Small businesses are often targeted precisely because attackers expect weaker defences. The good news is that a handful of disciplined habits block a large share of everyday attacks.
1. Turn on multi-factor authentication
Enable multi-factor authentication (MFA) on email, banking, cloud storage and social media accounts. Even if a password is stolen, MFA makes it far harder for an attacker to log in.
2. Use unique passwords and a password manager
Reusing one password across services means a single breach can unlock everything. A reputable password manager makes long, unique passwords practical for every member of staff.
3. Keep software updated
Install updates for operating systems, browsers, website platforms and plugins promptly. Many successful attacks exploit weaknesses for which a fix was already available.
4. Back up and test restores
Keep regular backups of important data, store at least one copy offline or in a separate account, and test that you can actually restore from them.
5. Train your team to spot phishing
Most incidents begin with a convincing email or message. Short, regular awareness sessions help staff recognise suspicious requests, especially those involving payments or passwords.
6. Know who to call
Write down what to do if something goes wrong: who to contact, how to isolate affected devices and how to preserve evidence. Preparation turns a crisis into a manageable incident.