Blogs & Articles

The Broken Windows Theory to Cybersecurity for Small Businesses

author: Phil Aldridge



In today’s digital age, small businesses face a growing threat from cybercriminals seeking to exploit vulnerabilities in their online presence. Adopting the criminological theory of broken windows can serve as a powerful framework to understand and mitigate cyber risks for these enterprises. This theory, originally applied to physical crime prevention, states that visible signs of crime, anti-social behaviour and civil disorder create an urban environment that encourages further crime and disorder, including serious crimes.

The theory suggests that policing methods that target minor crimes such as vandalism, loitering, public drinking, jaywalking, and fare evasion help to create an atmosphere of order and lawfulness. The theory emphasizes the importance of addressing minor issues to prevent more significant problems. Let’s explore how small businesses can implement this theory to enhance their cybersecurity measures effectively.


  1. Identifying Digital “Broken Windows”:

Just as in a physical neighbourhood, neglecting small signs of disorder can invite criminal activities, in the digital realm, overlooking minor cybersecurity vulnerabilities may lead to more significant data breaches or cyber-attacks. Small businesses must proactively identify and address these “broken windows,” such as weak passwords, poor authentication strategies, unpatched software, and unencrypted data.

  1. Fostering a Security-Conscious Culture:

Embracing the broken windows theory involves fostering a security-conscious culture within the organisation. Educating employees about cybersecurity best practices, emphasizing the significance of reporting potential threats, and creating an environment where security concerns are taken seriously can prevent the escalation of security incidents.

  1. Regular Security Audits and Updates:

Small businesses should conduct regular security audits to identify vulnerabilities in their digital infrastructure. Ensuring all software, applications, and systems are up to date with the latest security patches is crucial to avoid potential exploits by cybercriminals.

  1. Secure Data Handling:

The broken windows theory emphasizes the importance of maintaining order and tidiness. In the digital landscape, it translates into secure data handling practices. Small businesses should implement data encryption, proper access controls, and regular data backups to protect against data loss or unauthorized access.

  1. Monitoring and Threat Detection:

Just as a vigilant community can deter criminals, implementing robust monitoring and threat detection systems can help small businesses identify and respond to cyber threats promptly. Intrusion detection systems, firewalls, and security analytics tools can help in this regard.

  1. Collaboration and Information Sharing:

The broken windows theory also highlights the importance of collaboration among community members to address common issues. Small businesses can benefit from sharing information about cyber threats, best practices, and lessons learned with other organizations in their industry or local business networks.

  1. Cybersecurity Training and Awareness:

Training employees to recognize phishing attempts, social engineering tactics, and other cyber threats is crucial. Small businesses can conduct regular cybersecurity awareness training sessions to keep their workforce informed and prepared to defend against evolving threats.


Applying the criminological theory of broken windows to cybersecurity can be highly beneficial for small businesses. By proactively addressing minor vulnerabilities, fostering a security-conscious culture, conducting regular security audits, and staying vigilant against cyber threats, these enterprises can significantly enhance their cybersecurity posture. In an interconnected world where cyber threats are ever-present, adopting this theory can be a proactive and effective approach to safeguarding valuable digital assets and ensuring the resilience of small businesses against cybercriminals.

If you are based in Australia and would be interested in a free cyber security audit to assess your organisation’s broken windows, or if you’d like to outsource cyber security, please contact us for assistance.


We can help you keep your organisation safe


Phil Aldridge is a Director at Fuse Technology. He heads up the sales and client engagement functions for clients in Western Australia. Phil has a wealth of experience gathered over decades of dedicated work in the IT industry in the APAC region.

Get in touch with Phil, fill the form below.