That is why cyber security needs to combine good technology with good processes and regular staff awareness. The key is not to treat cyber security as something the IT department or IT provider deals with in isolation. No organisation can realistically guarantee that it will never experience a cyber incident, which is why incident response and recovery are just as important as prevention. That ability to respond quickly is important because the first few hours of a cyber incident can have a significant bearing on its eventual impact. One of the things we're keen to do at System Force is make cyber security easier for SMEs to understand.