SMB Cybersecurity: 10 Mistakes to Fix
An SMB doesn’t need complex infrastructure to make progress. First, it needs to eliminate the common weaknesses that turn a contained incident into a major disruption.
Contents
1. 1 to 3: Passwords, MFA and shared accounts
Reusing passwords, skipping multi-factor authentication and sharing a single account make it impossible to control access. Use a password manager, enable MFA and assign each person their own named account.
- Unique passwords
- MFA on critical services
- Separate administrator accounts
2. 4 to 6: Updates, backups and testing
Postponing patches, keeping all backups in the same place and never testing a restore are three interconnected risks. Automate updates and keep an isolated copy with a verified restore.
- Device inventory
- Scheduled patching
- Offline or immutable backup
- Restore testing
3. 7 and 8: Phishing and excessive privileges
Annual training isn’t enough. Use examples tailored to everyday work and limit each person’s access to what is strictly necessary. Promptly revoke the permissions of people who change roles or leave the company.
4. 9 and 10: Vendors and incident response plan
A service provider may have access to your data or systems. Check their safeguards, control their access and plan ahead the contacts, decisions and communications you’ll need if an incident occurs.
- Designated owners
- Offline contact details
- Containment procedure
- Notification requirements
5. Priorities for the next 30 days
Start with MFA, tested backups, updates and an inventory of accounts. These measures provide a concrete foundation before a more comprehensive audit.
SMB cybersecurity check
- Enable MFA
- Test a restore
- Update all devices
- Remove unnecessary access
- Prepare an incident response plan