Five security fixes a small business can do in an afternoon
Not a framework, not a $20k audit. Five concrete changes that remove the attacks small businesses actually get hit by.
Small businesses rarely get targeted by anything exotic. They get hit by credential reuse, an unpatched router, and an invoice email that looked right.
- Turn on multi-factor authentication on email first. Email is the account that resets every other account.
- Get the router firmware current and turn off remote administration.
- Separate the till from the browsing. The machine that touches payments should not be the machine that opens attachments.
- Back up somewhere the ransomware cannot reach — offline or write-once. A backup on a mapped drive is not a backup.
- Write down who is allowed to change bank details, and require a phone call to a known number. This one change stops most invoice fraud.
None of this needs a consultant on retainer. It needs an afternoon.