh7thhgmiR37reGKYOFlrkVXSFnKQBoOm8ZoHLSg5OmOuRa8s8sD7JWzw5DdcpJC-b_lS2o) [Linkedin](https://www.linkedin.com/company/visits) [YouTube](https://www.youtube.com/channel/UCws1PqYQ1cgUkYKeJ_BG4NQ) ##### TechVantage Managed Services - [Strategy and Roadmaps](https://visits.com.au/business_growth) - [Staff Training and Empowerment](https://visits.com.au/productive_staff) - [Optimised Technology](https://visits.com.au/optimised_technology) - [Seamless Onboarding](https://visits.com.au/onboarding) ##### Services and Solutions - [Cyber Security](https://visits.com.au/cyber) - [Azure Cloud](https://visits.com.au/azure) - [Modern Workplace](https://visits.com.au/modern_workplace) - [Copilot and AI](https://visits.com.au/copilot) - [Telephony](https://visits.com.au/telephony) - [Networks and Connectivity](https://visits.com.au/networks) - [Projects and Consulting](https://visits.com.au/projects) - [Cyber Planning and Response](https://visits.com.au/cyber-planning-response) ##### Products - [Microsoft NCE Licensing](https://visits.com.au/microsoft-licensing) - [Hardware and Software](https://visits.com.au/hardware-software) - [VISITS Online Store](https://store.visits.com.au) ##### Our Company - [Our Team](https://visits.com.au/our-team) - [Our Customers and Partners](https://visits.com.au/customers_partners) - [Why VISITS](https://visits.com.au/why-visits) ##### Join our Team - [Careers and Jobs at VISITS](https://visits.com.au/work-at-visits) ![Industries](https://5954385.fs1.hubspotusercontent-ap1.net/hub/5954385/hubfs/Industries.png?width=400&height=400&name=Industries.png)   ##### Industry Specialisations - [Financial and Capital Markets](https://visits.com.au/financial_and_capital_markets) - [Accounting, Legal and Insurance](https://visits.com.au/professional_service_firms) - [Architecture, Engineering and Construction](https://visits.com.au/aec_sector_it_services) - [Not for Profit](https://visits.com.au/nfp) ##### Learn - [News and Insights](https://visits.com.au/insights) ##### Downloads - [Cyber Security Ebook for Executives](https://visits.com.au/executive-guide-to-cyber-security) - [Cyber Security Insights 2023](https://visits.com.au/insights_report_2023) 3 min read # Have you made these cyber mistakes? [![Picture of Adam Feldman](https://5954385.fs1.hubspotusercontent-ap1.net/hubfs/5954385/AdamFeldman.png) Adam Feldman](https://visits.com.au/insights/author/adam-feldman) : Updated on September 12, 2024 [cyber](https://visits.com.au/insights/tag/cyber) ![Have you made these cyber mistakes?](https://5954385.fs1.hubspotusercontent-ap1.net/hubfs/5954385/4-common-cyber-security-mistakes-to-avoid.jpg) Many people often talk about how cyber attacks have increased in sophistication, but what do we mean by this? Ransomware, for example, has actually changed. In the past, a ransomware attack merely encrypted files and held them hostage until the threat actor received payment in exchange for the decryption key. Today’s cyber criminals go further by stealing sensitive information and threatening to release it if they do not receive payment. In their report covering the [2021-22 FY](https://www.cyber.gov.au/about-us/reports-and-statistics/acsc-annual-cyber-threat-report-july-2021-june-2022#ransomware), the Australian Cyber Security Centre (ACSC) stated that every sector in the Australian economy experienced the impacts of ransomware that year. As the nature of cyber attacks changes and our dependency on technology grows, cyber security has moved higher on the priority list for many executives. With more companies prioritising cyber security, we are beginning to see many make the same mistakes. What are these common cyber security mistakes?   #### Leaving cyber security to IT We see many organisations leave the responsibility of cyber security to their IT departments. This mindset might have been justifiable a decade ago when cyber security was synonymous with firewalls, antivirus solutions, and routine backups. Today, the majority of successful cyber attacks and the ensuing damage largely fall beyond the purview of IT. Avoiding this mistake requires understanding the importance of distributing responsibility across the organisation. You should view IT as the foundation of your strategy, not the sole barrier against cyber threats. For a more resilient approach to cyber security, it's essential to instil a security-centric culture across all tiers of your organisation, ensuring everyone plays their part. Relying solely on IT can lead to a restricted viewpoint on possible threats and means potential risks go undetected. Furthermore, it can result in inadequate communication concerning security challenges and the most effective solutions, leaving parts of your business ill-prepared or uninformed.   #### Lack of visibility over risk Too many organisations lack visibility over their data and systems, leading to underestimating the ramifications of a cyber security attack or breach. We have seen businesses undervalue their data and fail to grasp the devastation that arises from unauthorised access to a critical business application. So, building a good cyber security strategy requires you to gain visibility over your entire organisation. When your company has mapped all potential vulnerabilities, you can begin building the appropriate strategies to mitigate these risks. Your organisation should take proactive steps to enhance visibility over potential risks. Regular risk assessments are pivotal in identifying and addressing vulnerabilities. Staying updated with the latest threat intelligence helps in preempting potential breaches. Additionally, fostering an environment that encourages transparent communication about perceived risks ensures that all stakeholders are aligned and vigilant.   #### Underestimating the attack surface Your attack surface includes every device connected to your business that could serve as a gateway for cyber threats – from personal computers, cloud applications, and websites to API integrations and IoT devices. Many organisations fall short in accurately gauging the attack surface, overlooking the breadth and depth of digital assets vulnerable to potential threats. What makes this such a common mistake? Too many leaders (especially those of small-to-medium businesses) hold the false belief that only high-profile organisations will experience attacks. To understand your organisation's attack surface, you must gain a holistic view of all digital touchpoints. It's also ideal to map external people and organisations accessing your data. For example, does a vendor have access to company information? Only by accounting for every potential weak link can your business minimise the attack surface.   #### Overestimating the effectiveness of cyber security controls When conducting cyber security audits for our clients, we have often discovered that their controls are not as robust as initially believed. This disparity between perception and reality creates the potential for unforeseen risks to impact the organisation. Overconfidence in cyber security measures often occurs for the following reasons: - Senior management does not have a clear understanding of the tactics leveraged by threat actors to breach the organisation. - Too much reliance on IT teams that lack the full breadth of cyber security knowledge needed or have not fully voiced their concerns. - Senior management could be under the belief that the business is unlikely to experience a cyber attack. To avoid this mistake, your organisation should commit to consistently testing and revising security controls to address evolving threats. Moreover, it's crucial to remain grounded by understanding the capabilities of your existing measures while acknowledging their limitations. This approach ensures a proactive and realistic approach to cyber security.   #### Conclusion Protecting your business from cyber threats goes beyond using the right tools and technology. You will need a holistic strategy that ensures all levels of the organisation take responsibility for cyber security instead of leaving it as a task for the IT department. You will also need to understand the attack surface, the effectiveness of your current cyber security controls and the threats to your business. Your organisation can bolster its defences by addressing these common cyber security mistakes. If you want more insights into addressing these mistakes, you can download a copy of our latest report on [Cyber Security Trends and Actionable Strategies](https://visits.com.au/insights_report_2023).   #### VISITS can help you avoid common cyber security mistakes If these common cyber security mistakes impact your business, VISITS can help. We recognise that not every organisation will have the resources to build an expansive cyber security strategy. Our approach optimises cyber security spending by starting with the threats most likely to impact your business and adding more security controls over time. [Learn more.](https://visits.com.au/cyber-planning-response)   - [Tweet](https://twitter.com/share) [![Defending against Cyber Threats - Webinar](https://5954385.fs1.hubspotusercontent-ap1.net/hubfs/5954385/Webinar.png)](https://visits.com.au/insights/defending-against-cyber-threats-webinar) #### [Defending against Cyber Threats - Webinar](https://visits.com.au/insights/defending-against-cyber-threats-webinar) ![Picture of Adam Feldman](https://5954385.fs1.hubspotusercontent-ap1.net/hub/5954385/hubfs/AdamFeldman.png?width=30&name=AdamFeldman.png) [Adam Feldman](https://visits.com.au/insights/author/adam-feldman) : 19 Aug 2025 In today’s volatile global landscape, businesses face an unprecedented level of cyber risk—especially those operating in sectors that attract... [cyber](https://visits.com.au/insights/tag/cyber) [Seminar](https://visits.com.au/insights/tag/seminar) [Read More](https://visits.com.au/insights/defending-against-cyber-threats-webinar) [![A new era in cyber security with Microsoft Security Copilot](https://5954385.fs1.hubspotusercontent-ap1.net/hubfs/5954385/AI-in-cyber-security-1.jpg)](https://visits.com.au/insights/a-new-era-in-cyber-security-with-microsoft-security-copilot) 1 min read #### [A new era in cyber security with Microsoft Security Copilot](https://visits.com.au/insights/a-new-era-in-cyber-security-with-microsoft-security-copilot) ![Picture of Adam Feldman](https://5954385.fs1.hubspotusercontent-ap1.net/hub/5954385/hubfs/AdamFeldman.png?width=30&name=AdamFeldman.png) [Adam Feldman](https://visits.com.au/insights/author/adam-feldman) : 5 Aug 2024 Cyber security professionals manage a barrage of tasks and alerts every day. Their role is a relentless balance between rapidly responding to threats... [cyber](https://visits.com.au/insights/tag/cyber) [Copilot](https://visits.com.au/insights/tag/copilot) [Read More](https://visits.com.au/insights/a-new-era-in-cyber-security-with-microsoft-security-copilot) [![5 ways to secure your business with Microsoft 365](https://5954385.fs1.hubspotusercontent-ap1.net/hubfs/5954385/5-ways-to-better-secure-your-business-with-Microsoft-365.jpg)](https://visits.com.au/insights/5_ways_to_secure_with_microsoft365) 1 min read #### [5 ways to secure your business with Microsoft 365](https://visits.com.au/insights/5_ways_to_secure_with_microsoft365) ![Picture of Luke Johnson](https://5954385.fs1.hubspotusercontent-ap1.net/hub/5954385/hubfs/LukeJohnson.png?width=30&name=LukeJohnson.png) [Luke Johnson](https://visits.com.au/insights/author/luke-johnson) : 13 May 2024 News headlines continue to report on cyber attacks experienced by large companies. Within these headlines, it’s easy to fall into the trap of... [cyber](https://visits.com.au/insights/tag/cyber) [Read More](https://visits.com.au/insights/5_ways_to_secure_with_microsoft365) Quick Links Quick Links - [90 Minute Free Consultation](https://visits.com.au/90_minute_free_consultation) - [News and Insights](https://visits.com.au/insights) - [Cyber Response](https://visits.com.au/cyber-planning-response) Get in touch Get in touch   1300 300 979   +613 7036 5300  [info@visits.com.au](mailto:info@visits.com.au) **  Head Office** Level 6, 34 Eastern Road South Melbourne VIC 3205 Customer Support Customer Support **Customer Portal** Access via Microsoft Teams or on the [hubl Website.](https://visits.au.cloudradial.com) **Chat** Chat to the Service Desk via the Customer Portal **Call** 1300 300 979 (Option 1) [mailto:servicedesk@visits.com.au](mailto:servicedesk@visits.com.au) ![ISO 27001 Certified\_col\_medium](https://5954385.fs1.hubspotusercontent-ap1.net/hub/5954385/hubfs/ISO%2027001%20Certified_col_medium.png?width=146&height=61&name=ISO%2027001%20Certified_col_medium.png)   [![visitslogoside\_400w](https://5954385.fs1.hubspotusercontent-ap1.net/hubfs/5954385/visitslogoside_400w.png)](https://visits.com.au) - [Privacy Policy](https://visits.com.au/privacy-policy) - [Terms and Conditions](https://visits.com.au/terms_conditions) © 2026 VISITS Pty Ltd [Facebook](https://www.facebook.com/visitsit/?eid=ARD6OELkshh7thhgmiR37reGKYOFlrkVXSFnKQBoOm8ZoHLSg5OmOuRa8s8sD7JWzw5DdcpJC-b_lS2o)[Linkedin](https://www.linkedin.com/company/visits)[YouTube](https://www.youtube.com/channel/UCws1PqYQ1cgUkYKeJ_BG4NQ) Return to top