Cybersecurity Habits for Small Business Owners

Attackers often target small businesses because they assume defences are weak. The good news is that a handful of habits stops most common attacks.

Protect your accounts

• Use a password manager and unique passwords for every service.
• Turn on two-factor authentication for email, banking, hosting and your website admin.
• Limit admin rights so staff only access what they need.

Beware of phishing

Most breaches begin with a convincing email or message. Teach staff to check the sender, hover over links, and confirm unusual payment or password requests through a different channel, such as a phone call.

Keep software updated

Update operating systems, browsers, plugins and apps promptly. Retire software that no longer receives updates.

Back up properly

Follow the simple 3-2-1 idea: three copies of your data, on two different types of storage, with one copy off-site or offline. Test a restore occasionally, because untested backups are only hopes.

Secure devices and networks

• Enable disk encryption and screen locks on laptops and phones.
• Use a separate guest Wi-Fi for visitors.
• Avoid public Wi-Fi for sensitive work, or use a trusted VPN.

Have a plan

Write down who to call and what to do if an account is compromised: change passwords, notify your bank, restore backups and inform affected customers. A one-page plan reduces panic and damage.