Most attacks on small businesses are not clever. They rely on a weak login, a missed update or someone clicking the wrong link. These five checks take about ten minutes between them, need no special tools and close some of the gaps attackers use.
five checks to run today
- Multi-factor authentication on email. Check that every mailbox asks for a second step when signing in, such as a prompt in an authenticator app. Email can reset almost every other account, so protect it first.
- Updates. Make sure laptops, phones and your router install updates automatically. If a device keeps putting them off, restart it today.
- Backups, tested. Pick one important file and try restoring it from your backup. If you can't get it back, you don't have a working backup yet.
- Admin accounts. List who has administrator rights. Day-to-day work shouldn't happen on an admin account, and anyone who has left should be removed.
- Phishing awareness. Remind your team of one rule: if an email asks for money, a password or urgent action, check with the sender on a number you already know.
what to do with the results
Fix anything that failed this week and write down what you found. Don't aim for perfect on day one. If you can only fix one thing today, make it multi-factor authentication on email, because one stolen password there can unlock a great deal.
Security is a habit rather than a project, so put the same check in the diary every quarter and see what has changed. Small, regular fixes beat a big clean-up that never gets done.
when a second pair of eyes helps
If a check raised more questions than answers, that is normal. Our free tech health check covers the same ground in more depth, and you leave with a short, prioritised list of what to fix first.
written by
Langridge.co team
managed IT, family office tech and business tools