One of the biggest myths in cybersecurity is that small businesses aren’t targeted.
In reality, attackers often look for easy opportunities. Outdated software, unsupported systems and neglected websites can all present vulnerabilities.
Many cyber-attacks are automated rather than targeted. The software simply searches the internet for websites running known vulnerabilities. Your business doesn’t need to be famous to be found.
When the recent PHP security vulnerability hit the headlines, many business owners assumed it was a problem for governments, large corporations and major technology companies, many of whom took websites offline while urgent security patches were deployed.
But the reality is far more relevant to SMEs.
Our Story at Bryden Johnson
Like many businesses, we heard the news, followed the coverage and assumed our website would simply be protected.
Then we received a call from our web agency.
They informed us that our website required urgent PHP updates, alongside several other important website maintenance and security updates. Thankfully, they had identified the issue quickly and took the necessary action before it became a problem.
What the situation revealed, however, was something many business owners may not realise.
Hosting Isn’t the Same as Website Management.
Many businesses pay for website hosting and assume that means someone is actively monitoring, maintaining and securing their website.
In many cases, that isn’t true.
Hosting simply provides the server space for a website to exist online. Unless you’re paying for a managed support package, there may be nobody routinely:
- Updating PHP versions
- Installing security patches
- Monitoring website uptime
- Updating software
- Performing security checks
- Testing backups
For many organisations, these tasks only happen when something breaks.
Why This Matters
The recent PHP vulnerability highlighted just how quickly a technical issue can become a business issue.
If a website is compromised, businesses can face:
- Website downtime
- Loss of customer confidence
- Potential data security concerns
- Lost enquiries and revenue
- Emergency development costs
- Damage to online reputation
For organisations that rely on their website to generate leads, bookings, enquiries or sales, even a short period of disruption can have significant consequences.
Lessons Learned
The experience prompted us to review how our website was being managed.
As a result, we’ve now invested in ongoing website support and monitoring to ensure updates are handled proactively rather than reactively.
It’s a relatively small investment compared to the potential cost of a security incident.
Questions Every Business Owner Should Ask
The recent PHP issue serves as a useful reminder for every business owner. If you’re unsure about how your website is managed, ask your provider, and most importantly, don’t just assume someone is taking care of it.
- How often is our website backed up?
- Are backups tested regularly?
- Who updates our PHP version?
- Who updates our website software? How often?
- How often are security checks performed?
- What happens if our website is hacked or goes offline?
- Do we have a managed hosting or support package in place?
If you can’t answer those questions confidently, it may be time to review your arrangements.
Business Risk Doesn’t Start and End with Cybersecurity
Whether it’s operational resilience, technology risk, business continuity, growth planning or strategic decision-making, business owners are constantly balancing opportunities against risk.
At Bryden Johnson, we help organisations identify vulnerabilities, strengthen processes and make informed decisions that support long-term success.
If you’d like an independent discussion about protecting and strengthening your business, we’d love to talk;
📩 info@bryden-johnson.co.uk
📞 020 8686 0255
Find out more about our Business Advice services