NZ needs two-factor security to fight cyber crime

11 Apr 2019

  • 54% of SMEs concerned about cyber security
  • 29% have been victim of an attack

With nearly one third of local SMEs – potentially up to 150,000 businesses – having experienced a cyber attack and a majority of SME operators expressing fears about cyber security, leading accounting software provider MYOB is calling on the Government to address online security in the financial sector.

According to the latest MYOB Business Monitor survey of over 1,000 businesses nationwide, more than half of all SME operators (54%) are concerned about their cyber security, with 12% very concerned. Among businesses directly involved in the technology sector, the level of serious concern rises to 27%.

MYOB country manager, Ingrid Cronin-Knight said the level of concern expressed by SME operators reflects the growing risks of online attacks.

“Internationally we’ve seen a massive rise in risk, as antagonists – from amateur hackers to organised crime syndicates – look for financial gain, to create disruption or simply gain kudos among their peers by attacking websites, businesses and Governments,” she said.

“Clearly, in this globally connected world, New Zealand is far from immune. The sheer number of local businesses that have experienced some form of cyber attack is sobering.”

According to the Business Monitor survey, 29% of all local SME operators have been the victims of an actual or attempted cyber security breach from malware, an online or social media scam, hack, phishing attack or ransomware.

The sectors most likely to have experienced some kind of cyber attack are the professional services industry (36%), technology businesses (32%) and the finance and insurance sector (31%).

Time for NZ to step up

Ms Cronin-Knight said it is only by continuously monitoring and proactively addressing threats and vulnerabilities that organisations can mitigate these risks.

“Local business operators need the best tools available to help them manage the daily risks they face in protecting their valuable personal information and business data,” she said.

“That’s why we’re calling on the New Zealand Government to follow the example of the Australian Taxation Office and make two-factor authentication a mandatory standard for all online financial service providers.”

Instead of relying on just a password to determine a user’s identity, two-factor authentication uses an additional device, such as a text code sent to a smartphone app, or even a physical characteristic like a fingerprint, to provide another layer of access protection.

In its Operational Framework for Digital Services Providers released late last year, the Australian Taxation Office mandates the use of multifactor – including two-factor – authentication by cloud-based accounting systems.

Netsafe CEO Martin Cocker said Netsafe supports initiatives to increase the adoption of improved security practices such as two-factor authentication that will help Kiwis have a safer experience online.

“Two-factor authentication is a simple and practical measure that provides additional protection against hackers and fraudsters and decreases the risk of unauthorised access to online accounts,” said Martin Cocker.

“Recent research from InternetNZ shows that only 30% of NZ adults use two-factor authentication on any or all accounts where it is available.”

MYOB to make two-factor authentication mandatory

MYOB introduced mandatory two-factor authentication on all its products in Australia last year and made the same features available to New Zealand users on a voluntary basis. From next month, the company will make the system mandatory in New Zealand.

"This is just one of the advanced security and monitoring systems we have in place to protect our users,” said Ms Cronin-Knight.

“While we appreciate that it will create another step in providing access for users, making two-factor authentication mandatory is a massive leap forward in security by further reducing the risk of compromise.

“It’s an effective way to protect data, and a critical step in running a business responsibly.”

The authentication apps supported by MYOB are Google Authenticator (for Android and iOS), Microsoft Authenticator (for Windows), and Authy (for Android and iOS, plus any device running the Chrome browser). MYOB's implementation of two-factor authentication also supports authentication via email, but the use of a mobile app is recommended.

“As well as the heightened risks for business, international changes to data protection and privacy legislation means there is an increasing expectation that organisations take steps to protect personal and sensitive data,” said Ms Cronin-Knight.

“By making two-factor authentication mandatory in the areas New Zealand business owners need the highest levels of protection such as financial and accounting services, we can take steps to protect our economy from the growing international threat of cyber crime.”




For further comment or other information please contact:

Rebecca Huang, MYOB NZ Communications and Public Affairs Manager (Acting)

M: 021 112 2720 / E:


Gerard Blank, The Agency Communications Limited Director

P: 03 341 5841 / M: 0275 243 629 / E:


About MYOB

MYOB (ASX: MYO) is a leading cloud based business management solutions provider. It makes business life easier for approximately 1.2 million businesses across Australia and New Zealand by simplifying accounting, payroll, tax, practice management, CRM, websites, job costing, inventory and more. MYOB provides ongoing support via many client service channels including a network of over 40,000 accountants, bookkeepers and other consultants. It is committed to ongoing innovation, particularly in cloud computing solutions, and in 2015 was awarded the BRW award for the most innovative large company for 500+ employees and placed 2nd in BRW’s Most Innovative Companies Award list across all categories nationally.  For more information, visit or follow @MYOB on Twitter.

About the MYOB Business Monitor

The MYOB Business Monitor is a national survey of 1,000+ New Zealand small and medium business owners and managers, from sole traders to mid-sized companies, representing the major industry sectors. It has run since 2009, commissioned to independent market research firm Colmar Brunton. This most recent survey ran in February/March 2019. The Monitor researches business performance and attitudes in areas such as profitability, cash flow, pipeline, technology usage and the government. The weighting of respondents by both geographical location and sector is based on overall market proportions as established by Statistics New Zealand and is drawn from an independent survey group, which includes both MYOB clients and non-clients.