The holiday season is here, and business owners are adjusting schedules for extra days off at the end of the year. For many businesses, the weeks in December are filled with lots of work followed by much-needed downtime. Hackers follow a similar routine, only instead of downtime; they go into overtime during the holidays.

A recent survey released by NTT Com Security US, noted that cyber-attacks change course during the holidays. Instead of the steady barrage that is typically sent to servers, seven out of 10 of the top vulnerabilities were on end-user systems. The attempts to compromise end points and end users are higher than ever during the holidays. Truly, there is no rest for the wicked.

Chris Camejo, director of assessment services for NTT Com Security US explains the survey results, “As end users become accustomed to 24/7 access, they become targets of criminals who want corporate access and data, and end users often become the attacker’s entry point to the business.”

In another survey focused on retailers by Ponemon Institute, the respondents estimated the direct cost of holiday season cyber-attacks at around $8,000 per minute – or $480,000 an hour. These online retailers experienced as much as a 55% jump in online shopping volume via computer and mobile device during the holidays, and the majority, 64% of those surveyed, said they saw attacks and other malicious activity increase during the period.

Staying safe and secure during the holidays may be confusing for your customers. The spikes in traffic often set off false alarms for online retailers. Plus, end users may be easy targets and open direct pathways to enterprise assets. As a managed service provider, now is a great time to schedule one more conference call or meeting to check in with customers before the year closes. Find out what their security plans are for this very busy season and see if you can help them keep their businesses protected.

Security touch points to ask about are:

Do you have the most up-to-date software running on all the devices? Most organizations, especially small businesses do not stay on top of software updates. Be sure to ask about anti-virus and malware software, is it updated and able to identify the latest and most lethal attacks?

Can your security solution identify the difference between a legitimate traffic and a malicious threat? Traffic patterns change during the holidays. The security solution may need to be adjusted. Business owners will need support in making these changes so that they are ready for the higher volumes—and possible threats.

Do you have a response plan if you do experience a data breach? Key personnel may be hard to reach during the holidays. Help your customers create a plan that has a contact tree and immediate first responses.  

How can we fill any security gaps you have during the holidays? Find out what your customers’ fears are and help them identify their security needs. With some pre-planning you can make sure your customers experience the peaceful, happy holiday that everyone wants.