10 Cybersecurity Essentials Every Growing Business Needs

Cyber criminals increasingly target small and mid-sized businesses, assuming they have weaker defences. The good news: a handful of fundamental controls stop the vast majority of attacks.

The essentials

• Enforce multi-factor authentication (MFA) on every account
• Keep operating systems and applications patched automatically
• Deploy modern endpoint detection and response (EDR)
• Back up critical data and test restores regularly
• Use a password manager across the organisation
• Filter email for phishing and malicious attachments
• Apply least-privilege access and review permissions quarterly
• Encrypt laptops and mobile devices
• Train staff with regular phishing simulations
• Prepare and rehearse an incident response plan

Start with MFA and backups

If you only do two things this month, enable MFA everywhere and verify that your backups can actually be restored. These two controls alone defeat most ransomware and account-takeover attacks.

Get an outside view

An annual penetration test and security assessment helps you find gaps before attackers do. Our team can help you prioritise improvements based on real risk.