Research reveals widespread gaps in cyber preparedness – but a free workshop in Adelaide aims to help small businesses build practical plans to protect themselves.

South Australian small businesses are being urged to take a closer look at their cyber defences, with new research revealing many operators remain underprepared despite a growing threat from scams and increasingly sophisticated attacks.
The findings, commissioned by Optus ahead of Scams Awareness Week next week, found that six in 10 (61 per cent) South Australian small businesses believe they are too small to be a target, while almost three quarters (73 per cent) do not have a cybersecurity response plan.
Nationally, one in three (35 percent) small businesses surveyed reported having experienced a cyber incident, yet 52 per cent did not believe their business was a target.
The research found small businesses spend an average of just two hours a month on cyberattack prevention, while one in five (20 per cent) spends no time at all.
The situation is particularly concerning among sole traders, with 79 per cent reporting they do not have a cyber response plan and 38 per cent taking no action after experiencing a cyber incident.

Cybersecurity expert Karissa Breen says the scale and accessibility of emerging threats meant smaller businesses can no longer afford to assume they will fly under the radar.
“Cyber attacks aren’t slowing down: particularly with AI tools, they’re becoming more automated and opportunistic, and small businesses are increasingly being targeted as ‘low hanging fruit’,” Breen says.
“While many businesses have basic protections in place, overall security practices aren’t strong enough, leaving gaps attackers can easily exploit.”
For South Australian businesses, the research highlights some particularly significant vulnerabilities.
Only 7 per cent run staff cybersecurity training and the same proportion have a documented incident response plan. Fewer than half (41 per cent) use multi-factor authentication, while one in four (25 per cent) spends no time at all on cybersecurity each month.
Phishing and email scams are already making their mark, with one in five (21 per cent) of South Australian small businesses reporting they have experienced one.
Nationally, phishing and email scams accounted for 38 per cent of reported cyber incidents among businesses surveyed, followed by malware or virus infections and hackers impersonating a trusted contact, both at 24 per cent.
The consequences can extend well beyond the initial breach. Among small businesses that had experienced a cyber incident, 31 per cent reported losing time and resources during recovery, 21 per cent experienced reduced productivity because of system outages and 18 per cent suffered direct financial losses.
Yet some of the most common vulnerabilities can be addressed through relatively straightforward changes to everyday business practices.
“Common vulnerabilities that attackers typically seek out and exploit include reused passwords, browser autofill and minor password variations,” Breen says.
“Small businesses should adopt strong password hygiene, enforce multi-factor authentication and invest time in cyber awareness training to reduce these risks.”
For businesses unsure where to begin, Optus is bringing its FutureFit cybersecurity program to Adelaide during Scams Awareness Week.
The free, expert-facilitated workshop is designed specifically for small businesses and focuses on practical strategies that can be implemented without requiring extensive technical knowledge.
Participants will work through their own cybersecurity risks and leave with a tailored cyber plan designed to strengthen security practices, upskill staff and prepare for an effective response should an incident occur.
Optus local general manager, South Australia, David Johns says that now is the time for small businesses to be getting prepared:
“Scams Awareness Week is a timely reminder for South Australian businesses to take stock and check their systems, especially with the biggest trading period of the year ahead,” he says.
“Most small businesses don’t have an IT team to lean on, and no one expects them to be a cyber expert on top of everything else. We’re bringing FutureFit to Adelaide so local businesses can walk out with a plan that fits how they actually operate. You don’t need to be an expert to be prepared, you just need to start.”
Optus’ free FutureFit Cybersecurity workshop will be held in Adelaide on Wednesday, August 26 at the Terrace Hotel from 9am – 10:30am
Registrations are open at optus.com.au/cyberworkshop
Want to see more stories from InDaily SA in your Google search results?