1. The Federation of Small Businesses Small Business and Phishing 9 th May 2007 Presented by Simon Swords Copyright © 2007 Federation of Small Businesses

2. A brief overview of small business and their I.T. usage Copyright © 2007 Federation of Small Businesses

3. How do you access the Internet / E-mail? Dial up2.8% ISDN1.5% Broadband96.2% Satellite0.2% Copyright © 2007 Federation of Small Businesses

4. Internet access speed 512Mb or below8% 1Mb11.6% 2Mb31.1% 8Mb or Higher31.2% Unknown18.1% Copyright © 2007 Federation of Small Businesses

5. Operating System Windows96.2% Mac6.8% Linux4.6% None of the above0.3% Copyright © 2007 Federation of Small Businesses

6. E-mail clients Microsoft Outlook41.8% Outlook Express37.7% Web mail (i.e. AOL)9.5% Google Mail3.7% Hotmail8.3% Other18.3% Copyright © 2007 Federation of Small Businesses

7. Phishing and Small Business Copyright © 2007 Federation of Small Businesses

8. Do you know what phishing is? No28.3% Yes71.7% Copyright © 2007 Federation of Small Businesses

9. Are you aware of the threat phishing poses? No3.5% Yes96.5% Copyright © 2007 Federation of Small Businesses

10. Are you concerned about the threat phishing poses to you and your business? No36.2% Yes63.8% Copyright © 2007 Federation of Small Businesses

11. Do you feel comfortable entering your personal details on a secure website No27.9% Yes72.1% Copyright © 2007 Federation of Small Businesses

12. Have you or any of your business associates been the subjects of a Phishing scam No87.8% Yes12.2% Copyright © 2007 Federation of Small Businesses

13. Did you report the scam to any authority? Yes55.6% No44.4% Copyright © 2007 Federation of Small Businesses

14. If you did not report the scam, why not? Did not know who to report it to56.7% Did not think the police would be interested 39.2% Did not think Trading Standards would be interested 26.2% Copyright © 2007 Federation of Small Businesses

15. Do you think you could be hoaxed again? No48.8% Yes51.2% Copyright © 2007 Federation of Small Businesses

16. Do you think Nominet and the like could do more to promote awareness of phishing? Who is Nominet?49.6% No8.5% Yes41.9% Copyright © 2007 Federation of Small Businesses

17. Who do you think should take ultimate responsibility for phishing? ISP’s56.9% Banks and other online organisations25.7% Nominet and ICANN18.4% Police19.8% Government24.3% None of the above11.3% Copyright © 2007 Federation of Small Businesses

18. Summary Technology is now catching up with phishing scams, and the latest browsers and e-mail clients provide built in anti-phishing technology This new technology must be promoted to end users to stop the phishing problem at the source The best protection from fraud is knowledge Small businesses are aware of phishing and the threat it poses, however they do not know how or who to report phishing attacks to With this in mind standardised phishing reporting procedures should be put in place wherever possible Nominet should not be involved in deterring phishing, however Nominet should use its position to co-ordinate the organisations that can make a difference Copyright © 2007 Federation of Small Businesses

19. Questions & Answers Copyright © 2007 Federation of Small Businesses

20. Simon Swords simon.swords@fsb.org.uk T: 0845 867 2845 Thank you Copyright © 2007 Federation of Small Businesses