Small business risk and cyber security: Are you prepared?

Oliver Holcombe • September 4, 2023

We’re all now only too aware of the risk of cybercrime after the well-publicised data hacks of Medibank Private and Optus.

Although these crimes involved large organisations, email scams, cyberattacks and online scams also represent a major risk for small businesses, particularly if you don’t have the funds or knowhow to strengthen your digital security.

Simple scams, big costs to business

According to the government’s Australian Cyber Security Centre (ACSC), small businesses in particular are at increasing risk of cyberattack, with 43 per cent of all Australian cybercrime now targeting these entities. A cybercrime is reported every seven minutes on average.

Cyberattacks often involve fairly straightforward scams. The ACSC highlights the example of a small construction business that received an email from a supplier saying they had changed banks and providing new account details. The construction firm didn’t call their supplier to check and twice paid an invoice for over $70,000.

The supplier was unaware one of its email accounts had been hacked and was sending out fraudulent bank account details. No funds were recovered.

New tools and training to counter threats

To counter growing cyber risks, the government allocated funding to upskill small business owners and employees in the May Federal Budget.

Run by the Council of Small Business Organisations of Australia, the new $23.4 million Cyber Wardens program aims to build small business cyber resilience by training 60,000 non-technical employees.

Cyber Wardens will help other employees prevent digital threats in a similar way to workplace safety officers.

ACSA has revamped its Cyber Security for Small Business Guide and accompanying video. One of its key recommendations is for small businesses to create a cyber emergency plan and test it using the ACSC’s Exercise in a Box tool.

The ATO is also emphasising the importance of business cyber security and has released a checklist of tips for businesses, such as turning on automatic updates.

Covering your risk with cyber insurance

Aside from the obvious inconvenience resulting from a cyberattack, small businesses also face other considerable risk exposures.

There is a mandatory reporting obligation under the Notifiable Data Breaches scheme requiring a business to report data breaches to the government and its customers if the breach is likely to result in data being misused.

The financial losses resulting from a cybercrime can also be considerable, making cyber insurance a worthwhile investment for many small businesses.

These policies cover a wide range of cyber-related financial risks, including losses suffered by third parties (such as customers), cyber extortion, public relations expenses, system and business interruption expenses, and data breach notification costs.

Cover for business continuity

Expenses resulting from a cyberattack are not the only potential risks a small business can face, making appropriate insurance cover invaluable if the worst happens.

While most small businesses have traditional business cover for building, contents, theft, commercial vehicle and general property, other business risks such as business interruption are often overlooked.

Management liability insurance protects the company and the people managing it against the risks and exposures of running the business, such as allegations of misconduct or legislative breaches.

It can also be worth considering key person insurance to compensate your business for financial losses arising from the death or extended incapacity of an important staff member. The lump sum payout can be used to offset costs such as recruiting a successor, or losses such as a decreased ability to transact business in the event of losing a key person.

Public liability insurance covers you and your employees for potential liabilities to third parties if your product or service cause bodily injury or property damage, while professional indemnity protects against liability for damages and legal costs arising from claims due to acts or omissions.

In a constantly evolving risk landscape, taking proactive steps within your business can work to reduce the likelihood of a cyberattack or limit damage should the unfortunate occur.

Source: Australian Cyber Security Centre

Do you know how your super is performing?

By Nikki Ashurst • November 2, 2026
Many Australians don't know how their super fund has performed or what it invests in. Are you one of them? Here's what to check and why it matters. Do you know how your super fund performed over the last two years? Many Australians don’t and are working towards their financial future without fully understanding one of their most important assets and without a clear plan for how their super may support them in retirement. That's not surprising, as many people view super as something that should run quietly in the background while they're busy with careers, families and everything else that life throws at them. But when you’re not sure what’s happening behind your balance, it’s harder to know whether you’re on track, whether your current approach reflects your goals or what opportunities might be available to help you make the most of what you’ve built so far. Your super isn't sitting in an account, it's invested Super is invested by a fund on your behalf across a mix of assets, with those investments working to grow your balance over time. Those include: Shares Ownership in Australian and international publicly listed companies. Their value can rise and fall, sometimes substantially over short periods but shares can provide capital growth over the long term. Property and infrastructure Real assets like office buildings, shopping centres, airports and energy networks. They can produce income and don't always behave in the same way as share markets, helping diversify investment holdings. Fixed interest and bonds Lending to governments and companies in return for interest. They can provide regular income and be steadier than shares, although returns and risk vary depending on the investment. Cash Generally, the most stable and lowest risk investment type. It can provide stability and faster access to money but typically offers lower longer term return potential. The investment option you choose determines the mix of assets held in your super based on your risk appetite. Most super funds offer options from conservative to high growth. If you’re young, a growth option with a higher exposure to growth assets like shares could offer higher returns over time – but it also comes with higher risk. As retirement nears, you might want to consider a more conservative approach with more defensive assets, like bonds for example to protect your savings. If you've never made a choice, you're probably in your fund's default option, which is designed to suit a broad membership. It’s worth knowing whether the mix you're in matches your circumstances and goals, including how far you are from retirement. Why performance alone is not a true comparison If you're thinking about how your super compares, returns are often where people start. The trouble is that a return figure means nothing without context: What it's being compared to Growth and conservative options invest differently and with different levels of risk. Compare like with like or the comparison may not be genuine. The comparison period A single year can be heavily influenced by short term market conditions. Super is measured in decades, so five, seven and ten year returns tell you far more about whether a fund is consistently doing its job, albeit not a predictor of future performance. Fees and tax Published returns should reflect investment fees, costs and tax but administration fees may be charged separately from your balance. Two funds quoting the same return can leave you in meaningfully different places once all fees are accounted for. Then there are the things that returns can't show you at all. For example, what insurance is attached to your account and what it's costing you, whether the fund offers guidance, tools and advice or simply sends a statement once a year. Another consideration maybe the level of support available when you need it. When comparing funds, it's worth looking at the full picture, including performance, fees, investment options, retirement support and member benefits. What today’s decisions mean tomorrow To understand how your super stacks up, start here: Find your investment option It's on your annual statement and in your online account. Look at what's in it Your fund publishes the asset allocation (shares, cash etc.) for each investment option. Check the long-term return for that option Focus on five and ten year returns, not just last year and compare them with equivalent options. Understand the total cost Add together administration fees, investment fees and insurance premiums as an annual dollar figure. Comparing super is about working out which option will perform best for you. Before you jump in, it’s worth understanding what's behind the numbers so you can make decisions based on more than a headline return. Knowing where you stand is the first step A super balance tells you where you are today. Understanding how your super is invested, how it compares and whether it's aligned with your goals helps show whether you're heading in the right direction. Source: MLC The information in this article does not take into account your objectives, needs and circumstances. We recommend that you obtain investment and taxation advice specific to your investment objectives, financial situation and particular needs before making any investment decision or acting on any of the information contained in this document. Subject to law, Capstone Financial Planning nor their directors, employees or authorised representatives gives any representation or warranty as to the reliability, accuracy or completeness of the information; or accepts any responsibility for any person acting, or refraining from acting, on the basis of the information contained in this document. Principal Wealth Management Pty Ltd trading as BMO Financial Solutions ABN 53 109 336 601 is a Corporate Authorised Representative (CAR 277821) of Capstone Financial Planning Pty Ltd ABN 24 093 733 969 Australian Financial Services Licence (AFSL) No. 223135.

The SMSF landscape is changing

By Jude Schofield • October 7, 2026
More Australians are choosing to take direct control of their retirement savings by establishing a self-managed super fund (SMSF) and according to the SMSF Association, Aussies now see their super as an important part of building and managing their overall wealth.