Learn / Small business security
Small business security
Practical security for teams of 1 to 100 people, the controls that stop most attacks, without an IT department or a big budget.
Small businesses are attacked for the same reason homes are burgled: there is something worth taking and the door is often open. The good news is that a short list of habits and settings blocks the large majority of real-world incidents. These guides walk through them in the order that gives you the most protection for the least effort.
BusinessAccess control and offboardingGive every person only the access they need, review it regularly, and remove it the same day someone leaves.
BusinessAn incident response plan for small teamsA one-page plan covering who to call, how to contain a problem, how to recover and what to tell customers, written before you need it.
BusinessBackups and ransomware readiness for small businessesThe 3-2-1 rule, immutable and offline copies, and how to prove you can actually recover before you ever need to.
BusinessEmployee phishing training that actually worksHow to train a small team to spot and report phishing without shaming anyone, plus a simple monthly routine.
BusinessPayment card security and PCI DSS in plain termsWhat PCI DSS is, why it applies to almost every business that takes cards, and how to shrink your obligations by never touching card data.
BusinessSecure remote and hybrid workHow to keep laptops, home networks, video calls and cloud files safe when your team works from home, cafes and the road.
BusinessSecurity basics for small businesses: the top 10 controlsTen controls that stop most attacks on small teams, ranked by impact, with what each one costs in time and money.BusinessVendor and supply-chain risk for small businessesYour suppliers, IT providers and software vendors can be the way attackers get in. Here is a proportionate way to check and limit that risk.