One of the starting points, said Mr Lesh, is to ensure the business is running the most up-to-date versions of software and avoid using external Wi-Fi networks.

“There are weak points in the system, and public Wi-Fi networks are probably the weakest,” warned Mr Lesh.

“It’s also a matter of having apps that are well designed and secure and keeping an eye on which ones get hacked and making sure you get updated.”

Updating passwords regularly is also an important part of protecting against cyber attacks, he added.  

“Use statements as passwords, not names, places and dates of birth. [You should also use] two-factor authentication,” he recommended.

Any firms that don’t already have cyber insurance should strongly consider getting it, he said.

“If you don’t have it, you should, and you should have cyber and professional indemnity insurance together because having them separate could be a problem if there is a claim,” he warned.

Mr Lesh said it is also vital that staff receive training on cyber security.

“If you’re not training your staff, get online and sign up for someone to come and train your staff because they’re your weakest link – them clicking on a link is the weakest list link of your organisation,” he warned.