• install internet security on your laptop, tablet or PC. Find out how to do this on the National Cyber Security Centre website
• do not reuse the same password on different online accounts
• review your social media privacy settings to reduce what other internet users can find out about you
• do not give out your personal information unless you are sure it is a legitimate source
• destroy receipts with your card details on and post with your name and address on
• keep a back-up of any important documents

• make sure all devices have up to date security software
• back up critical data securely
• identify and assess the local and national risks  

Business continuity plan

• create a business continuity plan using our business continuity plan template
• keep both physical and remote access copies of your continuity plan

Training

• train staff on good practice for passwords and safe data handling
• train and test staff roles during emergency scenarios
• the Business Continuity Institute provides professional training and practical resources to help your company prepare for and recover from cyber disruptions

Communication

• decide how to communicate with your staff, suppliers and customers
• keep your staff, suppliers and customers informed, for example, think about what you would do if you lost access to your customer contact information

Cyber security resources

• use the government-backed Cyber Essentials scheme to reduce cyber risks
• view the free Cyber Action Toolkit on the National Cyber Security Centre website which breaks down cyber protection into simple steps for your business
• read the business continuity management toolkit from the government website
• read the supporting SMEs with cyber security factsheet on the Business in the Community website

During a cyber incident

• stay calm and activate your continuity plan
• take photo and video evidence in case it is needed for your insurers
• keep stakeholders informed and decide what to pause or continue

After an incident

• review what worked and what didn’t work
• update your business continuity plan based on the lessons learned
• prepare for a new normal

If you come across anything you suspect might be linked to terrorist activity, tell the police:

• report suspicious activity in an emergency by calling 999
• for non-emergencies, use the online form on the North Yorkshire Police website or call the Anti-Terrorism Hotline on 0800 789 321

Threat levels

There are five threat levels:

1. Low - an attack is highly unlikely.
2. Moderate - an attack is possible but not likely.
3. Substantial - an attack is likely.
4. Severe - an attack is highly likely.
5. Critical - an attack is highly likely in the near future.

The level is set by the Joint Terrorism Analysis Centre and the Security Service, MI5.

Threat levels do not have an expiry date. They can change at any time as different information becomes available.

Follow the government's Run, Hide, Tell advice - for details visit the Protect UK website.

Run

• consider the safest options and escape if you can
• if there is not a safe route, you need to hide

Hide

• find cover from gunfire
• if you can see the attacker, they may be able to see you. Being hidden from view does not mean you are safe. Bullets go through glass, brick, wood, and metal. You must still hide, even if you are behind a locked door
• be aware of your exits and try not to get trapped
• make sure you stay quiet and silence your phone

Tell

• call 999 - what do the police need to know about what is happening?
• if you cannot speak or make a noise, listen to the instructions given to you by the call responder

• encourage people to be alert
• share emergency plans
• include details of Run-Hide-Tell in local safety talks 

• train staff to spot and report suspicious activity
• practice Run-Hide-Tell procedures
• be aware of Martyn's Law and your responsibilities for your premises and events - view the government's Martyn's Law factsheet
• read advice on protecting your business from terrorism on the North Yorkshire Police website