Five cybersecurity basics every small business should have in place

You don't need a big budget to stop most everyday attacks. Start with these five habits and fix the biggest gaps first.

Most attacks on small businesses aren't clever. They rely on a weak password, an unpatched laptop or a convincing email that someone clicks without thinking. The good news is that a handful of simple habits closes off most of that risk.

Here are five to put in place first, roughly in order of impact.

1. Turn on multi-factor authentication (MFA)

MFA asks for a second proof of identity, usually a code or an approval on your phone, as well as your password. Even if a password is stolen, the attacker is stuck.

Start with the accounts that would hurt most if lost:

Email (this is the key to every password reset)
Banking and accounting software
Cloud storage such as Microsoft 365 or Google Workspace
Social media and website admin accounts

2. Use a password manager

People reuse passwords because they can't remember dozens of different ones. A password manager remembers them for you, creates long random passwords and fills them in. Staff only need to remember one strong passphrase.

3. Keep everything updated

Updates fix security holes that attackers already know about. Switch on automatic updates for laptops, phones, browsers and your router, and replace devices that no longer receive updates.

4. Back up, and test the backup

A backup you have never restored is a hope, not a plan. Keep at least one copy that is separate from your main systems, so ransomware can't encrypt both. Once in a while, try restoring a file to check it works.

5. Help your team spot suspicious emails

Phishing is still the most common way in. Tell staff that it's fine to stop and check, and make it easy to report anything odd without feeling silly. A few minutes of practical training does more than a long policy document.

Not sure where your business stands? The free SecBridge Cyber Health Check takes about 10 minutes and shows your biggest gaps first.

Where to go next

Don't try to do everything in one week. Pick the one item above you're weakest on, finish it, then move to the next. If you'd like a second pair of eyes, get in touch and we can walk through it together.