Four out of five Brisbane small businesses have no formal cyber security plan, what workers need to know

Only 20% of Brisbane small businesses have a formal cyber security policy or staff training programme, according to industry data, meaning four out of five rely on staff instinct rather than informed behaviour. The statistic, drawn from managed IT security provider Computer One, underscores a vulnerability that workers, job seekers and professionals across the city need to take seriously.

The gap comes as cybercrime costs small Queensland businesses an average of A$49,600 annually, with four in five small businesses experiencing a cyber incident in the past year, according to IT support firm IT Start. Over 60% of Australian businesses face a security incident each year, with Brisbane SMEs confronting rising threats from phishing, ransomware, social engineering and AI-powered attacks.

Why workers and job seekers should pay attention

For employees, a lack of formal training means the person answering emails or managing client data may be the weakest link, and that can cost a business tens of thousands of dollars. For job seekers, awareness of cyber security practices is increasingly a differentiator in hiring. Professionals who can demonstrate basic cyber hygiene, such as recognising phishing attempts, using strong passphrases and enabling multi-factor authentication, are better positioned in a competitive job market.

The Queensland Government's 'Cyber Wardens' initiative and Brisbane City Council offer free resources and practical tips to strengthen local cyber security awareness. Council-run events, such as the 'Cyber Wardens: Practical tips for everyday security' workshop, are open to small businesses and their staff across the city.

October focus: building a cyber safe culture

October is National Cyber Security Awareness Month. The 2025 Australian Government theme is 'Building our cyber safe culture', with an emphasis on regular software updates, strong passphrases and multi-factor authentication. The campaign is backed by the Australian Cyber Security Centre and aligns with free training programmes available through the Cyber Wardens initiative.

For professionals looking to upskill, providers such as Lumify Work in Brisbane offer cyber security courses. The council also posts tailored advice for small businesses on its website, covering practical steps like securing Wi-Fi networks, backing up data and managing access controls.

The message from industry and government is consistent: cyber security cannot be left to instinct. With AI-powered attacks becoming more sophisticated, the cost of inaction is only rising. Workers, job seekers and professionals who invest time in basic cyber awareness are not just protecting their employer, they are protecting their own career prospects.