INVICTA ANALYTICS LTD

                                                                                    Invicta Analytics Limited (IAL)
                                                                                  Cyber Security for Small Business
                                                                                                   April 2025
 
During the past few years there has been a world wide increase in cyber attacks, mainly against medium to large enterprises and governments. The disruption to normal business and governmental activities have become more noticeable, and the attackers have escalated their demands to restore access to the attacked business and governments. We are now seeing ransom demands in the tens of millions of dollars before the perpetrators of the cyber attacks will restore access to the attacked parties.
 
While small businesses are, in the main, not subjected to these attacks, and subsequent demands, it can only be a matter of time before the perpetrators of these attacks turn their attention to small business. Small business comprise over 90 percent of all business in most developed countries, and they are often the least protected of businesses, and ones least able to pay ransom demands.
 
While there are a number of government, and major industry, initiatives to assist the small business in preparing for potential cyber attacks, most owners of small business are not equipped deal with such attacks, nor are they able to understand how to prepare for them. 
 
Invicta with its many years of supporting small businesses has put together a “Preparedness” plan to assist small business to assess their vulnerability to such cyber attacks. The service details a series of steps to help thwart such attacks, and an ongoing review and update process to ensure the businesses are able to withstand any future attacks.
 
The plan comprise the following elements:-

• INVESTIGATE
• EVALUATE
• RECOMMEND
• IMPLEMENT
• REVIEW
• UPDATE

 
INVESTIGATE
This is a “where are you now” review of a client’s computers, networks, software and personnel awareness of the potential for cyber attacks. IAL will ask a potential client to complete a questionnaire that seeks to completely understand where the client is in their preparedness; and we will walk the customer through this process to ensure that we, and the client fully understand the need for this process.
 
EVALUATE
Once the questionnaire has been completed IAL will then begin the process of evaluating the current processes and systems against current industry standards. The objective is the production of a report that will summarize the current state of the client’s preparedness to meet any potential cyber attack.
 
RECOMMEND
IAL’s report will also generate a customer specific set of recommendations for the immediate implementation as well as a program to continue to monitor the clients on going operation to ensure that their protection systems are up to date. The report will also outline IAL’s recommendation for a quarterly review process as detailed below.
 
 
IMPLEMENTATION
Should the client wish to undertake their own implementation of the propose plan, IAL would be available to consult to the client should the client request it. However should the client prefer IAL to undertake the implementation of its recommendations, then IAL would, subject to an agreed fee, undertake the implementation of its report recommendation
 
REVIEW
The review process comprises a series of quarterly reviews undertaken by IAL to ensure that the customer is kept up to date with process and procedures, and to ensure that clients are following the plan outlined in the IAL recommendations.
 
UPDATE
As a result of the quarterly review process IAL will make any recommendation it deems necessary to ensure that the client’s systems are at their peak security. In addition, IAL provide a set of advice notes for any risk factors that might come up between reviews, and any immediate steps that the client will need to undertake to ensure the security of their system(s).
 
-----------------------------------------------------------------------------------------------------------------------
The Process

1. A prospective client decides that they wish to retain IAL to audit their current systems with respect to cyber risks etc., and as a first step, IAL and the client sign a mutual confidentiality agreement.
2. IAL sends the “Client Review Questionnaire” for client to review and arrange a mutual time for IAL to come to the customers premises to assist in the completion of the questionnaire.
3. IAL takes the completed questionnaire and begins the evaluation process, with client providing any additional information that IAL should require.
4. IAL, once the evaluation is complete, now prepares the “Client Report” for presentation at a report presentation meeting. The client will pay for the IAL service contracted for at this point.
5. If the client contracts with IAL to implement IAL’s recommendation, there will be a separate agreement covering the implementation process, this being subject to an additional fee.
6. The Review and Update service will be provided to the client on an annual contract basis, paid quarterly in advance. This will cover the quarterly review and update service, as well as any additional advice and notification given by IAL to the client to ensure clients ongoing security.

 
FEES Structure

1. Investigation/Evaluation/Recommendation               $250.00  + GST
2. Implementation of Recommendations by IAL            $  80.00 / Hour  + GST
3. Quarterly Review/Update + notifications as req’d     $100.00 + GST  per quarter

 
 

David F Stubbs,  Senior Analyst
Invicta Analytics Ltd
20 Derham Road, Te Horo 5581
New Zealand
+64-21-624-402
[email protected]

a 
PASSWORDS

The following is an example of Password generation.

For a much more detailed, and more advance  example of my EXCEL Password Generator, email me and I will send you a copy.
[email protected]
​Marking the subject line -  Password Generator.

Phrase	Code-1	Value
Time wasted is existence and used is life	B	2	Y	P1 B 2 Y

Based on the information below, please create a unique code for use by the password generator
First enter the Phrase that you will use to help you generate the password  __________________________________
​

​For example     P1 B 2 

Phrases
Phrases must contact 8 words minimum, and not more than 16 words.  Only the first 8 words will be used however 
PHRASES  -  Replace these with your own preferred Phrases

​Sample Phrases  for Example   
P1    -   Time wasted is existence and used is life
P2   -   Out of site and out of mind X  
P3   -   Now is the time for all good men to come to the aid of the party
P4   -   It was the best of times and it was the worst of times

Case Code

When used in Password  (  between A - D )
A  -     XXXXXXXX        (EXAMPLE   UULLUULL)
B   -    XXXXXXXX        (EXAMPLE   ULULULUL)
C   -    XXXXXXXX        (EXAMPLE   LLUULLUU)
D   -    XXXXXXXX        (EXAMPLE   UUUULLLL)

1st Char     2nd Char    3rd Char    4th Char    5th Char    6th Char    7th Char    8th Char
U = Upper Case,  L= Lower Case

Number of numbers   X  (between 1 and 4)
You choose the number of numbers and always use these values when adding numbers to the password
1      Number    X             (Example        5)                        
2     Number     XX          (Example     77)
3     Number     XXX       (Example   149)
4     Number     XXXX   (Example  1943)

Number of Symbols    X  (between W and Z)  
You choose the number of symbols and always use these values when adding symbols in the password
W  -   Non - Lave Blank
X   -   X        (example    %)
Y   -   XX    (example    $$)
Z   -   XXX   (example  $%$ )