HOWZAT

But, this is insufficient for businesses, however small, that intend to do their banking online. While it is absolutely vital that any business planning to do online banking makes sure that its systems are fully protected, it is also essential to control internal use of the computer and its banking systems. A significant amount of fraud is carried out by employees and, while this is may generally be less likely in very small businesses, the ease of online banking puts temptation in front of employees who may only have had to test their integrity when handling the petty cash.

Controls on access and transaction limits to the online system are vital from the very first day. All users who need to use the system should have their own system-log in details and all access must be fully audited so that, if things do go wrong, it is possible to find exactly what happened and when.

It is also necessary to think about the systems around the computer. The suppliers will provide useful automatic encryption software that ensures that passwords and the like are protected from interception. But crooks can, and do, use regularities in user systems to circumvent the high-tech stuff.

Passwords are often set to default – usually "password" - or are written down on a ‘stick-it’ note on the side of the computer where other employees or even visitors can see them. It is these types of user error that often give eavesdroppers access to otherwise encrypted data.

This was the case at Bletchley Park during the war where codebreakers often relied on wireless messages being sent more than once using the same key because cipher machine operators found it too burdensome to change the settings for each message. Security lies in the computer and outside it.

So, while online banking may seem much better than the dire service offered by some of the high street banks, make sure that you don’t fall victim to another set of individuals out to fleece you – cybercrooks.

The full procedure is undoubtedly beyond the resources of many SMEs, but it’s worth trying to work out how you can adjust it to meet your scale of business. It may, for example, be worth hiring someone from an existing partner, such as your Internet Service Provider or accountants, to come in for a day to help in questioning potential consultants or agencies. A couple of hundred pounds could save you tens of thousands.

While corporate giants such as BT may offer some useful techniques, another method is drawn from the humble homeowner. Just as you would ask a builder or double-glazing company to show you some satisfied customers before engaging them, do the same with potential consultants.

Depending on the size and cost of the project, do not be afraid to ask to speak to, or even visit, customers who have had the consultant or agency work for them. Go and look at how systems they have designed or implemented for other companies work in practice, see the limitations and the potential in action.

Finally, think about how you will manage any consultant or agency once you have engaged them. Who, on your behalf, is going to oversee the technical and business issues that arise during analysis, design and implementation? In other words, make sure that you manage the consultant and not the other way round.